Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IeOP-4dLcDdXLL_sX4jeS4Eqsjw.roa
File: IeOP-4dLcDdXLL_sX4jeS4Eqsjw.roa (raw, json)
Hash identifier: OGHM3VQ0p4UEjCkAKFowkV+RkVAuONmBRQysccu1LOk=
Subject key identifier: 21:E3:8F:FB:87:4B:70:37:57:2C:BF:EC:5F:88:DE:4B:81:2A:B2:3C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0741FB93
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IeOP-4dLcDdXLL_sX4jeS4Eqsjw.roa
Signing time: Sat 21 May 2022 01:51:30 +0000
ROA not before: Sat 21 May 2022 01:51:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121764755 (0x741fb93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 21 01:51:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e38ffb874b7037572cbfec5f88de4b812ab23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:ae:60:65:74:eb:ca:85:ea:0d:46:47:5a:
1c:66:cd:07:12:4c:29:c0:bd:a7:c0:af:fa:3a:f0:
1c:2a:dd:4a:5c:e0:93:b5:94:a9:a4:e0:d6:5b:97:
ec:b6:b2:2c:29:36:d9:97:3b:fc:cb:70:35:da:fe:
0d:5a:42:21:ba:b8:1e:02:49:46:d7:7d:8d:68:c5:
c2:86:73:fc:ff:ee:bd:55:8e:7d:93:01:4c:6c:80:
a3:d3:3c:51:75:56:33:5b:c2:4d:1a:35:8f:3f:89:
23:1c:68:31:00:af:a9:ae:50:5f:4e:9f:72:74:62:
cb:60:76:79:b1:38:87:a2:54:cf:ee:c3:d7:e2:27:
aa:8c:26:f0:4f:d0:f4:e8:2a:69:f9:0a:96:ae:16:
f8:d2:31:20:db:d2:75:a7:19:cd:a9:44:2b:a8:06:
21:68:ed:1f:47:65:4a:10:c6:6c:8c:17:ac:1d:bf:
17:38:f3:8c:20:85:65:60:ba:64:50:32:e0:c7:73:
c1:2a:fc:32:13:61:4b:fa:df:a8:d9:66:b8:64:97:
e5:b9:8b:ad:6c:70:03:eb:c3:c9:31:ef:1d:b6:b7:
55:60:d9:78:c6:68:a5:91:63:06:aa:1f:68:ca:d3:
92:fc:53:ae:bf:d6:81:37:37:c8:42:f0:89:ea:77:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:8F:FB:87:4B:70:37:57:2C:BF:EC:5F:88:DE:4B:81:2A:B2:3C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IeOP-4dLcDdXLL_sX4jeS4Eqsjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
42:a6:c7:5d:8b:32:42:bd:bc:77:f7:2e:1c:0b:6f:80:60:ab:
30:1f:2d:f2:c0:74:97:d6:5d:e8:9d:46:95:28:cc:ac:f9:ce:
53:9b:a9:89:ad:64:cc:08:f6:61:48:41:5a:d8:e5:38:a3:9a:
32:5f:7a:83:7a:08:8c:f5:51:c3:56:ae:e4:9b:21:47:bb:07:
1b:30:75:37:70:ca:07:c1:a6:92:b3:0e:1c:95:5b:27:06:b9:
62:03:58:d1:8a:76:db:b0:05:be:23:31:94:78:1b:54:9e:eb:
c1:a7:98:78:3a:56:09:6b:1b:09:82:26:98:a8:f6:15:a9:0a:
df:ed:d3:14:7b:c0:46:ba:e9:f5:ac:84:21:79:67:30:4d:7e:
1c:97:a4:da:fc:df:18:e8:7d:ae:b5:2f:d3:2b:19:74:a6:3f:
b9:be:89:6a:56:e6:9d:d3:ae:0e:68:0c:8f:5b:5f:8a:59:71:
2b:32:44:94:ed:98:10:2c:f0:06:d7:e5:c4:d0:60:6e:f1:02:
9e:78:c7:fe:d6:4c:7c:8d:eb:d3:47:f8:cc:50:42:ed:61:76:
8a:c5:d5:2f:3b:85:57:a5:2e:15:88:e2:d9:c6:37:af:e8:4c:
87:34:9c:9d:15:33:92:56:b4:7e:fd:e7:1b:21:9f:a1:9a:e2:
56:89:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:13 2025 by rpki-client