Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IerN8QaNIj6RaozzaobsAPw7FaY.roa
File: IerN8QaNIj6RaozzaobsAPw7FaY.roa (raw, json)
Hash identifier: 9uQnagYKmjV4OYooPtraTgpObxosT2A+UHgXIB6d8Qo=
Subject key identifier: 21:EA:CD:F1:06:8D:22:3E:91:6A:8C:F3:6A:86:EC:00:FC:3B:15:A6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0731CC65
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IerN8QaNIj6RaozzaobsAPw7FaY.roa
Signing time: Fri 20 May 2022 00:53:29 +0000
ROA not before: Fri 20 May 2022 00:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120704101 (0x731cc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 20 00:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21eacdf1068d223e916a8cf36a86ec00fc3b15a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:86:d5:05:a6:77:fc:25:cd:10:bc:aa:85:
a9:b6:29:52:81:e2:c9:5b:7f:5c:36:a3:36:0a:ab:
b7:11:09:9b:e6:37:30:5a:ec:73:6e:7d:4a:38:88:
e9:04:f8:72:60:08:eb:f2:65:58:53:f4:2a:b3:7c:
e5:1f:37:70:77:26:b4:7d:77:d8:55:59:62:45:3a:
74:67:8a:3c:67:90:96:71:56:20:f1:06:c4:a1:5e:
f0:8b:9e:08:9e:ce:a7:96:c8:7b:7f:da:de:15:ef:
6c:69:46:a6:3e:9b:e0:55:da:dd:fb:a6:2e:8d:8a:
3d:e3:22:ba:b9:72:22:12:e3:e2:00:32:47:d7:94:
1c:c7:90:8f:ee:77:19:1e:90:f6:1f:ab:98:75:34:
ac:06:4d:ec:e2:1b:4c:2c:08:5c:c0:8c:9b:59:3a:
fe:d5:51:da:40:de:c6:1b:00:2d:94:17:3c:a7:7d:
b7:3b:3b:f1:f3:dd:94:f1:4b:8a:9b:25:b1:a0:d1:
0b:32:4a:b3:d3:37:8d:5e:35:5b:99:86:b2:21:62:
0f:6f:6d:c0:27:37:17:68:c5:30:47:6f:f9:bc:e8:
81:49:08:a2:84:a1:34:4b:81:46:59:13:40:d1:36:
4a:c5:ad:05:3f:f1:90:f3:2f:d9:c2:a7:40:9f:f4:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:CD:F1:06:8D:22:3E:91:6A:8C:F3:6A:86:EC:00:FC:3B:15:A6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IerN8QaNIj6RaozzaobsAPw7FaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
94:6b:26:4b:75:d0:d1:4c:8b:ab:41:13:35:1e:6a:07:2e:59:
ac:72:25:9e:e9:83:8b:49:d4:76:15:f6:88:7c:e7:05:2c:66:
14:d5:08:74:75:2e:55:19:57:d0:97:6f:3d:c3:ce:8d:d3:4c:
c9:76:be:8f:61:0a:14:17:f1:b1:ae:1f:84:35:f7:d4:d2:1b:
c0:a4:66:ef:9d:a7:9b:18:c2:86:4c:57:7f:61:59:b6:93:9e:
4b:37:dd:57:1e:9f:a3:e2:c0:0c:6e:e7:c2:81:8d:2e:39:9c:
3b:af:6e:2e:0f:cd:db:02:b9:62:b8:59:23:89:c5:30:df:60:
b2:d5:09:ba:b6:8d:57:bf:23:33:bd:4b:b6:92:07:c2:8e:ff:
f9:e0:58:fb:ce:a1:74:73:43:9c:5c:40:55:bf:a8:83:4c:18:
31:91:81:d3:03:67:c7:d8:87:d9:01:43:8d:19:17:0d:5f:1e:
8f:9c:41:71:ab:64:1b:bb:70:f5:f5:3b:10:46:de:12:76:80:
ed:d0:b8:f7:ee:32:60:ed:22:d0:ab:cd:2c:8b:3b:65:86:43:
34:ab:9e:2e:5c:c1:3e:37:92:66:5f:b6:5a:8d:be:6d:61:b1:
85:d9:81:d4:64:cd:81:73:dc:4c:fb:99:45:a2:b4:42:20:02:
51:25:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:52 2025 by rpki-client