Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa
File: HfnmE5lSxejTL9_YSQCXBNuiOq0.roa (raw, json)
Hash identifier: sriZttQRxyLCKpaiFAjUL/Sx+tR/abSdZ8ZtD+xofvE=
Subject key identifier: 1D:F9:E6:13:99:52:C5:E8:D3:2F:DF:D8:49:00:97:04:DB:A2:3A:AD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03D60343
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa
Signing time: Thu 03 Feb 2022 12:14:28 +0000
ROA not before: Thu 03 Feb 2022 12:14:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64357187 (0x3d60343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 3 12:14:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1df9e6139952c5e8d32fdfd849009704dba23aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:49:aa:38:dc:db:66:40:2c:a2:4f:c3:37:
ab:3b:f9:4d:64:ef:87:c4:e2:29:0c:08:c4:40:4d:
e6:05:bf:2b:5b:82:85:a7:06:80:a5:52:97:0c:92:
34:eb:fb:28:fe:27:52:b9:c7:2d:85:0b:93:4d:40:
e4:a3:51:68:e1:6f:2b:46:7f:66:81:9a:6a:cf:76:
46:01:3e:97:39:c4:b5:93:b4:3a:ce:ed:b2:3d:35:
5c:82:c6:0b:bc:c6:b6:a9:95:45:2f:b1:42:53:88:
8e:75:d7:49:ec:18:6e:83:28:4a:42:ce:f0:0f:01:
1c:92:56:11:89:96:28:7b:61:bd:e1:38:e9:43:e2:
aa:b7:b2:37:d6:fa:41:d0:07:cc:99:2d:85:87:17:
ac:4a:c4:7a:f9:37:e1:8e:14:5a:03:fa:e3:55:b0:
45:70:6d:4e:44:b2:04:75:2b:d5:4d:8d:04:97:3a:
f8:7b:fe:1f:27:22:81:f8:0a:73:56:f0:a8:6d:ab:
c4:2f:25:7c:ae:bb:12:2e:f5:9d:e0:8b:f7:c9:35:
59:88:fb:a3:dc:18:0b:fc:68:c6:ac:be:a4:33:20:
ec:e0:11:73:6a:46:a7:3f:1c:10:9d:e0:0b:db:1f:
ec:d6:3e:c9:dd:da:54:c0:f0:c1:30:21:27:da:f3:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:E6:13:99:52:C5:E8:D3:2F:DF:D8:49:00:97:04:DB:A2:3A:AD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
82:6e:93:c0:05:38:6b:30:7f:65:e4:68:27:e8:c5:4f:0a:38:
3a:7d:28:3b:b6:02:fa:c7:38:c4:97:47:12:e5:ba:a8:49:07:
c6:90:2e:c1:f0:44:c4:fd:cb:5c:0d:9f:d6:c8:ba:11:24:af:
c0:b9:c9:2b:f0:4a:82:5d:29:80:1e:ed:c4:94:ed:15:88:e7:
91:89:a9:ac:ff:4f:c8:95:ff:6b:c5:94:e5:e6:d1:8b:3e:2f:
22:0b:c0:a7:50:ab:1f:68:c5:2c:d9:7a:6a:cc:68:61:40:73:
53:2d:b5:be:6d:0a:49:ba:63:77:84:60:0e:8b:24:e4:47:9d:
97:01:d6:22:c9:e3:68:8e:37:ac:97:f1:ef:70:d0:5e:10:94:
aa:9f:7f:bf:c1:7a:ad:ec:d6:f8:b3:70:ec:69:66:0c:d9:5e:
9a:98:06:30:ab:01:f7:21:d9:5a:9a:8c:ef:52:88:4c:b6:a5:
fa:6d:31:a8:dc:39:d6:fb:0c:3e:8c:93:eb:ea:55:b8:57:c9:
92:d1:d8:17:7a:1d:b0:e4:26:6c:57:e1:2e:b9:9d:80:2a:e9:
17:46:6f:47:87:dc:08:b2:7f:d1:15:3e:f4:dc:0d:32:15:ad:
35:07:0b:89:65:67:39:e5:35:7c:37:48:58:a0:cf:36:5c:84:
64:20:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:22 2025 by rpki-client