Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa
File: BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa (raw, json)
Hash identifier: c4gOAicPGHtnoVB+aizXsJhcofFX/KwXvLhPzHAmPh8=
Subject key identifier: 04:22:DC:4C:C6:21:69:47:C1:FF:12:B1:7F:E4:99:F2:11:1A:21:40
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0829F1AE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa
Signing time: Tue 07 Jun 2022 16:35:02 +0000
ROA not before: Tue 07 Jun 2022 16:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136966574 (0x829f1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 7 16:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0422dc4cc6216947c1ff12b17fe499f2111a2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:c1:9d:94:33:18:b7:93:42:99:5f:27:3a:
fc:b0:81:cb:3a:50:e2:f9:05:4e:05:d8:ee:84:2b:
8b:c2:3a:83:33:f6:9e:6b:c9:07:10:0c:72:ca:18:
d9:53:57:bd:73:ae:a5:4d:ed:9c:5c:ef:b9:f9:1b:
0a:53:db:d0:2b:c9:44:e1:dd:17:de:3d:c1:10:aa:
bf:b9:35:69:3f:b9:dd:f5:60:20:9e:1c:0f:27:0e:
4f:97:f0:d4:2d:d7:59:11:93:0a:ea:29:0a:50:b7:
fc:cf:0b:b9:6c:02:b0:4e:1e:36:05:0e:8f:13:3e:
dd:38:3d:ac:4f:56:72:cb:5a:77:db:75:c0:80:0a:
f9:84:92:14:37:fc:1c:4f:d3:53:07:b8:1b:ba:da:
86:b6:d6:bb:b9:41:5d:42:4d:cc:e6:c8:2a:67:bd:
6b:47:a3:8e:3f:9f:08:ee:0f:df:1b:68:8a:47:da:
3c:74:85:32:db:83:24:d5:52:81:3e:2f:81:92:14:
a9:b4:a2:e7:8f:43:f0:67:00:34:59:8c:58:19:08:
b2:d1:84:4c:2d:aa:4c:2c:b5:13:2c:31:4e:ff:f4:
78:fe:ee:c8:77:04:8d:a7:21:14:e4:c1:30:f1:c3:
c7:62:08:1d:5f:71:6c:ac:47:87:fc:0c:4a:d5:51:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:DC:4C:C6:21:69:47:C1:FF:12:B1:7F:E4:99:F2:11:1A:21:40
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
69:73:50:d7:64:9a:f7:8b:34:31:6f:eb:2c:12:09:cb:19:6f:
15:3f:3e:83:ad:ac:d4:f7:94:c4:86:af:0e:de:34:ff:28:5e:
74:c5:ed:5a:6f:0d:11:b6:9d:09:8d:82:a2:90:32:5b:e4:21:
02:d7:93:45:47:f5:53:5b:94:2c:c2:8e:fb:1f:b6:7c:01:a3:
07:db:ea:17:a5:eb:20:7e:7f:57:2f:ec:62:4a:04:d7:df:f5:
8f:e2:a9:4a:a9:87:9e:02:8e:b1:59:1e:45:3c:fe:cb:69:7f:
54:9f:2c:38:67:64:37:08:69:62:6d:61:9d:a2:77:4c:b5:4f:
fb:2b:c4:17:09:67:a8:7e:bf:8d:20:88:0d:bf:f1:85:d0:86:
0b:2d:61:d4:79:95:3e:46:d2:2f:f2:f4:6f:a7:b5:e7:52:df:
5f:e6:cc:c8:e9:df:61:d1:9e:af:00:7a:05:ef:53:77:21:d3:
e7:fe:64:01:48:21:4d:9c:ca:10:a8:4f:e5:16:5d:6e:81:48:
64:7e:3f:82:c1:45:c7:5a:d4:0f:5f:ca:0a:68:cb:f0:63:8c:
10:86:a8:fd:15:2a:2c:be:24:8a:e8:d6:0a:89:51:e9:f1:7e:
d6:77:a9:20:81:f6:fc:8a:7f:28:58:47:da:c1:b0:18:a4:3e:
13:2e:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:21 2025 by rpki-client