Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GVKYmJVx6AUssR7DcAdxkZLrPRY.roa
File: GVKYmJVx6AUssR7DcAdxkZLrPRY.roa (raw, json)
Hash identifier: ps5VEZuZt5Tzv4ui02TVf8vo5bPcEhQSgKYJOMY8N4o=
Subject key identifier: 19:52:98:98:95:71:E8:05:2C:B1:1E:C3:70:07:71:91:92:EB:3D:16
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03DE81CF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GVKYmJVx6AUssR7DcAdxkZLrPRY.roa
Signing time: Fri 04 Feb 2022 13:21:25 +0000
ROA not before: Fri 04 Feb 2022 13:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64913871 (0x3de81cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 4 13:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=195298989571e8052cb11ec37007719192eb3d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:de:e4:ca:8a:f7:33:ea:1c:40:11:1b:7f:
d8:cc:d4:4c:f2:5c:d0:7c:43:a3:42:6e:ae:b4:c3:
02:26:6b:82:c8:52:2f:23:e7:27:61:98:26:b7:bb:
d2:59:a3:b4:9f:e2:24:a3:1e:50:9f:2f:54:23:47:
7d:47:0a:d4:a7:09:dc:e3:a3:fc:0d:24:8c:6c:be:
4d:52:2b:66:c7:76:19:7f:60:eb:4e:50:cb:65:35:
3e:b2:05:57:1c:56:b4:5a:d0:e6:ef:56:53:84:2d:
c5:6e:31:fc:8a:01:07:4a:05:a3:ee:af:12:a1:cb:
12:e0:20:fc:63:f4:12:d6:54:ee:cb:86:ac:df:6b:
5d:50:69:f5:a3:02:3a:31:b1:da:f1:79:c5:38:5f:
e4:50:93:9f:4d:d5:33:5e:77:bf:0b:84:ef:b1:23:
5a:d4:42:63:b1:d5:f8:57:79:6d:7d:b4:80:a5:b9:
42:57:48:b3:01:d1:25:fe:2b:6d:97:f6:2f:c0:82:
99:68:b3:1b:f6:ef:2f:e7:e0:8d:76:03:3a:4a:4d:
71:89:ca:e4:fe:ee:22:43:d9:d0:7a:6c:5c:0d:9c:
1f:e5:05:44:b7:7d:40:c7:7f:04:34:7d:34:c0:70:
e8:a5:fc:6b:e1:13:ad:37:ec:a0:1d:de:67:d7:02:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:52:98:98:95:71:E8:05:2C:B1:1E:C3:70:07:71:91:92:EB:3D:16
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GVKYmJVx6AUssR7DcAdxkZLrPRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
88:79:0d:6d:bc:25:d8:6d:59:44:f7:21:2a:ff:dc:71:5e:ac:
9f:bb:70:d6:5d:da:5f:cb:7e:be:86:5b:5b:10:86:aa:52:71:
13:c5:bd:5a:cd:c6:9f:54:2c:42:c5:2b:85:af:7c:7b:23:e8:
6e:9e:c4:41:5b:b5:7d:f1:f4:50:ec:23:22:55:40:77:71:67:
0f:de:8b:7c:09:8d:53:36:d5:83:38:c5:49:eb:46:f5:87:59:
a4:4b:09:0b:21:1a:09:58:57:51:0c:ec:fa:fc:d2:f0:66:0f:
f3:ca:db:89:d2:3b:e2:8d:80:02:6c:60:07:46:72:38:78:0b:
90:1f:be:1e:fd:30:a5:a0:7b:f2:16:44:0d:68:d2:ab:36:c3:
39:ba:18:1f:e1:f6:9c:2f:0b:90:3b:65:89:38:d5:88:2d:fd:
da:50:48:dd:07:db:6d:6d:17:44:30:d1:58:ea:82:6a:c1:9a:
fe:69:5d:39:48:18:67:e6:17:c4:6b:0e:41:97:1c:5a:4a:94:
86:f0:58:79:82:61:3b:8b:4f:e7:4f:ec:ed:b4:3f:2c:2c:2b:
c9:ab:3d:0d:53:5b:00:f6:e8:38:60:5f:4b:20:2a:34:57:85:
eb:b9:2a:32:13:63:e4:37:39:d8:2e:54:42:c7:0c:fe:10:9b:
29:3a:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:01 2025 by rpki-client