Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChtwtJFx6-Ac3Fp9CkgjIkQDUzs.roa
File: ChtwtJFx6-Ac3Fp9CkgjIkQDUzs.roa (raw, json)
Hash identifier: BZAXe52kcMAcH5xa69pm1vECBf4GUgeO3a+ouwc9cq4=
Subject key identifier: 0A:1B:70:B4:91:71:EB:E0:1C:DC:5A:7D:0A:48:23:22:44:03:53:3B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04DAE1BF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChtwtJFx6-Ac3Fp9CkgjIkQDUzs.roa
Signing time: Wed 09 Mar 2022 05:32:04 +0000
ROA not before: Wed 09 Mar 2022 05:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81453503 (0x4dae1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 9 05:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a1b70b49171ebe01cdc5a7d0a4823224403533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:17:48:08:ba:57:dd:08:bc:d1:2c:f0:12:
13:97:71:a9:0b:ca:7f:49:87:82:dc:63:d1:0c:86:
69:b3:ca:c6:a9:45:76:b7:ab:1c:dc:e4:13:46:43:
01:4e:73:ab:01:5a:43:5a:ac:b6:16:af:b6:85:4e:
d5:43:ce:0b:a8:07:9a:05:76:31:4b:8e:29:07:27:
c6:a7:36:40:5f:31:92:d3:c6:cf:df:bf:19:2a:12:
9d:2b:14:b4:ca:88:9d:bf:72:24:4c:18:66:da:ee:
db:35:5a:97:3b:b3:8b:48:95:fe:be:84:4c:81:34:
f6:39:e2:b6:60:66:fe:d0:6c:a2:df:9a:11:8f:8f:
ab:74:00:86:d3:4c:b8:f5:5e:87:38:6b:a7:a7:44:
e5:94:98:b1:ce:60:6a:cc:ad:a9:c8:1c:84:3a:a3:
47:6a:73:57:69:94:f7:0a:ce:01:38:73:07:93:f0:
79:5a:9a:61:d2:a9:cb:48:52:55:8a:8e:f6:4f:e3:
52:ed:9e:02:80:77:fe:17:ed:bc:a3:c4:77:c9:6b:
92:4d:a4:27:d1:d6:59:79:8e:a1:63:ef:b8:3c:4b:
96:90:fa:77:69:ee:8b:a9:1a:9e:53:4c:aa:d8:83:
91:c9:b7:ba:2a:64:a2:12:73:c8:b1:7f:7c:d8:67:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:70:B4:91:71:EB:E0:1C:DC:5A:7D:0A:48:23:22:44:03:53:3B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChtwtJFx6-Ac3Fp9CkgjIkQDUzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
12:9a:94:01:6e:6b:a2:4d:53:95:65:9e:20:64:cd:41:52:18:
3b:a4:2b:25:f5:9c:83:de:b2:22:ab:d1:6d:6a:27:1c:12:22:
65:bb:29:cc:24:73:1d:dd:e9:53:32:96:c7:b0:3f:c8:b7:d8:
5a:c5:5d:37:fd:81:35:c7:1f:17:74:aa:5a:1a:47:c6:40:7c:
6a:df:b3:a4:01:ce:2f:c6:99:65:70:e0:e2:a7:0c:94:bc:ab:
69:37:5d:9f:b5:89:0f:a6:3f:25:5f:fe:24:b9:1c:d4:e1:35:
35:75:84:4d:96:4b:ac:41:64:7b:a1:63:99:c3:8b:ec:96:62:
50:0d:30:a6:7d:44:07:67:3c:1c:ba:4d:5d:0b:e8:ed:1d:f7:
47:56:4a:7d:27:72:f5:33:2a:51:71:85:39:e3:fc:a5:02:b0:
cb:af:b3:d8:6d:d7:4e:7d:49:a6:94:b1:af:fd:a2:3b:85:ad:
8d:c9:29:4a:f4:ac:ba:45:49:6e:0c:3e:1a:3e:b4:a5:a9:c4:
c2:ed:57:b4:fe:20:1c:24:4c:c0:f4:18:e0:26:0b:83:4f:a5:
f4:c2:8f:1a:69:77:50:d9:84:c9:88:2c:a0:05:09:e6:db:64:
e6:d8:63:7f:d9:3a:48:bc:9a:91:b7:15:46:e3:66:92:0e:37:
48:9a:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:06 2025 by rpki-client