Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4SQ1wuSaFSMSVaoiZGEa6mU_218.roa
File: 4SQ1wuSaFSMSVaoiZGEa6mU_218.roa (raw, json)
Hash identifier: OyQ1M8x0RG17nO8Tbj+bAy0++2adPqqvVUfAuQixHhw=
Subject key identifier: E1:24:35:C2:E4:9A:15:23:12:55:AA:22:64:61:1A:EA:65:3F:DB:5F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08427244
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4SQ1wuSaFSMSVaoiZGEa6mU_218.roa
Signing time: Thu 09 Jun 2022 13:29:05 +0000
ROA not before: Thu 09 Jun 2022 13:29:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138572356 (0x8427244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 9 13:29:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e12435c2e49a15231255aa2264611aea653fdb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:f9:cb:37:91:14:8b:8d:0a:9b:22:e2:ce:
79:63:56:02:b6:02:86:1c:3e:c4:b8:42:ae:2e:d4:
0c:16:64:82:39:fb:b2:0e:ee:9f:db:60:6b:18:7b:
35:78:ca:36:81:15:e0:d4:27:50:00:3d:f2:c5:d0:
e4:60:ec:7d:41:fa:59:be:1b:49:64:29:b5:3c:0b:
d3:c8:ba:02:ef:f6:5a:26:df:84:73:d8:9d:09:4e:
16:49:63:7e:94:b5:de:39:2b:e8:ba:a3:c1:50:71:
e2:ed:cc:50:9a:1d:a1:7c:32:54:1e:17:e1:0b:e2:
a6:b2:0a:34:43:b4:c8:bc:83:b9:c4:7e:73:b5:3d:
aa:aa:e9:a2:68:58:be:84:21:98:b3:c3:c8:24:19:
b8:87:33:23:3a:d8:63:9c:75:29:6b:01:93:b5:ce:
aa:dc:d0:2a:97:6f:15:90:28:fe:18:47:86:30:73:
c8:69:d4:c4:9b:e8:0e:9a:15:3a:75:a2:b3:2f:78:
f1:1f:1b:c7:08:5b:64:e7:06:1a:4f:08:79:ec:bf:
8c:91:d0:d4:40:d6:cf:f4:93:6b:58:e8:2d:d3:ca:
e1:78:1f:e4:3f:4e:45:5d:8b:68:39:74:77:58:a1:
69:ab:54:0a:29:56:a8:28:ac:10:7e:11:ae:ea:00:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:35:C2:E4:9A:15:23:12:55:AA:22:64:61:1A:EA:65:3F:DB:5F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4SQ1wuSaFSMSVaoiZGEa6mU_218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
63:9f:81:f9:28:0b:84:c7:6c:8e:69:78:43:c7:2a:99:61:68:
04:23:01:36:5f:36:a0:7f:05:94:f5:2d:4e:6c:2e:9f:b4:12:
4b:3f:02:93:fb:96:07:17:0e:b5:92:b9:3a:ad:96:b4:09:f2:
de:3c:1a:75:ce:3d:5c:f6:d8:b1:87:8a:84:b7:bb:47:8e:64:
b3:02:d1:ad:4b:36:42:fa:c6:5f:83:f3:79:00:6a:cb:6d:50:
14:10:2f:4d:b7:68:ff:80:18:65:9d:48:af:81:1e:90:5c:e5:
60:8d:59:b7:7b:7b:d7:d9:6b:53:2f:09:1e:de:cd:cd:05:f6:
0a:8b:d6:ce:2b:3b:6f:92:c8:40:20:4f:21:77:ef:dc:88:d5:
5f:e1:21:1b:fa:20:72:c3:58:f1:b3:14:b6:d9:47:e0:45:86:
ec:93:51:fd:8e:c7:df:40:2b:6c:88:c6:af:5e:b8:f4:ea:60:
51:62:68:cb:26:a3:8e:df:fa:bf:b5:d1:83:89:70:2a:0a:ed:
bd:c3:71:8f:ff:80:35:bb:18:c8:ab:3d:1f:2d:73:3e:46:50:
f4:a7:97:8f:48:87:01:28:cb:7d:59:db:20:87:6d:9c:00:c5:
a1:ab:f8:47:61:ba:b4:87:47:41:03:fd:7f:5c:f8:15:1d:b6:
d5:fc:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:55 2025 by rpki-client