Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Aw7CUmEu5SOTsIl_0uj_uyrslwg.roa
File: Aw7CUmEu5SOTsIl_0uj_uyrslwg.roa (raw, json)
Hash identifier: Gwyz6stCC3YfbG/WVZkNzTh7R78zJdjrEXnl+6rFqGk=
Subject key identifier: 03:0E:C2:52:61:2E:E5:23:93:B0:89:7F:D2:E8:FF:BB:2A:EC:97:08
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04AD22A5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Aw7CUmEu5SOTsIl_0uj_uyrslwg.roa
Signing time: Thu 03 Mar 2022 05:12:32 +0000
ROA not before: Thu 03 Mar 2022 05:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78455461 (0x4ad22a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 3 05:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=030ec252612ee52393b0897fd2e8ffbb2aec9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:b0:3b:a2:70:a2:67:26:e8:a9:cc:6d:51:
63:7a:39:e8:8b:77:8b:3e:0f:ca:d7:ce:ac:60:9a:
b1:68:f9:41:f8:2f:76:de:89:f2:a7:28:a0:95:71:
56:4f:f3:4e:c5:69:0c:62:b1:ea:ab:46:66:c1:9e:
30:1b:29:fe:fc:54:4a:5c:f6:30:d2:c0:f6:5e:71:
2c:c1:9b:02:20:e0:96:06:d4:cb:4b:d3:c4:ef:1b:
2d:39:fd:ee:4a:81:53:17:95:76:ca:8e:b5:29:37:
7a:66:84:48:0b:65:2e:c1:05:7f:ea:b4:44:09:e8:
6e:eb:3d:bc:93:23:5a:1b:03:e2:44:16:5e:73:7f:
70:68:af:a9:41:50:19:0c:0f:cf:97:6f:f0:ce:91:
7d:cd:3f:af:ed:03:0e:98:0e:ea:45:7e:b2:6e:0d:
b9:e3:dc:42:71:40:6c:4e:0f:d4:30:65:47:8c:a5:
62:da:95:1d:39:ff:7f:c8:ff:a7:d6:8f:8d:ff:df:
b6:bf:5e:2b:9b:97:ae:a7:0a:d0:5c:ec:3a:be:5c:
b9:3f:41:22:ad:5f:24:dd:f2:2e:ca:99:c6:fc:ad:
65:7a:a9:cd:37:60:b8:c7:4d:2d:10:9d:38:fb:8f:
37:a9:ff:63:ea:d3:c8:76:80:97:be:40:61:bd:b3:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:C2:52:61:2E:E5:23:93:B0:89:7F:D2:E8:FF:BB:2A:EC:97:08
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Aw7CUmEu5SOTsIl_0uj_uyrslwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
34:2f:4e:38:d4:ca:85:f3:fc:75:bf:f3:cc:68:82:97:7d:4d:
23:cf:f3:ec:d6:c9:8a:76:19:9f:59:a9:cf:7f:18:c3:b7:01:
7f:2b:93:d8:75:18:56:75:12:56:13:12:2a:d7:fd:0c:87:a3:
b3:88:61:ce:c7:fd:93:90:15:ae:b7:fa:fc:38:0b:e8:b0:7b:
b7:19:41:89:98:e4:c6:da:e6:28:6c:0b:59:1d:c9:79:98:26:
60:1c:0e:12:46:07:35:06:99:f5:49:69:17:be:e2:d0:1a:9d:
01:e7:67:67:41:4e:eb:ff:aa:af:f7:91:dc:15:d8:da:1f:8a:
9e:a6:02:89:3c:10:cb:5e:b9:44:fd:8c:a3:b5:41:6b:c3:ba:
c7:2c:ad:36:21:de:0f:51:ed:cc:46:a3:01:40:29:3d:2a:62:
88:c1:39:c0:4e:75:ed:a4:4d:fa:9c:04:a9:33:60:95:e1:3c:
33:a8:00:44:cb:fa:3c:a6:bf:ea:50:5c:07:d4:b0:b9:9b:80:
fa:bc:c6:c9:e0:f1:b9:20:46:33:c5:61:c7:2d:18:0e:5c:54:
b8:24:a9:04:08:ae:b4:0d:79:a4:e4:cf:db:97:4f:a1:8e:a6:
b0:d0:a1:df:a5:de:10:1c:c1:cb:17:2b:80:f4:bd:74:66:18:
0f:a0:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:40 2025 by rpki-client