Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7O71aA2YSCGLKGqtRmqhwSXo_U.roa
File: A7O71aA2YSCGLKGqtRmqhwSXo_U.roa (raw, json)
Hash identifier: UsypydaKQFGKlfa+wLdlJMR+qpRpl60/RDjX6U7hplo=
Subject key identifier: 03:B3:BB:D5:A0:36:61:20:86:2C:A1:AA:B5:19:AA:87:04:97:A3:F5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05BBC5C7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7O71aA2YSCGLKGqtRmqhwSXo_U.roa
Signing time: Fri 08 Apr 2022 20:19:13 +0000
ROA not before: Fri 08 Apr 2022 20:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96191943 (0x5bbc5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 8 20:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03b3bbd5a0366120862ca1aab519aa870497a3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:5b:62:7b:73:51:3a:32:e8:61:f1:8e:1d:
5f:73:2f:3d:45:74:24:ec:a4:62:20:9b:2c:69:6a:
2f:03:90:73:80:36:26:52:b2:ec:32:a0:76:89:d7:
fd:5e:20:7f:9b:35:ac:04:18:0c:d1:06:41:1a:ab:
cb:cd:d6:96:03:d5:a6:f6:2b:8f:28:37:db:7a:d0:
1e:45:cf:6f:41:a7:dd:c5:ce:fa:af:93:10:2b:38:
7c:26:b5:58:ca:5a:52:a2:5b:9e:be:2a:f1:a3:b9:
c5:5f:8a:34:23:ca:ee:e5:d8:c1:df:ee:e4:89:09:
a3:e1:04:e6:1c:62:7b:3c:c7:16:26:5a:22:8f:c2:
65:06:1e:2d:71:b1:a5:3f:7d:48:60:ee:0e:81:3a:
86:83:71:d7:19:bf:cc:a6:4b:8e:be:98:48:d2:9a:
be:65:e0:b2:d5:84:c7:d9:f6:61:23:da:a7:0a:08:
32:75:9a:34:0e:a0:37:31:98:60:23:94:d9:28:43:
16:80:ff:0c:f8:89:f5:02:9e:f9:f9:50:80:d4:87:
9b:82:51:d8:70:37:01:43:6b:93:7b:c6:1f:f3:10:
49:b9:41:28:8b:e8:f6:23:60:02:0c:e9:11:50:3b:
d5:28:a6:53:61:9e:a5:6a:8c:39:8c:4c:e0:79:bb:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:BB:D5:A0:36:61:20:86:2C:A1:AA:B5:19:AA:87:04:97:A3:F5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7O71aA2YSCGLKGqtRmqhwSXo_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
72:0e:da:7a:ce:5e:41:ef:bc:51:44:17:ef:60:e4:22:2a:f8:
5d:81:c4:02:0d:d0:a3:8e:42:77:c6:12:b8:a1:4b:e4:4c:b6:
11:6e:ea:42:b1:b7:23:c4:0c:eb:0f:30:8e:bf:a3:0e:74:fd:
17:85:05:39:de:ad:d4:46:b9:42:ea:64:22:b7:67:6f:6d:61:
b5:37:49:a9:42:e2:1e:5a:32:2c:12:a0:8f:00:6f:20:2c:0b:
b2:47:27:3d:10:5e:aa:95:4c:1c:ed:cc:b9:3a:e0:3d:3a:fc:
65:e2:ee:3f:16:c1:09:66:b7:3b:8a:53:f6:69:3f:6d:e6:8d:
cf:52:99:ef:93:61:1a:0a:d5:83:cb:06:d9:d1:2a:37:04:9a:
56:ed:3c:8f:de:a4:e3:03:37:4c:4c:df:2c:b2:05:60:65:24:
b3:1d:29:7f:97:d9:0d:6c:e5:38:ed:1e:5d:7f:a3:d9:19:0c:
4a:a3:6a:34:76:b9:42:5f:70:d5:fc:3b:4b:46:38:12:78:26:
44:6c:26:06:67:7a:0e:50:6a:72:23:56:28:cf:5b:32:cb:8e:
e2:cb:a8:bd:0a:f7:30:9b:3a:44:a5:9d:59:60:cd:ac:10:51:
1f:e3:e1:d1:e8:e1:27:ec:c7:3f:7d:67:cf:39:49:a0:66:67:
8e:99:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:25 2025 by rpki-client