Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6wzIFkDPSArPuSrQO_pnEoTw9H4.roa
File: 6wzIFkDPSArPuSrQO_pnEoTw9H4.roa (raw, json)
Hash identifier: w2Bm09912zORanL+s5eE6BU8appw9BsRNfYe+BnGQzw=
Subject key identifier: EB:0C:C8:16:40:CF:48:0A:CF:B9:2A:D0:3B:FA:67:12:84:F0:F4:7E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06F1CCFC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6wzIFkDPSArPuSrQO_pnEoTw9H4.roa
Signing time: Sun 15 May 2022 02:04:43 +0000
ROA not before: Sun 15 May 2022 02:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116509948 (0x6f1ccfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 15 02:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0cc81640cf480acfb92ad03bfa671284f0f47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:87:65:47:f9:d8:7d:58:f0:b5:80:7e:c0:
07:77:cf:ed:28:50:cf:53:29:80:e4:b0:9f:7a:f8:
42:fd:a0:38:40:30:53:21:9f:80:a3:50:ee:9b:66:
7d:1f:59:f5:8e:ed:ca:19:8c:70:d9:5f:8d:74:75:
f6:97:74:5d:96:e9:b5:8a:fe:d5:01:04:e5:98:15:
ad:94:5c:3d:13:d9:3a:14:bb:bd:1f:f0:73:5c:88:
ac:da:a1:a1:d4:b1:74:24:1f:6b:3a:4b:47:c9:80:
9e:a3:69:03:43:32:50:6b:bd:c6:4c:2b:f6:f8:45:
fd:b4:ec:69:8c:f7:4d:e4:69:c1:dc:40:a6:c1:7c:
1c:11:77:bd:95:28:7d:4d:88:10:9f:01:0f:41:2a:
c8:fd:9c:ed:44:f7:0d:1f:63:58:e4:4f:92:5c:4e:
4a:09:39:09:fd:b3:9a:e9:d9:72:c5:76:35:8f:d9:
30:e3:8e:f8:12:bc:b8:fc:97:46:85:b6:79:9c:14:
55:8f:fb:0b:ac:32:4c:57:2d:6d:1b:d2:f7:fa:70:
11:c8:02:c7:57:8d:48:e2:7d:02:44:0d:97:94:7b:
94:b7:31:89:59:d5:08:71:0e:34:3f:fe:6c:84:e2:
61:e2:15:bb:91:e2:d3:56:61:91:5e:1c:5f:35:aa:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:C8:16:40:CF:48:0A:CF:B9:2A:D0:3B:FA:67:12:84:F0:F4:7E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6wzIFkDPSArPuSrQO_pnEoTw9H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
65:03:8d:cf:f4:6f:d4:62:1a:de:63:00:1c:76:e8:99:ce:bb:
5e:20:be:c5:83:ee:f2:88:3f:48:f5:80:bc:8c:5a:47:cb:45:
41:0a:e2:bd:c1:2f:bb:a2:7f:8c:4e:71:09:46:30:80:e1:62:
67:4b:ff:25:6e:ad:21:17:fd:f7:a5:2b:1a:c1:5b:e6:0c:d0:
84:d9:b1:e1:8f:99:d2:9e:3a:65:36:d9:2b:d1:e9:35:73:a5:
58:87:cc:d7:07:17:a0:b2:16:15:f1:ce:e5:a6:39:b0:7e:05:
12:5b:5f:b3:50:94:c8:5a:de:62:bd:8d:f0:15:e1:af:b9:4b:
fe:fc:df:bc:28:90:6c:6d:ff:ab:91:62:eb:8d:5f:f4:26:e0:
b8:63:77:1a:f4:57:3e:84:90:12:39:4b:a1:36:c7:b8:34:00:
46:74:8a:bd:cb:fc:e9:d5:7f:de:d4:a2:79:34:18:51:6d:f5:
8e:4c:48:ec:34:71:90:77:85:f4:07:4e:3d:97:36:cb:98:5e:
1b:01:43:0a:42:86:cc:eb:3a:13:0d:48:18:c4:2e:5b:3b:76:
05:68:5b:79:88:de:d4:e2:63:01:f1:7b:69:c3:c2:3a:7d:38:
1d:d6:f1:d5:e1:ba:8b:8f:c1:93:d5:93:1e:a1:f8:da:df:bc:
19:7b:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:24 2025 by rpki-client