Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JE2cUYQwfd4-R99OBu8WMkXPkgg.roa
File: JE2cUYQwfd4-R99OBu8WMkXPkgg.roa (raw, json)
Hash identifier: oSiPiXyIQwHPGmSxr3HHi19eAMmhBr9/bH697nD3MfI=
Subject key identifier: 24:4D:9C:51:84:30:7D:DE:3E:47:DF:4E:06:EF:16:32:45:CF:92:08
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 049600C0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JE2cUYQwfd4-R99OBu8WMkXPkgg.roa
Signing time: Mon 28 Feb 2022 05:35:11 +0000
ROA not before: Mon 28 Feb 2022 05:35:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76939456 (0x49600c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 28 05:35:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=244d9c5184307dde3e47df4e06ef163245cf9208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:dc:de:c9:78:f5:eb:76:ef:e3:25:e1:5f:
41:38:d0:24:dd:d0:67:dd:b4:38:00:5d:ef:bc:04:
e6:f9:c7:58:d2:4f:30:63:92:b2:79:11:1e:c3:d9:
2b:95:28:5b:e1:e8:43:14:c3:c6:2f:2c:22:13:e9:
85:bf:64:fd:ef:d8:d7:5a:d3:4d:2b:a5:ee:b4:bd:
b9:75:89:1c:fe:48:55:30:c3:42:24:22:d1:6b:57:
e0:11:11:85:27:b2:5d:40:5c:94:e5:fd:19:a8:a7:
27:a2:f1:ce:52:47:4b:25:c9:bc:49:ef:7a:42:8b:
31:3d:f0:21:58:0b:7c:a5:38:b2:2e:2d:aa:a9:69:
a6:f8:ce:a0:39:76:90:6b:4b:eb:11:c0:9a:c2:bb:
8f:86:52:26:14:3a:d8:05:c6:55:52:ed:f0:78:0f:
b8:d5:fc:36:5b:7d:c7:01:03:06:61:ec:70:4c:06:
a0:39:b6:3a:d9:40:13:e4:ba:4b:fa:b5:74:ab:2a:
7d:78:69:95:c5:80:be:e9:66:2e:1f:39:d4:e2:9b:
ca:8d:f0:62:be:6e:c9:95:3b:c5:60:84:5a:75:f9:
96:13:20:fd:16:b6:92:17:c6:74:63:bb:02:d7:13:
64:ae:1b:10:1c:80:f0:ee:c3:39:24:89:05:6c:fa:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:9C:51:84:30:7D:DE:3E:47:DF:4E:06:EF:16:32:45:CF:92:08
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JE2cUYQwfd4-R99OBu8WMkXPkgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
4e:6e:e1:3e:f8:5f:e9:a0:48:e5:75:a1:8e:5c:0c:f3:91:83:
65:14:2a:fc:56:61:56:d1:83:38:2e:ef:1b:e4:e5:ef:b0:1b:
07:cc:d2:e0:31:b2:5a:f5:c0:96:a8:c0:b4:76:58:e1:1e:51:
af:96:64:4f:47:fc:01:f9:6a:20:a1:e7:69:3a:02:4b:74:46:
01:07:b0:cb:5b:db:c4:13:b6:f8:1e:06:06:78:0a:8e:28:84:
89:31:ef:38:45:80:9f:a8:a3:99:71:69:a6:dd:73:24:a7:0f:
2c:99:47:d5:87:78:99:32:ef:2b:6d:27:94:50:2e:04:c8:ac:
f0:e8:d7:4d:80:21:7d:38:3a:b5:b7:f8:b6:06:34:55:72:65:
c6:51:f0:b7:a5:f0:85:1f:b5:34:26:67:cf:39:b2:2f:06:3e:
d6:af:1d:8f:85:d1:ba:a9:9a:c0:f5:0a:26:d2:43:bf:56:02:
62:72:46:d8:d1:31:c6:c9:73:4c:7d:4c:0d:db:e2:f6:31:a0:
d8:2d:44:17:4d:4a:4d:17:e8:1a:ac:88:c1:f3:73:ae:e4:f3:
7c:0f:f5:de:b4:76:93:24:32:14:bf:f5:ad:3c:ce:c7:f1:f9:
19:e3:61:08:6d:f8:c4:c4:4f:2c:99:70:eb:45:3e:16:ba:38:
fe:e3:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:22 2025 by rpki-client