Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QUNxe8YEjm1KsdBbZTlcyp4Dyrc.roa
File: QUNxe8YEjm1KsdBbZTlcyp4Dyrc.roa (raw, json)
Hash identifier: A8r26/bGsqNCsULH5UMlKAAo7MxfnKiNwUC5l/B6FiE=
Subject key identifier: 41:43:71:7B:C6:04:8E:6D:4A:B1:D0:5B:65:39:5C:CA:9E:03:CA:B7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06D062F7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QUNxe8YEjm1KsdBbZTlcyp4Dyrc.roa
Signing time: Thu 12 May 2022 03:53:02 +0000
ROA not before: Thu 12 May 2022 03:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114320119 (0x6d062f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 12 03:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4143717bc6048e6d4ab1d05b65395cca9e03cab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:48:7b:0a:44:8c:3b:69:19:36:dd:ca:44:
7e:2e:13:dd:e2:26:e6:40:6a:d5:b8:b1:d3:ea:51:
dd:83:f1:5c:a8:47:70:da:1a:e6:49:28:c4:54:b4:
d1:23:b9:b3:81:64:96:7f:01:87:29:aa:50:b6:71:
c4:3c:11:6e:31:14:99:75:a0:f3:5a:d3:1f:0b:d5:
d9:dc:32:e7:ed:26:fe:d5:64:12:16:82:a3:fa:69:
a8:99:d3:a6:2b:b4:63:f6:d9:bf:99:3c:2d:d3:05:
40:c6:82:84:a4:c0:ab:c2:e4:1b:19:36:61:10:6f:
dd:76:06:ea:5e:ab:fb:fe:01:ed:0f:ef:53:cb:e9:
03:36:05:4d:a9:d8:4c:ed:e0:76:32:d2:ba:e7:55:
06:b6:c1:d9:34:cf:f1:1d:a2:1c:2c:3e:bc:f6:49:
14:43:99:82:27:5f:51:21:b9:17:0a:85:a1:6a:50:
23:47:1d:27:a8:49:b0:7f:73:d6:e7:b8:06:93:74:
76:4a:54:62:0b:ea:e0:94:64:28:b9:eb:0c:8a:5f:
cc:af:fa:2a:4c:fe:dd:32:63:80:58:7a:58:76:ee:
b9:a9:69:9c:7e:b3:52:5a:ad:9d:6c:a1:c5:85:d9:
8a:bc:af:69:5f:ba:36:30:46:3a:ca:23:5c:70:42:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:71:7B:C6:04:8E:6D:4A:B1:D0:5B:65:39:5C:CA:9E:03:CA:B7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QUNxe8YEjm1KsdBbZTlcyp4Dyrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
14:c0:bc:28:af:3f:37:ea:e8:4f:2d:97:63:c3:74:37:c7:04:
5e:67:89:eb:65:ba:83:57:de:8c:46:b3:26:86:c0:5f:00:1f:
04:fb:30:f1:27:33:f7:ab:e0:8f:65:95:83:43:b3:5f:d7:86:
96:fb:95:a7:e6:0b:1b:26:41:1a:15:8f:02:f9:cc:b2:60:5d:
c4:70:ce:5e:c9:86:b5:44:fb:01:54:54:f4:82:c1:bf:ed:ce:
75:a0:f5:45:f5:0c:04:a7:25:52:45:67:54:b8:bd:bf:c3:19:
4b:94:4e:83:18:eb:6f:a8:99:f2:13:83:16:c4:fb:2e:a9:27:
44:b8:79:cd:88:c4:a7:15:4b:8b:23:92:af:d9:51:06:f8:b4:
51:77:2d:dd:00:e8:28:16:c8:6c:40:19:d2:71:31:ba:5c:49:
d0:0d:6f:fa:06:24:82:e6:de:5b:07:28:9d:76:e0:b1:ae:7e:
d1:fe:47:ea:a6:c3:52:f5:05:ef:bb:23:99:73:8f:4e:23:68:
a7:16:3a:f0:80:df:6c:79:89:e5:0c:cf:96:49:48:79:af:a4:
e3:7b:30:5e:7f:2f:88:1d:69:d0:4a:8d:1c:1f:96:89:74:51:
ec:e4:d3:6b:50:01:86:45:4e:68:89:84:e6:23:e7:bd:f5:de:
da:c2:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:31 2025 by rpki-client