Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RIjavPua3-W6SCdQmJHYMwCfRXU.roa
File: RIjavPua3-W6SCdQmJHYMwCfRXU.roa (raw, json)
Hash identifier: 6Bv6oGpPlXeNxDNy/UwTEJu7UWBvPZ3xpk5spRUFTYU=
Subject key identifier: 44:88:DA:BC:FB:9A:DF:E5:BA:48:27:50:98:91:D8:33:00:9F:45:75
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08DEE8D8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RIjavPua3-W6SCdQmJHYMwCfRXU.roa
Signing time: Tue 21 Jun 2022 13:57:44 +0000
ROA not before: Tue 21 Jun 2022 13:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148826328 (0x8dee8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 21 13:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4488dabcfb9adfe5ba4827509891d833009f4575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:03:d5:cb:73:20:c3:6d:95:de:ff:33:c7:
51:24:7e:53:55:46:bb:37:f1:c2:cf:02:bf:7f:fb:
c7:75:23:60:52:0f:92:3d:84:5f:c5:0b:b0:da:9a:
b7:68:8d:c1:81:7b:02:e4:e4:a4:ff:23:1f:6f:5c:
59:aa:33:cb:26:12:70:d4:22:99:b7:5c:76:82:65:
79:15:b2:aa:9b:74:f2:60:02:73:ba:14:3f:9f:63:
1d:d5:91:d6:c2:ff:16:cd:87:19:09:67:59:9f:e7:
94:45:3a:1d:a9:be:b6:0c:4c:98:53:bb:88:9c:b9:
86:cf:3e:25:c7:65:1a:02:8e:1e:4b:90:91:8f:7f:
d0:dd:3f:9e:c1:5d:57:f3:9b:45:06:0a:d7:e2:82:
9e:8e:2a:7d:d6:72:a2:9f:dc:e0:32:f2:17:b3:ac:
9f:8b:74:66:99:35:a0:85:8f:b6:01:dc:33:55:85:
07:a5:35:40:15:7e:91:18:46:4b:f4:81:6e:38:50:
36:cf:a2:00:14:1d:bb:23:93:8b:6b:a9:95:2a:2b:
44:54:07:66:3f:a4:be:25:7e:2c:0b:39:19:08:c7:
bb:79:af:69:4d:7e:4c:ab:6b:48:18:e0:38:0a:d4:
95:ec:8b:e0:56:ea:fd:fc:cd:bb:89:29:1b:ea:c4:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:DA:BC:FB:9A:DF:E5:BA:48:27:50:98:91:D8:33:00:9F:45:75
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RIjavPua3-W6SCdQmJHYMwCfRXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
37:b1:2f:9c:48:3f:69:8d:47:e9:25:8d:cc:20:0d:50:16:d2:
64:82:e1:61:ae:3e:f5:18:76:63:00:62:ee:33:d7:49:e4:a4:
f2:e4:91:60:fd:25:fc:da:1e:bd:6f:cc:b4:78:3e:5c:1d:98:
7d:10:dc:71:76:a5:75:1e:f2:7a:e8:fb:96:63:2b:35:de:8c:
5a:ba:82:52:52:57:5e:ce:aa:85:39:7d:89:9e:e7:e8:62:fd:
d5:4d:9f:42:85:0d:87:46:a4:2e:43:32:78:1c:44:48:49:74:
a8:5c:ad:27:92:fd:44:da:98:f1:4a:ac:a7:61:34:9e:f3:7e:
6b:e9:28:a9:ed:1b:a4:7a:93:8a:d6:bc:c8:29:58:70:f0:89:
e9:84:93:36:71:33:ac:6e:65:d6:37:61:4c:4b:71:76:1a:9a:
a7:2f:c6:79:8e:af:77:77:ae:6d:22:76:69:77:58:51:60:54:
94:36:c4:1a:3c:00:76:bc:16:b3:85:c8:df:0b:62:78:d3:57:
7a:d1:eb:c9:a7:1b:89:7d:a8:31:8d:84:5e:ce:12:dd:c6:d1:
0e:5b:e3:57:fa:85:dc:0d:ad:71:f7:77:62:00:1e:fc:aa:18:
54:ee:47:1d:d6:cb:94:96:5f:c7:29:70:f5:e3:ca:67:74:bc:
e5:01:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:27 2025 by rpki-client