Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GOCA1gqIfJ0NJh17fV5qXprh3QA.roa
File: GOCA1gqIfJ0NJh17fV5qXprh3QA.roa (raw, json)
Hash identifier: 1ad+qzDLBPlDguUUlTabUCMUOl4PAQHaF8xPfnYds54=
Subject key identifier: 18:E0:80:D6:0A:88:7C:9D:0D:26:1D:7B:7D:5E:6A:5E:9A:E1:DD:00
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 052EE3FF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GOCA1gqIfJ0NJh17fV5qXprh3QA.roa
Signing time: Sun 20 Mar 2022 04:08:36 +0000
ROA not before: Sun 20 Mar 2022 04:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86959103 (0x52ee3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 20 04:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18e080d60a887c9d0d261d7b7d5e6a5e9ae1dd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:e9:ed:ae:40:e5:31:41:a4:10:09:5a:b9:
82:82:48:d8:f0:f2:35:c5:94:6a:a0:74:0b:b1:cc:
27:f0:87:06:e7:46:97:41:6a:12:0f:d5:b1:74:c1:
f1:d0:24:b4:49:e6:f8:f0:b2:fd:08:be:90:8c:ac:
d9:75:fe:eb:3e:e3:f2:e1:bd:c8:8f:bf:fe:fe:11:
ea:d8:d5:ae:6a:ef:ac:46:32:4b:0c:c5:95:4c:a2:
68:a2:9f:d7:db:a5:c0:fb:7e:49:b4:eb:4f:9e:e9:
c7:d3:51:51:40:1a:8e:6f:2a:e3:ac:1a:88:bf:b5:
47:a3:24:89:37:0b:b8:85:9e:a0:05:0e:33:8c:22:
ab:00:4e:93:ed:87:40:89:6f:35:3c:b1:ea:43:48:
9d:6a:c2:4e:d5:45:57:d8:38:75:5a:29:26:8f:97:
91:27:6f:05:c0:64:d0:62:fd:74:80:45:ea:db:39:
b0:b0:84:03:cd:62:92:23:0c:ee:43:3d:30:3c:db:
76:61:3e:30:19:10:b2:e5:dc:63:3c:41:56:0a:0c:
7a:53:42:4d:b4:9c:5c:e6:1d:7e:d5:8e:b4:7d:a2:
21:ca:a4:bb:35:46:b6:80:b6:9e:cb:3d:45:e7:c9:
02:db:1e:4e:db:62:f1:88:96:7d:62:05:08:3d:61:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:80:D6:0A:88:7C:9D:0D:26:1D:7B:7D:5E:6A:5E:9A:E1:DD:00
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GOCA1gqIfJ0NJh17fV5qXprh3QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5a:47:ca:cc:ae:3f:f7:72:71:c5:46:8f:42:a7:1c:71:0e:12:
8e:86:82:43:0a:fa:c4:97:e2:74:98:1e:ab:69:0f:1d:a7:25:
a2:45:58:41:39:ad:f0:3f:0b:12:f6:4f:01:c3:f2:e3:a1:37:
af:62:b2:21:f2:fb:c9:2d:8d:4b:00:7f:60:f2:4f:75:5d:ca:
16:f5:50:11:fd:1d:57:e2:3d:70:71:30:be:39:76:c5:ec:35:
c0:7f:15:5d:af:4f:47:15:1b:83:fa:9c:55:34:19:d8:d9:0c:
31:07:b6:7c:59:22:bf:0b:ac:1d:f1:8f:4e:bc:87:ee:87:18:
aa:9f:4b:15:30:f7:25:24:34:55:ac:ed:28:35:19:21:30:30:
79:fd:2c:ad:5a:be:ff:91:f4:55:8d:46:75:7a:99:06:81:af:
0e:b6:a9:f7:87:06:bb:c1:4f:a2:91:2e:74:97:8b:87:ef:70:
50:9c:ff:17:31:c5:59:76:84:df:a6:af:40:9e:a5:d2:83:99:
b1:f8:5d:77:95:69:3c:53:f6:f4:26:b0:56:6d:43:77:e2:f7:
98:67:fd:0c:e9:0a:2d:34:90:61:f7:2c:6e:b7:27:0f:21:07:
01:c3:70:c8:43:f9:4d:59:0c:3d:b3:27:28:20:6f:6f:dc:1f:
6e:7d:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:08 2025 by rpki-client