Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa
File: QkdmwqePm0YtmHg86KW_fAlg_ZI.roa (raw, json)
Hash identifier: u9WMjWsy/P/ieunBGDZD82tbxu8Ru2d2mC02BO30s0c=
Subject key identifier: 42:47:66:C2:A7:8F:9B:46:2D:98:78:3C:E8:A5:BF:7C:09:60:FD:92
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04398D14
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa
Signing time: Wed 16 Feb 2022 00:34:33 +0000
ROA not before: Wed 16 Feb 2022 00:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70880532 (0x4398d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 16 00:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=424766c2a78f9b462d98783ce8a5bf7c0960fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:8f:60:ae:f9:ea:a7:6b:b9:42:85:0b:7b:
bf:a7:12:7c:dd:54:e4:f1:89:ab:4c:e0:2f:83:37:
e9:96:2a:fd:74:1a:28:ae:21:01:b8:50:b3:99:0e:
41:7c:87:8f:59:da:2f:c9:ce:ac:4b:71:dc:13:a8:
64:1a:cc:70:99:46:6e:cc:eb:d6:21:1e:29:ac:d7:
2c:2f:9e:17:bb:ec:9b:ad:ed:f7:6a:e3:30:39:2e:
e1:ce:ad:de:cb:e8:7f:23:df:ed:01:8b:30:02:92:
e2:a4:92:f4:11:52:ba:4a:05:4f:9d:c9:be:36:d5:
c7:1d:ac:dc:a5:99:88:f9:ea:a9:ce:cc:98:8f:14:
33:57:bc:2c:e7:e8:6c:5d:3b:93:9d:7a:83:01:4f:
2a:ad:00:b1:c7:0f:22:74:62:62:ea:89:01:75:53:
8a:69:1d:44:55:4f:86:e8:e0:96:19:d0:3a:8b:73:
35:8e:56:ea:e1:70:4b:d6:0a:8e:82:77:32:92:ec:
6b:86:f5:21:a9:c6:7f:5b:1f:ec:44:2b:ea:84:3c:
ed:a4:21:01:84:70:ba:fa:10:c1:da:7f:cd:22:71:
fe:1b:c6:4d:df:13:4c:70:cd:58:f5:35:23:aa:b7:
ca:46:ee:5c:b6:cb:14:c9:2a:03:49:f1:17:49:4d:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:66:C2:A7:8F:9B:46:2D:98:78:3C:E8:A5:BF:7C:09:60:FD:92
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
88:79:35:64:b5:cf:0c:bc:ae:66:5a:d6:50:69:45:17:85:b4:
3c:12:0f:1d:bb:cf:d5:60:3c:05:82:50:a3:0e:29:65:a3:1d:
8f:08:8a:99:f1:5f:d5:3b:5b:f8:99:89:c8:26:a9:60:40:cb:
75:d3:8f:be:e3:44:d7:81:b1:25:4b:90:d3:56:41:b7:ed:49:
cf:6e:76:b3:21:37:9f:4e:02:9a:b8:50:0f:6d:3e:2c:5c:1e:
42:4d:e0:80:a4:6d:b3:dd:b8:a5:65:53:09:72:d6:e4:8f:7a:
22:09:7c:f9:08:f4:dd:5f:f6:cb:2e:d6:56:df:b7:e0:b9:db:
38:f9:b5:90:d2:ce:76:3d:26:45:8d:82:39:bb:a6:13:1c:21:
9c:f5:95:24:c1:e8:16:48:a5:bb:c5:2f:74:37:f9:c4:29:94:
b9:09:7d:ea:65:43:60:41:6b:af:ae:da:8c:2e:44:3c:15:d9:
d1:b4:70:4c:0a:7f:7e:65:d0:6a:1e:69:7c:39:bc:95:55:ad:
df:1e:40:5a:96:42:5e:64:39:d8:02:4f:da:94:a1:a4:b6:f4:
93:5c:9c:9d:c5:bb:27:99:52:91:61:e4:b9:1e:44:68:62:bf:
6c:ee:4a:6b:df:15:1e:d9:84:34:8d:c8:10:65:1e:ff:2f:93:
6d:4c:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:44 2025 by rpki-client