Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L4doCC3yydLx5AmV-rRla_6mtmg.roa
File: L4doCC3yydLx5AmV-rRla_6mtmg.roa (raw, json)
Hash identifier: 0M5SXzvtEFgQsYe1evhWY/Yk0ITRhp9193dFMAoYN2E=
Subject key identifier: 2F:87:68:08:2D:F2:C9:D2:F1:E4:09:95:FA:B4:65:6B:FE:A6:B6:68
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05176475
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L4doCC3yydLx5AmV-rRla_6mtmg.roa
Signing time: Thu 17 Mar 2022 01:54:47 +0000
ROA not before: Thu 17 Mar 2022 01:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85419125 (0x5176475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 17 01:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f8768082df2c9d2f1e40995fab4656bfea6b668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:eb:36:70:77:1d:b8:fa:bf:be:be:8d:a2:
b5:8d:1e:fc:53:eb:af:e8:60:dc:e2:1b:d3:7d:d6:
fc:7b:69:ea:ad:24:4e:03:03:47:4c:c9:12:d2:ef:
f3:30:86:c9:68:bc:1a:a5:9b:9c:8b:b5:25:c4:fa:
b3:84:83:60:f9:8f:f7:a8:11:a9:32:4e:1d:63:ad:
b6:2f:76:c7:7f:54:60:05:25:52:ca:89:dd:cc:65:
a1:3e:3b:9f:d5:a0:7a:d5:9c:d2:68:54:94:12:a2:
4a:15:0d:f0:1a:32:74:bf:da:7f:98:2a:77:ed:1d:
2d:dc:2e:8f:3c:19:06:ea:6d:67:bf:18:8a:50:83:
a9:53:fb:2e:70:5d:06:2c:fd:b0:06:49:b4:5b:31:
a8:75:86:fe:4d:9b:a3:17:b4:8b:4d:a7:30:b0:64:
24:74:c2:a1:7f:c0:ba:58:84:88:b2:0d:66:f9:10:
06:9c:fa:1a:ea:e2:91:88:e1:e7:04:ca:03:f3:5c:
9b:50:6d:69:4f:fe:a3:4c:e6:8d:2d:fa:e0:b9:c5:
b4:cd:84:5f:a2:11:c9:c2:2f:86:ab:76:d6:ae:27:
cf:82:91:43:77:11:0e:50:77:cd:57:a9:fd:01:ca:
e9:82:f5:c7:2a:95:f3:29:ff:58:e3:ae:38:0d:7a:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:68:08:2D:F2:C9:D2:F1:E4:09:95:FA:B4:65:6B:FE:A6:B6:68
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L4doCC3yydLx5AmV-rRla_6mtmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
55:a7:12:3c:8a:0b:e3:9c:d9:b6:2a:d2:51:b3:90:ca:f5:1c:
e0:36:4d:0d:8d:e0:e4:54:0f:21:d1:85:c7:93:2f:92:51:77:
8c:a4:d3:1c:91:06:fb:40:18:8a:2c:5f:f7:69:06:7c:be:05:
5d:6d:1a:1f:bd:bd:9f:b1:44:9b:eb:d0:a5:5a:54:72:d5:81:
68:ba:53:dc:35:26:de:2e:65:32:1a:1a:6c:2e:c6:f3:a7:a0:
9d:89:fc:6b:ea:ce:db:c8:ea:50:6d:05:7e:df:f5:72:e8:69:
78:f8:76:eb:95:f1:af:25:8f:46:e5:2a:53:79:19:75:ae:6e:
1b:1c:30:4b:ad:26:11:31:e2:fe:f3:0b:22:8b:5c:6b:4d:b6:
9a:e6:a9:bf:7d:c6:71:57:34:9d:ae:5c:80:57:ae:fc:c1:36:
d5:b0:4e:06:13:fd:3b:d7:61:45:47:1e:40:8f:32:eb:13:a1:
94:3d:c8:9c:0e:9b:9b:6e:28:77:fa:ec:91:28:b5:16:ec:7e:
19:27:27:59:de:84:3f:59:08:04:00:ca:0f:77:39:ac:0d:b6:
6e:0a:ea:8a:21:5f:ea:2c:47:73:05:94:38:ad:45:ad:bf:e4:
40:d4:36:07:28:9d:61:9c:8d:c7:a6:72:99:db:48:2d:5c:ab:
7d:4f:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:41 2025 by rpki-client