Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa
File: CJJiI7Mu2G46Xfke89V-ebteNYM.roa (raw, json)
Hash identifier: tBn14ryetv4z+FhoHqCZ5RpGnBf4xCO5+KFBSzCCURc=
Subject key identifier: 08:92:62:23:B3:2E:D8:6E:3A:5D:F9:1E:F3:D5:7E:79:BB:5E:35:83
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181CEF275FDD4493E4207587625BA18C3CD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa
Signing time: Tue 05 Jul 2022 15:20:05 +0000
ROA not before: Tue 05 Jul 2022 15:20:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:f2:75:fd:d4:49:3e:42:07:58:76:25:ba:18:c3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 5 15:20:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08926223b32ed86e3a5df91ef3d57e79bb5e3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:5e:6f:88:39:fb:73:cd:4d:b8:96:96:a4:
c5:1c:dc:00:79:d9:6a:71:09:19:08:80:36:75:11:
cc:5b:c6:9d:94:97:dd:86:ef:3e:e7:16:fa:06:b3:
b3:f5:1b:25:6a:a9:fb:e9:bb:d9:67:c5:64:05:2e:
f2:19:e1:9f:c6:3d:5e:fc:60:e8:0f:38:d7:c0:ae:
21:cd:e8:d6:5a:55:8a:54:85:e3:0f:9a:28:12:4c:
6c:d7:01:62:e0:56:51:5b:b7:78:a3:8c:a0:61:5c:
2b:3f:99:49:92:eb:14:ac:cd:b0:23:5e:70:20:4a:
8b:99:3d:c5:56:5b:d0:ae:b4:7e:63:f8:0e:db:d3:
b6:df:6d:dc:5d:88:50:a4:b1:70:46:c9:40:80:3d:
5f:60:6a:0d:fc:2f:55:57:fb:29:f9:34:47:09:a4:
87:83:2e:b9:db:98:2b:b0:a2:c4:2e:b5:ac:d1:6e:
b5:ae:2b:f0:b2:a1:97:f3:f8:6f:fc:86:dd:c7:95:
7a:21:e4:37:26:fd:c0:9e:d7:1d:6e:91:5f:b6:3d:
81:fd:7d:18:ef:cc:bd:4a:f3:b7:3e:0d:7e:4a:1e:
7a:0f:61:b2:3b:6b:7d:8c:2c:71:c0:d5:ed:0d:0c:
48:dc:84:15:92:a4:31:88:91:4e:32:76:a9:ad:39:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:62:23:B3:2E:D8:6E:3A:5D:F9:1E:F3:D5:7E:79:BB:5E:35:83
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
09:88:1e:f1:6b:96:b6:bf:e7:79:1c:74:e0:3b:37:92:b8:b7:
ed:12:2c:da:a2:a7:2e:93:75:f0:3d:c0:b0:ff:2e:20:50:b1:
b2:d3:e9:13:e2:c6:95:b1:9d:55:c0:fd:7b:dc:b1:00:79:b0:
0e:cd:da:33:0e:52:eb:da:b3:e9:19:78:e5:ff:2d:48:81:db:
a7:5f:01:5b:07:23:a7:ef:8f:2c:c7:a6:2a:cd:25:d9:ac:3b:
2d:6f:e0:79:09:fd:08:ce:5d:ce:8b:d9:ae:05:5f:ef:f8:0b:
c0:c1:5e:57:88:a3:3b:7d:19:fb:fe:af:91:de:40:de:da:e4:
ac:ab:be:88:e5:eb:ad:24:0b:43:6f:45:b4:73:2b:ee:26:3e:
26:87:52:65:44:ba:b5:64:9d:0b:30:49:64:2b:82:6b:5c:fc:
d4:03:1b:85:d0:38:88:e7:ec:ad:d7:95:08:63:d9:37:ad:85:
fe:b8:e8:16:46:12:5b:09:71:38:92:68:8d:73:75:94:33:a4:
f3:9b:2c:25:c3:77:95:5e:9b:b1:f3:9e:2b:b8:92:db:60:a9:
d7:3a:c8:98:0a:87:d8:0e:50:9f:8d:3b:0e:fe:65:0c:46:cd:
97:80:e2:da:ae:31:cb:b4:28:cf:03:fb:b1:95:86:83:16:f1:
74:c3:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:15 2025 by rpki-client