Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4dAsTqbbGqDglTTDomPNd2wjMRI.roa
File: 4dAsTqbbGqDglTTDomPNd2wjMRI.roa (raw, json)
Hash identifier: SF1KJ82WzKN/2uvfFCsNxr8EY9wAd1GA9w1FagcsGRU=
Subject key identifier: E1:D0:2C:4E:A6:DB:1A:A0:E0:95:34:C3:A2:63:CD:77:6C:23:31:12
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04185B55
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4dAsTqbbGqDglTTDomPNd2wjMRI.roa
Signing time: Sat 12 Feb 2022 03:26:59 +0000
ROA not before: Sat 12 Feb 2022 03:26:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68705109 (0x4185b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 12 03:26:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1d02c4ea6db1aa0e09534c3a263cd776c233112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:61:db:d6:1b:13:89:96:7f:a9:25:d5:fa:
25:46:9d:56:7d:26:41:22:0e:5e:05:a9:20:13:f7:
d4:75:46:ac:51:5d:fd:2d:01:1e:a0:d5:3f:84:9c:
30:b0:69:4a:b5:c1:39:a1:cb:ea:09:fa:67:01:7f:
a6:15:2f:9d:dc:a5:05:7a:ee:02:c5:a7:4f:92:1f:
ed:3c:99:af:82:30:d1:b7:91:df:5a:0b:1f:54:20:
ba:2f:81:d9:d4:06:66:9d:2a:88:1e:60:45:ed:57:
8a:42:ee:12:72:17:c1:4c:26:34:56:62:41:55:5b:
b5:95:99:67:6e:48:cb:f5:48:eb:8a:28:7f:58:d5:
8e:90:d7:3d:7d:8f:9c:67:f7:62:3f:57:b3:d3:02:
ee:9d:7c:d2:e2:a6:05:08:8d:f7:ee:db:a4:7c:ea:
33:e3:c7:8d:00:99:78:e7:1d:db:ad:77:42:65:86:
d9:86:5f:59:e5:4b:5d:8b:9e:0c:48:4e:0f:05:ff:
6c:60:c6:da:4b:e7:62:96:7c:d9:62:64:aa:94:4b:
63:34:c1:cc:b4:b3:a6:f3:30:1b:ca:d3:c6:21:d4:
54:bb:f5:80:4d:a0:0e:74:73:6b:ac:5d:ed:59:ed:
6b:68:93:57:85:21:68:2c:1b:4f:c1:f1:d0:30:f1:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:2C:4E:A6:DB:1A:A0:E0:95:34:C3:A2:63:CD:77:6C:23:31:12
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4dAsTqbbGqDglTTDomPNd2wjMRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
78:fe:11:38:b5:93:76:0c:b5:62:2e:32:4b:d3:a5:7f:d8:70:
71:58:ea:60:db:2c:62:4b:5d:8d:a3:72:09:65:4f:e4:45:34:
81:4f:11:38:88:08:a7:2a:8d:7f:22:3b:a2:3e:8a:aa:d1:41:
39:1c:24:1e:19:66:08:86:f7:c6:d6:80:5b:23:22:5c:6c:65:
c0:25:de:33:77:3e:60:38:7c:a8:bd:32:7c:b8:8f:1f:fa:a9:
a2:63:9e:c8:e1:7f:6e:12:8f:35:0a:e5:5c:d3:36:8d:22:a2:
b8:74:1d:a5:1d:b5:2b:68:5f:9a:67:f0:fb:ab:fe:aa:a1:55:
97:aa:1d:d1:7e:58:52:65:14:95:0d:0a:03:c2:a7:3c:86:f2:
7f:f0:a2:ac:51:b6:5d:eb:f1:72:73:ed:60:b2:87:58:38:ec:
a6:65:10:aa:40:4c:0c:32:a2:0a:62:55:5b:8d:d2:b9:b4:5e:
cc:65:98:ef:41:3c:67:a3:e3:4d:6b:43:e4:3f:82:28:09:bb:
c7:5a:04:2f:2e:98:d5:38:c6:39:79:e3:5c:32:b6:b0:3c:a8:
7c:e2:11:be:d3:26:ed:b6:4e:77:e1:4c:9e:a4:66:8f:14:5c:
fb:90:52:e8:a6:65:d5:af:45:5f:b8:b7:37:8d:06:2f:2e:b4:
51:29:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:08 2025 by rpki-client