Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa
File: 9U1poOcTi5fBuWXLcMRCStmF9QY.roa (raw, json)
Hash identifier: EnKfanPKx1v8bdFglBZHvXxhGpoihGCiu7NED0VgKLU=
Subject key identifier: F5:4D:69:A0:E7:13:8B:97:C1:B9:65:CB:70:C4:42:4A:D9:85:F5:06
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08946E94
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa
Signing time: Wed 15 Jun 2022 12:38:44 +0000
ROA not before: Wed 15 Jun 2022 12:38:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143945364 (0x8946e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 15 12:38:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f54d69a0e7138b97c1b965cb70c4424ad985f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:97:d9:7e:5c:31:78:fe:dd:3d:2d:6c:84:
da:a3:ca:a3:92:14:e4:58:30:b1:a8:97:85:66:a4:
b6:6c:66:4b:19:e5:b6:b2:e1:ec:86:29:72:2d:83:
f9:0c:ff:c3:8d:ce:f9:03:cf:39:12:93:a7:04:41:
3d:c2:64:27:cb:f3:ee:93:a1:38:f3:13:87:09:32:
1d:af:3f:f8:7e:64:53:01:dd:3d:b8:d9:8f:5c:6d:
00:e7:85:10:4d:d1:37:1a:ec:47:06:62:df:48:d9:
7e:e8:39:90:f8:d3:fa:0d:d4:f4:d1:4e:f4:8e:83:
33:2a:5d:d6:35:43:b3:24:34:a1:c3:0a:da:d3:fe:
1e:4d:cb:e0:51:25:a8:7d:3b:46:24:3e:2a:a2:b0:
52:e5:04:35:08:5d:7b:3d:ae:63:80:4d:d2:b9:00:
fb:d4:7f:40:1f:bb:e4:3a:14:f5:e5:66:f7:98:6c:
9f:f5:a9:44:8e:53:59:3f:5b:34:67:bb:b3:7e:ea:
89:b2:db:70:7f:06:fa:8d:8a:f8:ca:b3:12:7b:cb:
09:a8:2f:60:23:09:65:76:39:8c:ce:a5:5a:62:bb:
58:89:a6:4a:39:76:84:97:01:43:a4:d9:6e:a2:c3:
7d:11:d1:be:07:93:b2:85:e5:ec:1e:3e:cd:fe:1b:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4D:69:A0:E7:13:8B:97:C1:B9:65:CB:70:C4:42:4A:D9:85:F5:06
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
45:27:83:d5:06:09:d0:b0:97:85:27:80:16:7b:f7:01:c4:f6:
40:eb:ff:fd:cc:07:95:f1:57:55:0c:b9:65:9d:b3:67:c2:bb:
7c:71:d5:72:e8:95:0f:c5:09:22:ac:6c:62:fe:f4:e7:00:7e:
55:b3:af:a1:43:82:df:72:26:34:d5:7a:b4:b6:fd:fc:10:33:
91:ac:cb:4a:6a:de:1f:ff:76:ca:ae:a0:6f:5f:65:d2:8e:c1:
05:71:c1:05:20:e8:63:6c:2b:b4:76:1d:11:30:c7:62:78:a9:
62:f6:db:a1:6d:58:d9:de:16:2f:d0:a6:c7:bb:4c:99:2e:15:
04:0c:80:54:9c:80:89:ed:c2:5a:bf:a6:20:86:fc:b1:87:0e:
e6:3f:8b:c1:61:89:6f:18:66:34:e6:fb:7b:04:96:7f:23:f3:
89:b3:a0:26:19:40:3c:0e:ab:e4:ae:27:bc:ae:fe:d5:42:13:
9b:18:c7:9a:4f:29:e0:1e:7e:7d:7c:b6:33:63:89:d0:81:ce:
25:fd:44:14:d9:53:da:b9:aa:5f:10:08:e8:3e:3d:c1:c6:ce:
a3:73:c0:33:a6:9b:9f:cf:c8:b3:73:cd:fc:e1:de:cc:89:ac:
03:a2:02:5a:d5:cb:d8:5d:0d:ef:fe:86:48:eb:2f:dd:78:2f:
85:a7:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:33:57 2025 by rpki-client