Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/78DS8ZnuLVD4KQBsfTf8-XhXzN0.roa
File: 78DS8ZnuLVD4KQBsfTf8-XhXzN0.roa (raw, json)
Hash identifier: I2rCWYYdtvsRxOcqPmlF1rfJN/OsX7ZeDiIbVCLQfsk=
Subject key identifier: EF:C0:D2:F1:99:EE:2D:50:F8:29:00:6C:7D:37:FC:F9:78:57:CC:DD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04CA1AA9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/78DS8ZnuLVD4KQBsfTf8-XhXzN0.roa
Signing time: Mon 07 Mar 2022 04:03:29 +0000
ROA not before: Mon 07 Mar 2022 04:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80353961 (0x4ca1aa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 7 04:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efc0d2f199ee2d50f829006c7d37fcf97857ccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:71:5f:c9:f2:3e:ec:9b:0f:c7:1f:b2:fa:
01:f5:f8:db:be:29:b1:cf:08:2d:a8:1b:78:e6:3f:
20:a0:00:21:8f:f4:95:fc:b8:85:9a:70:85:f7:76:
89:a5:f7:82:3c:2f:a8:91:9e:fd:46:96:08:5d:10:
c4:d8:d9:54:4b:28:69:bf:05:c5:bb:e4:05:98:b5:
d8:d5:77:6b:d0:11:61:9b:7c:3c:34:86:5f:aa:52:
e9:a8:ed:56:6a:e4:28:27:e0:07:1f:53:11:c0:23:
44:47:65:85:ce:cc:f1:d7:b0:b8:d0:56:1d:2a:47:
b3:d7:68:d9:6e:60:74:55:07:b2:14:df:3b:4b:db:
2b:47:dd:9d:55:82:df:55:ce:e7:40:e5:83:c7:de:
a1:fa:eb:77:ef:67:03:3d:21:98:ab:fc:b9:8e:1c:
0e:1a:12:a2:8c:f0:cf:15:85:9d:bc:b8:a5:fb:2c:
f8:f7:57:52:05:a9:77:65:6c:ff:6f:f7:09:5f:8d:
8b:a3:9b:de:ae:5d:22:73:f7:dd:92:2f:0e:05:c4:
a8:7e:27:7a:30:39:95:5c:f0:45:12:68:0c:81:27:
a1:18:8d:0c:68:60:05:8d:ea:54:5c:a7:85:2e:3b:
dd:69:e4:5a:94:fa:6d:02:cc:30:7d:22:4f:39:02:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C0:D2:F1:99:EE:2D:50:F8:29:00:6C:7D:37:FC:F9:78:57:CC:DD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/78DS8ZnuLVD4KQBsfTf8-XhXzN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
4c:bb:c7:7e:87:10:77:35:e8:c7:04:02:98:cb:19:38:8e:eb:
10:f0:1c:98:df:55:a2:36:41:57:ca:da:76:16:fa:0a:17:f0:
f2:19:03:b2:35:a1:ee:b5:d3:48:f1:15:9e:64:14:cf:07:80:
80:22:25:84:ff:ec:47:1b:38:da:13:8d:3d:97:9e:00:36:17:
1f:10:75:ae:f9:4b:27:4f:3c:8c:b2:aa:37:16:9f:cd:61:25:
52:71:1d:de:24:87:3d:74:77:99:c9:bf:bc:1e:75:8f:65:30:
17:c0:8b:d0:40:10:92:2e:f4:a3:57:87:bc:95:6d:e8:ec:2d:
4a:f1:f4:c1:3c:bc:b5:70:c0:2f:7d:9e:3c:ec:4d:fc:c4:36:
b3:a9:30:cc:dc:6a:0e:49:d4:ee:d9:cb:db:d8:16:99:55:d9:
87:49:e0:09:f5:4e:d7:dd:29:a6:0b:de:2a:b2:02:3e:f1:20:
8f:b5:81:35:0f:0a:1c:ee:9e:00:c5:1b:d6:83:62:a1:11:d8:
5b:1c:28:3a:f9:39:7e:14:d0:bc:96:b8:fd:5c:f3:6a:23:8d:
33:a1:92:67:b8:28:98:71:f1:68:fa:40:ff:c4:78:b2:4f:9e:
ec:bc:c0:3b:cb:a9:81:50:29:bb:06:88:7c:c1:7c:3c:f3:d2:
35:c2:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:48:01 2025 by rpki-client