Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa
File: 5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa (raw, json)
Hash identifier: 79yPoMuzbEoBpX/6bts48TGE+tA4bHJsg+H898egxx8=
Subject key identifier: E6:C5:FA:49:D5:61:22:EF:BE:16:FF:2A:F1:E1:19:64:68:6C:E8:75
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03F1D67B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa
Signing time: Mon 07 Feb 2022 00:55:31 +0000
ROA not before: Mon 07 Feb 2022 00:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66180731 (0x3f1d67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 7 00:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c5fa49d56122efbe16ff2af1e11964686ce875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:f1:88:b5:e8:c2:03:1d:43:2d:28:91:c8:
08:f4:cc:57:76:0d:50:3c:7d:91:5e:34:1f:08:c6:
c4:e5:4a:55:7b:a8:ef:8e:51:da:60:86:c5:09:94:
4f:61:05:fc:08:cd:14:cf:b7:13:9b:4a:33:d6:8e:
c4:72:aa:87:b3:b3:65:e4:53:ea:51:33:86:ec:71:
5a:43:61:8f:11:90:38:04:8c:ad:cc:21:f9:a4:89:
9d:3b:32:99:b8:4f:97:9c:ed:2e:f0:e0:05:06:3c:
d7:27:bd:a3:64:0f:a5:30:3a:46:80:2f:68:4a:b8:
39:b2:0b:50:bb:9f:be:91:25:c9:c9:4c:51:8f:15:
69:a7:d3:f8:ff:59:a3:46:44:c9:c9:42:a3:8e:9a:
65:3f:4b:fb:ec:6a:bf:a8:09:3b:dc:b3:46:b6:be:
d5:43:be:4c:5c:63:e1:b3:b9:9c:c0:69:75:ff:cd:
22:db:ff:e8:3a:dc:75:7e:cc:80:e7:76:c4:91:c4:
25:ef:70:5d:ce:33:40:a5:46:4d:36:07:e7:eb:28:
53:87:89:ae:9b:36:bc:e1:b3:ef:31:8c:94:07:d4:
55:72:b6:1f:39:0b:5a:48:09:b2:4d:85:7a:19:3e:
cf:0f:b5:83:7c:90:ce:fb:f6:80:87:4b:41:33:76:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:FA:49:D5:61:22:EF:BE:16:FF:2A:F1:E1:19:64:68:6C:E8:75
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
66:97:d9:34:35:b8:07:3f:c8:e1:1f:14:d3:a6:ba:3a:5d:b5:
8c:78:aa:ca:bf:b9:1a:ed:c6:1d:ec:b8:29:cb:00:90:68:42:
89:46:9f:f7:9b:73:dd:e6:ee:26:86:17:71:f9:e4:4c:7d:fd:
62:bc:ad:64:80:d5:dd:cd:1b:04:95:91:c1:cb:cd:37:d2:93:
16:16:f8:62:d5:78:8f:bf:bb:d4:bd:ec:7f:81:5e:91:18:8c:
24:ad:21:81:d1:e6:2e:e4:9c:08:3a:b0:0d:a3:e4:d5:49:0c:
d9:9e:d3:95:d4:ae:3e:e1:64:ce:94:ef:97:b1:e5:d3:cd:88:
2d:23:8a:3e:6e:c9:cd:0f:db:ff:50:16:84:f1:ab:2a:d3:1b:
34:ae:6f:82:d8:8b:3d:64:f1:f5:0c:3d:ed:28:64:5a:12:dd:
6d:0e:18:34:8f:57:25:c0:83:28:ee:d3:ed:08:95:d7:b9:b8:
2a:9a:1d:98:0c:21:26:fb:12:35:c7:11:71:13:9d:17:fb:75:
82:7b:96:b2:b4:19:7f:2b:62:d8:47:46:e7:6d:a0:8c:33:6e:
77:fd:5d:3f:57:e1:fe:60:87:7f:7e:df:55:6c:63:ee:0a:62:
c4:28:eb:6f:ff:69:dc:7a:1c:77:a0:ca:42:ca:12:37:2e:9c:
88:2a:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:44 2025 by rpki-client