Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OW-25qgEjNFzi43cUXXKCQKZSKg.roa
File: OW-25qgEjNFzi43cUXXKCQKZSKg.roa (raw, json)
Hash identifier: jxW6ynbYqjZqk+2YlZHRaX8IJYFPAeWNN/NTGfyaLC8=
Subject key identifier: 39:6F:B6:E6:A8:04:8C:D1:73:8B:8D:DC:51:75:CA:09:02:99:48:A8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 059C958C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OW-25qgEjNFzi43cUXXKCQKZSKg.roa
Signing time: Mon 04 Apr 2022 17:39:20 +0000
ROA not before: Mon 04 Apr 2022 17:39:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94147980 (0x59c958c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 4 17:39:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=396fb6e6a8048cd1738b8ddc5175ca09029948a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:e5:12:1f:be:4b:92:6b:6b:42:25:7b:37:
02:61:72:38:85:3a:32:22:ae:14:ee:e4:cd:ba:dc:
67:7f:bc:1a:22:f8:bd:34:6d:4d:67:90:75:60:21:
18:6e:a0:5d:d4:05:04:78:9c:ec:db:6f:6e:2b:a2:
a3:63:4d:a5:21:fc:f5:13:f9:37:88:ce:ae:7e:60:
64:7a:30:0a:b5:9a:32:65:f4:12:c7:b6:ee:07:68:
7c:69:bd:e1:98:60:9c:13:61:0c:e6:12:ce:5d:ef:
f0:7b:7e:e4:77:0c:34:b5:c8:0a:c7:c3:c0:69:51:
4e:2f:c8:6a:1f:29:3e:65:30:43:c4:f1:75:9a:a4:
f1:d8:ee:a3:4d:56:4a:61:c4:e9:db:00:e4:12:53:
12:17:f5:64:2f:7d:fa:b0:17:f7:9c:d3:41:9d:94:
5a:31:2f:aa:7a:6d:2a:9c:f2:51:d3:f7:2a:4f:c6:
2f:c6:05:d2:7c:cb:22:4f:e7:17:6b:34:f2:37:c6:
45:04:1e:a0:39:88:b2:a6:51:5b:51:75:b2:b9:3f:
37:60:34:cc:22:9f:d8:c2:f2:d8:98:74:08:26:37:
8f:d7:1d:4d:03:6a:8c:73:68:b6:71:cc:b6:13:87:
8d:e2:37:57:a4:f8:3f:4f:92:ae:51:3c:1b:ea:71:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:B6:E6:A8:04:8C:D1:73:8B:8D:DC:51:75:CA:09:02:99:48:A8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OW-25qgEjNFzi43cUXXKCQKZSKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
70:69:05:13:08:53:3a:0b:46:29:be:d5:36:2e:61:14:87:0a:
bd:b3:40:75:9c:73:22:b4:43:57:8a:71:2b:c6:e0:f8:ad:d7:
be:89:fb:b9:f1:43:bd:04:d8:3a:11:b1:97:ca:93:0b:d6:b8:
34:78:cd:19:05:e1:de:39:51:44:08:93:d7:dc:ac:f7:2f:e9:
b0:3b:88:c8:a8:ad:58:42:fc:44:ff:6c:a4:9f:12:55:14:b1:
fc:82:42:53:a8:07:41:aa:22:ca:7e:97:fc:ae:f2:a0:c9:77:
0a:0c:36:66:21:62:95:85:6e:89:b0:b7:83:5e:ee:47:7b:a2:
2c:2c:08:ce:e2:83:64:15:b9:37:c2:41:03:c1:81:2c:0f:3d:
ed:a9:b5:b2:ae:64:72:8c:b7:74:28:55:3c:a1:a3:1d:d3:3b:
b0:4a:39:ef:9a:69:59:cb:f6:d0:91:55:24:05:6b:24:5e:1d:
f2:95:98:d9:e4:1f:08:14:07:7f:26:7b:a1:5c:66:bf:9f:c1:
6e:86:44:79:b3:01:9b:3f:5a:ba:ed:e9:b8:c5:a9:97:a5:5a:
9f:3f:b8:61:1a:51:a6:b6:57:ae:2f:76:98:4b:49:ed:a7:e6:
d4:35:0a:06:ab:58:8c:90:4c:19:9e:7b:90:5f:4e:38:91:b9:
de:59:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:08 2025 by rpki-client