Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RxrCei7yk6ZVyyIvBQVQG7OkFs4.roa
File: RxrCei7yk6ZVyyIvBQVQG7OkFs4.roa (raw, json)
Hash identifier: czFKw0wQy2JRmBdj9bsFhayl8FsArPBN1YmGQ7/zC0o=
Subject key identifier: 47:1A:C2:7A:2E:F2:93:A6:55:CB:22:2F:05:05:50:1B:B3:A4:16:CE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 041F761A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RxrCei7yk6ZVyyIvBQVQG7OkFs4.roa
Signing time: Sun 13 Feb 2022 00:24:15 +0000
ROA not before: Sun 13 Feb 2022 00:24:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69170714 (0x41f761a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 13 00:24:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=471ac27a2ef293a655cb222f0505501bb3a416ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:4f:b9:09:04:d4:29:57:e6:48:b8:07:d9:
34:97:55:a7:e2:9f:cb:c4:0c:08:2c:56:3a:d9:33:
36:0c:57:ac:b9:78:08:a4:be:a2:16:52:7e:56:a1:
aa:6c:42:e1:07:c7:d5:1e:3c:51:66:87:e5:b4:fc:
bf:83:78:4f:54:bd:c1:95:4d:24:4e:6c:0b:de:3e:
0c:8a:f2:a5:a2:03:6f:5a:4c:6b:20:e2:8d:c1:ad:
bb:c9:fe:71:87:9c:c2:6f:7c:95:6a:8b:ac:c1:80:
06:8f:6a:00:b0:31:ea:e4:2b:c1:f3:d0:49:38:e4:
b6:0b:c6:e1:87:6c:85:17:11:dc:13:1e:bc:be:dd:
38:10:bb:67:ff:8b:49:b9:b9:ef:30:40:29:cc:c1:
da:6e:18:b2:16:79:30:c5:c4:cd:93:cc:6d:72:a3:
74:42:b1:d1:dc:7f:2b:d6:ee:27:8b:f6:ee:f1:48:
7b:f8:47:e9:b5:eb:11:d4:81:31:5e:58:6f:92:b4:
fe:44:6a:81:49:0a:8f:b8:5b:ce:20:56:cc:c9:7a:
18:2f:fa:2d:5f:a9:17:7a:cf:2f:4d:2c:2e:0e:f9:
eb:fd:5c:2f:2b:de:26:47:45:be:9f:e4:58:9c:c1:
5b:86:0a:00:9e:01:2b:30:23:e6:04:9f:1f:6a:dd:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:C2:7A:2E:F2:93:A6:55:CB:22:2F:05:05:50:1B:B3:A4:16:CE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RxrCei7yk6ZVyyIvBQVQG7OkFs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
41:6e:d6:8d:d0:5f:30:77:2f:93:78:c1:6e:2c:f8:a1:c2:fc:
1d:39:30:61:24:b3:e1:3c:27:a5:eb:d3:23:02:5c:c3:57:23:
3a:3f:f2:fe:db:57:36:24:27:b4:c8:fa:c2:4b:c9:18:46:8d:
09:21:e5:95:a5:50:d2:89:c9:23:c7:af:b4:9d:ee:21:3e:d5:
b1:91:0b:23:0e:be:f1:9c:b6:93:bb:64:4a:44:27:66:2e:61:
2b:ce:38:08:0b:55:4c:48:7b:06:d0:91:03:de:cb:1b:6d:ca:
ad:98:07:9d:ef:aa:48:28:2b:81:66:7c:25:e8:62:7f:c9:16:
78:d0:86:b1:56:d0:38:c9:c8:37:09:5d:0d:b2:36:c2:0a:9f:
1c:3e:17:35:c9:c8:07:ba:55:41:60:5e:94:df:78:2b:00:28:
86:a4:a7:de:fd:f9:12:d3:ec:61:45:41:c0:bd:f2:34:0b:79:
f7:64:72:cd:a5:30:07:0b:09:f6:4a:d1:cb:e0:3e:89:53:55:
0f:31:89:fc:97:23:49:12:c2:5f:5f:83:8c:1a:8f:89:f7:97:
6e:4e:7b:bf:34:53:f9:5a:8e:45:8b:ab:4d:09:1b:a4:42:d1:
3d:31:12:fd:2e:f7:96:50:8b:a0:56:92:02:48:6a:a3:01:bd:
13:5f:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:59 2025 by rpki-client