Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ah0BUnJwuqmYr9XhWRhRrW8LGiU.roa
File: Ah0BUnJwuqmYr9XhWRhRrW8LGiU.roa (raw, json)
Hash identifier: /ZqC8xCy7cjJ/Q6lv6DhdxTo7DeFtwoRyoi6Pnz5o88=
Subject key identifier: 02:1D:01:52:72:70:BA:A9:98:AF:D5:E1:59:18:51:AD:6F:0B:1A:25
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05133D56
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ah0BUnJwuqmYr9XhWRhRrW8LGiU.roa
Signing time: Wed 16 Mar 2022 05:18:38 +0000
ROA not before: Wed 16 Mar 2022 05:18:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85146966 (0x5133d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 16 05:18:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=021d01527270baa998afd5e1591851ad6f0b1a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:85:ef:13:63:89:bb:2f:55:2d:22:2d:0c:
3e:9a:a1:ba:9e:f8:42:93:fc:91:03:eb:3b:9c:c4:
70:f0:6b:e2:ad:e3:5d:b9:cb:47:9f:be:e6:13:33:
c4:1d:f1:7a:85:a3:94:6b:3c:f5:fc:2e:0a:cc:62:
4a:95:dd:d6:eb:a1:dd:8d:a0:96:ef:0b:66:2b:69:
7c:34:86:a4:4b:33:cf:03:ff:f7:df:9a:ed:c0:c7:
bc:89:86:92:77:c1:07:99:eb:d7:af:96:9c:d8:68:
fe:c8:b5:64:e8:d9:96:24:c1:60:49:1b:fc:61:77:
18:8a:cb:d2:7f:83:8c:13:0a:20:af:0e:95:ee:47:
c1:a6:ec:f9:70:ca:fd:7c:d6:11:58:4e:c4:16:b5:
81:65:e3:d5:21:d7:d6:e5:b0:fc:22:93:72:83:97:
69:7d:e4:38:d4:67:07:3f:4b:4e:30:52:34:c0:fc:
02:f2:b6:07:71:8b:09:f0:7d:c6:ce:13:59:5d:58:
6f:d6:16:2d:c0:e3:e5:1e:e2:e5:90:e0:d3:5d:cb:
4b:0c:db:6f:95:8c:95:d4:90:0a:bf:aa:7d:62:1d:
a9:b8:87:d4:88:58:0f:9f:62:e2:de:8b:61:05:58:
76:d3:65:b9:e9:a5:02:0a:86:db:7d:0f:d1:e5:14:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1D:01:52:72:70:BA:A9:98:AF:D5:E1:59:18:51:AD:6F:0B:1A:25
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ah0BUnJwuqmYr9XhWRhRrW8LGiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
7c:98:32:a5:24:73:96:c1:6d:db:07:d3:2e:65:55:b3:01:94:
91:42:b6:57:70:3f:97:39:2c:a8:72:44:0f:a5:9d:f6:32:53:
5a:dd:89:48:95:74:04:f1:cf:5e:0f:6b:30:f6:14:0c:81:a0:
fe:7d:ba:e0:7f:06:c0:e5:29:12:f1:5f:3e:60:7c:8f:a8:22:
bc:79:27:82:6a:9e:20:9b:74:67:88:73:af:9f:87:3d:1a:f3:
e3:70:1a:bd:a7:c9:7a:29:90:bf:3e:01:2c:54:25:9f:e8:1f:
ee:d4:75:2d:02:35:1a:49:d8:86:e0:37:66:4d:6d:ac:cb:71:
fb:5b:f1:16:c7:49:0c:75:47:7c:2b:c6:dc:ce:46:dc:ba:8e:
45:96:38:a4:5f:91:ab:f6:59:b5:b2:54:60:bf:9a:80:c8:9f:
8e:23:85:ed:89:2d:6b:ba:fb:f4:f0:4a:3f:f3:4d:1a:71:9c:
b2:50:15:0a:5e:a1:04:05:67:ff:1a:3a:f5:eb:49:a0:e3:a6:
ca:cf:3d:2b:d2:26:f8:77:d6:fb:05:74:ed:82:c8:67:40:36:
be:e9:e3:77:2c:92:a1:b8:59:ed:e4:c3:ea:41:6c:2f:1c:03:
6c:c4:d1:93:8b:14:fa:07:96:6e:88:b5:be:5c:e9:4c:63:4b:
78:07:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:56 2025 by rpki-client