Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HilKT6NQZdILnTKLyuvfCd7Z4h0.roa
File: HilKT6NQZdILnTKLyuvfCd7Z4h0.roa (raw, json)
Hash identifier: In7JbyaFnuq1tgDKMMn8S9E4Z0etKLP+hnfUbB6+R0w=
Subject key identifier: 1E:29:4A:4F:A3:50:65:D2:0B:9D:32:8B:CA:EB:DF:09:DE:D9:E2:1D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07AD3A9E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HilKT6NQZdILnTKLyuvfCd7Z4h0.roa
Signing time: Sun 29 May 2022 05:44:13 +0000
ROA not before: Sun 29 May 2022 05:44:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128793246 (0x7ad3a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 29 05:44:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e294a4fa35065d20b9d328bcaebdf09ded9e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:0e:43:95:a2:ff:28:19:bc:dc:87:a6:0c:
c3:ba:5b:a6:53:5c:6a:80:89:b9:c9:1b:c4:dc:aa:
29:db:55:24:28:fa:22:a5:8d:31:f1:65:10:bf:db:
17:9d:c5:0e:b1:55:be:f5:2e:14:71:3e:c9:21:e2:
04:77:c1:c8:bb:9e:7c:1d:8a:89:5b:99:85:80:6d:
d5:35:a7:bb:f8:d2:7a:59:be:8e:0f:6e:46:0d:fa:
d4:c7:46:9f:8e:7e:d3:3e:eb:94:6f:d0:00:73:45:
8d:bb:39:69:20:3d:60:4f:be:e4:9c:9d:dd:f4:e1:
6e:dd:3d:a2:4e:68:ba:48:59:ac:ed:d6:17:d0:a6:
7c:f2:69:54:8e:df:71:51:b6:71:ac:4b:20:8c:f4:
87:70:0f:a9:15:35:fd:c9:39:0d:f5:cc:85:8e:bd:
56:eb:2c:87:82:60:4c:67:bd:ed:2f:dc:7f:4d:e8:
cd:9d:c3:b8:8b:3b:f5:64:63:7f:7d:c4:bb:de:e3:
9c:94:b8:b1:e5:bc:a4:a7:81:91:ef:de:a3:11:8e:
18:2b:5c:3b:41:fe:94:18:2f:26:37:57:af:de:2a:
df:88:ce:5e:fd:5b:75:fa:54:28:ad:e1:44:f0:bd:
ed:be:24:0c:78:c8:8b:43:91:37:76:aa:7c:c3:a2:
7a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:4A:4F:A3:50:65:D2:0B:9D:32:8B:CA:EB:DF:09:DE:D9:E2:1D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HilKT6NQZdILnTKLyuvfCd7Z4h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
38:fb:65:26:10:53:74:04:73:5e:c0:50:14:67:42:65:8a:ec:
ba:53:82:22:75:1d:94:ef:9b:06:be:c9:7e:9d:28:40:b7:3b:
05:87:16:2f:a0:75:bb:d0:03:b2:c7:65:77:0c:a6:c6:6c:c9:
dc:f2:61:ab:ca:7a:88:71:8d:3a:cf:39:0f:e8:46:97:d6:58:
42:b9:18:61:33:0c:a9:42:c6:db:21:a8:e5:85:20:c1:eb:ad:
d1:5a:8b:96:f2:c2:6c:ba:16:85:12:21:5f:26:43:30:21:32:
eb:59:31:93:75:2e:de:e3:52:de:9c:55:c1:74:60:3a:ea:d6:
4a:c7:0a:27:01:b1:e8:1a:aa:b9:7b:91:c2:0b:ed:5c:30:2e:
d7:d5:8b:19:46:e5:fb:d9:ed:4c:0e:40:46:24:8a:b9:8d:26:
06:d7:6f:24:0b:61:46:9b:6d:44:db:65:99:68:7f:5a:56:7d:
2b:0a:40:ec:e2:66:2e:59:fa:ae:b7:64:ae:3f:78:08:4d:83:
fb:9e:7c:c7:7b:a7:22:e5:04:35:8e:69:45:1a:ff:0d:74:33:
be:d5:67:56:54:d8:75:81:cb:58:9f:3e:9b:e6:dd:68:bf:e0:
50:67:63:78:58:4d:e0:ea:8a:be:56:45:7e:ab:4d:81:01:ad:
36:d0:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:41 2025 by rpki-client