Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7l-ZP7wPfnasArg46-WVNw3Ilo.roa
File: A7l-ZP7wPfnasArg46-WVNw3Ilo.roa (raw, json)
Hash identifier: cmllu2FiyH1bW0sfI6YcDYXWqhY3RGa6ixFU64oBqoE=
Subject key identifier: 03:B9:7E:64:FE:F0:3D:F9:DA:B0:0A:E0:E3:AF:96:54:DC:37:22:5A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 057E494B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7l-ZP7wPfnasArg46-WVNw3Ilo.roa
Signing time: Thu 31 Mar 2022 15:26:21 +0000
ROA not before: Thu 31 Mar 2022 15:26:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92162379 (0x57e494b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 31 15:26:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03b97e64fef03df9dab00ae0e3af9654dc37225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:d7:67:cf:9e:68:d1:59:f1:c7:66:42:95:
90:c1:21:9c:0c:bc:d0:a0:4e:3a:ed:d2:f6:64:2a:
f5:41:dc:eb:45:47:5a:cb:1d:04:3c:f3:6d:74:52:
3d:4e:cd:7b:c3:ef:97:aa:10:76:9b:51:8b:d7:12:
68:70:33:5d:77:d4:41:c2:a8:90:43:1f:41:92:7c:
f6:d3:6c:04:b7:96:ce:f5:41:a0:23:43:b1:93:57:
bf:dd:b5:94:a8:b7:7d:a5:d5:ad:93:29:56:e0:ff:
85:32:72:40:83:e9:e4:53:e3:29:7e:5e:63:6d:bf:
04:4d:d9:95:76:8c:60:02:c3:c3:76:14:b0:9f:e2:
e5:51:cf:52:94:54:00:cd:d4:8f:94:2d:c5:d4:6e:
02:b2:94:3d:27:d6:37:4d:71:f5:f2:69:55:b7:64:
81:f6:bf:fe:30:b5:ba:5d:99:1d:b2:cf:9a:9a:ca:
6f:b1:4c:a8:b4:d7:e9:5a:71:68:fe:ab:ce:78:e7:
5c:9f:66:3d:50:a5:f3:67:74:cd:c7:4b:b9:de:64:
f4:24:5b:b4:b8:41:5a:f1:36:aa:71:91:93:03:34:
cc:0a:df:d2:8c:10:db:88:44:67:6d:11:22:77:a3:
17:0c:e3:36:8a:6d:03:5f:66:5b:90:65:2a:49:c0:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:7E:64:FE:F0:3D:F9:DA:B0:0A:E0:E3:AF:96:54:DC:37:22:5A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A7l-ZP7wPfnasArg46-WVNw3Ilo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:f6:79:c6:af:67:5b:c7:dc:b4:b4:97:ae:c4:4c:ce:c6:76:
aa:3d:6c:56:49:af:c6:d6:03:d7:46:19:06:cc:1b:aa:b6:6b:
23:f1:69:1a:cb:1c:b0:a8:2a:11:09:ad:63:5d:6f:a4:0f:3a:
85:fd:0a:a7:c1:83:cd:33:00:bc:0e:4e:52:80:c7:a0:8a:3b:
3f:04:4f:81:f6:eb:b6:fa:f9:01:72:d4:5d:e4:98:90:b6:ce:
7b:9e:22:fe:d8:40:ad:1d:e8:ec:e6:51:cc:88:1c:11:49:ce:
e4:36:3f:13:84:2d:16:a1:ba:5b:73:d2:56:41:9d:1c:f7:6e:
49:04:3e:fa:ec:18:78:15:48:0a:78:14:0d:16:ef:ca:ee:f9:
8d:ee:e1:10:ac:a2:e4:6f:ac:33:b5:39:49:ee:ae:75:cc:4a:
ed:15:f5:03:6d:2f:03:c8:33:95:96:25:fc:c4:a8:56:05:30:
81:4a:97:81:b3:40:39:a1:92:92:4b:38:cc:8f:98:28:6f:8f:
2d:75:eb:39:ad:60:08:db:d9:1f:20:64:f0:ec:bd:30:6e:33:
7c:1e:a7:c1:e3:86:1d:d5:f4:f6:07:8d:e2:f8:db:4f:b5:b6:
a4:cc:0c:8e:a3:16:ce:30:fd:9f:6b:1c:a6:90:79:6e:e3:68:
d8:f6:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:28 2025 by rpki-client