Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa
File: QAmXJ17lHmAXP3m514Mx-mZrW80.roa (raw, json)
Hash identifier: q3eLgVmYynoq3V1I4GS9hFjO+lxyrbXoGek2Lhnc2ZY=
Subject key identifier: 40:09:97:27:5E:E5:1E:60:17:3F:79:B9:D7:83:31:FA:66:6B:5B:CD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04569716
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa
Signing time: Sat 19 Feb 2022 16:12:23 +0000
ROA not before: Sat 19 Feb 2022 16:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72783638 (0x4569716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 19 16:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=400997275ee51e60173f79b9d78331fa666b5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:f0:52:78:0a:37:e1:49:41:4f:b1:d9:cf:
aa:bf:35:56:6d:42:31:4b:ee:c4:ae:14:b7:ee:57:
29:a8:b8:0c:14:39:da:44:30:32:c6:12:3b:e5:5d:
f0:29:b3:9e:95:91:8d:54:33:ac:84:0a:5e:1c:13:
59:d4:d9:a4:b6:63:e4:f0:dc:9a:16:bf:7f:2b:cb:
5e:4c:62:94:ef:ba:ba:24:01:e6:fc:be:4c:74:0e:
3b:e3:72:4a:e1:e9:9e:03:83:5c:fe:f5:77:dd:ba:
56:e9:e7:c2:4f:47:c3:9d:ee:f7:dd:08:b4:77:53:
e5:f0:99:e1:a3:e9:24:6d:f3:bc:12:d1:61:6b:27:
ed:72:3b:ed:56:41:d2:4a:ca:ef:06:0a:d0:32:a6:
9e:9c:aa:e6:42:bf:33:f1:63:4e:83:34:ef:73:c5:
96:86:6c:05:c1:bd:32:4e:4c:34:c5:f2:38:80:7a:
28:f1:c2:d2:24:07:6b:3c:f7:d1:ff:4b:3f:8c:0a:
ea:88:d3:49:a0:ff:93:84:88:3d:2e:66:03:5b:32:
71:ce:4e:a3:21:20:c7:d7:71:f1:63:6f:f1:e9:0e:
1f:0b:25:7f:e4:86:86:eb:24:d6:2d:69:8a:ee:ee:
2c:07:1b:f9:04:60:4c:a9:86:77:4b:4a:d3:51:2e:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:97:27:5E:E5:1E:60:17:3F:79:B9:D7:83:31:FA:66:6B:5B:CD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
5e:94:ab:6f:f6:b0:55:9e:1c:de:f6:a0:26:06:fa:12:d3:f0:
3b:e4:0b:a3:fe:c4:da:b6:bd:24:7a:b4:11:74:34:52:e9:94:
49:6d:83:a1:fe:8c:4a:b4:ab:1d:7d:48:62:12:ce:84:1d:2d:
c7:86:8a:26:d1:e4:f7:24:a8:81:0d:66:0b:0e:30:54:f7:0b:
10:af:f6:ac:ad:de:a4:11:bc:9c:72:98:36:73:d3:11:93:cb:
0a:64:cd:d7:b9:c5:00:9a:02:ab:5e:93:4b:a2:4e:94:9c:66:
3b:eb:46:14:34:2d:ff:1a:b7:8e:39:5f:0e:88:1e:9b:89:a9:
90:fb:41:6b:1a:d8:c2:fa:76:ce:59:da:9d:93:00:ba:15:6d:
41:8c:83:8a:74:fa:de:8a:db:78:68:68:4d:18:4a:62:3e:04:
5b:ba:57:a1:2e:f1:ee:d2:88:55:73:20:af:28:32:31:7a:b4:
1e:01:0a:17:05:6d:05:56:5f:d5:40:4b:da:d2:09:d9:74:ea:
f7:9a:d1:0b:0a:c2:56:01:62:9b:d9:eb:1c:97:85:b8:d5:cb:
f2:77:ca:18:6e:85:94:48:e5:02:8b:48:ef:73:90:e8:ec:d3:
b4:ae:de:9a:09:05:3f:e8:ae:17:37:74:5b:1e:ec:89:b8:9b:
4a:5b:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:46 2025 by rpki-client