Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T4iViqJ6h_YG1FxM5ql98BrExh0.roa
File: T4iViqJ6h_YG1FxM5ql98BrExh0.roa (raw, json)
Hash identifier: Z8Brnl+1o4iJWTiej4IdVJTZpbmwq2talOBkGHwm9J8=
Subject key identifier: 4F:88:95:8A:A2:7A:87:F6:06:D4:5C:4C:E6:A9:7D:F0:1A:C4:C6:1D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05C204A4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T4iViqJ6h_YG1FxM5ql98BrExh0.roa
Signing time: Sat 09 Apr 2022 11:03:43 +0000
ROA not before: Sat 09 Apr 2022 11:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96601252 (0x5c204a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 9 11:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f88958aa27a87f606d45c4ce6a97df01ac4c61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:02:40:6d:c5:05:a1:cb:8d:6f:26:04:c0:
2b:3d:d7:f1:90:33:55:5a:cd:f8:69:0d:91:2d:90:
55:c5:d8:7a:dc:26:ac:c7:d9:ae:0a:ea:d5:fb:2b:
ab:d7:29:07:4a:e9:0d:65:d6:68:4b:51:4d:12:ef:
6d:d3:b7:fa:10:18:f6:05:bb:c6:b5:1a:39:63:38:
88:01:0e:f8:6a:f3:2a:e8:62:84:4b:d7:66:93:b7:
d3:b9:b8:4d:56:22:27:75:bf:e7:68:0e:49:84:31:
ea:18:1b:af:4c:5a:88:c1:bc:cd:61:33:ed:9a:c7:
2a:1b:5b:ce:70:af:d4:57:ab:ab:24:03:79:48:44:
d4:c2:6c:24:ab:ea:b3:ae:33:e1:13:2f:aa:ca:54:
6d:dd:33:10:cd:2b:66:68:c9:c0:7d:ee:4f:f4:cc:
51:da:6c:ea:eb:ff:20:1d:0e:6c:8a:3b:02:d4:5e:
c4:c8:ab:72:4f:26:95:89:41:14:44:cb:c4:6b:b4:
6c:45:dc:26:1e:03:da:4f:3b:7b:ac:59:10:57:93:
c6:50:74:ee:f8:87:90:16:88:52:e8:77:34:cb:96:
72:2e:00:0b:2f:3c:06:70:9c:e1:38:ff:70:b4:9d:
04:2a:84:0d:ce:a5:4e:c9:8a:1e:a2:ab:d8:e7:e3:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:95:8A:A2:7A:87:F6:06:D4:5C:4C:E6:A9:7D:F0:1A:C4:C6:1D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T4iViqJ6h_YG1FxM5ql98BrExh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
13:00:ec:65:9e:d0:ff:b0:11:f0:44:54:94:7e:a4:9f:01:3e:
59:ac:a4:3d:cd:80:ff:d1:6a:6d:27:69:8a:c1:03:00:7a:e6:
0e:47:51:8c:92:45:fc:77:97:f9:7f:16:f0:56:04:97:c1:42:
91:ea:21:47:e8:5f:39:ca:b3:d9:94:1f:2c:b2:df:c0:f7:b5:
81:ea:29:6d:7f:1b:ed:3b:09:03:ab:ab:00:59:c3:1f:f8:8f:
a3:77:ac:59:a2:a4:05:89:5e:1d:8e:8d:c3:5f:3d:19:3f:ab:
e9:f5:82:8b:97:15:b2:43:1d:e7:77:01:be:03:d2:bb:53:0e:
15:1a:e0:01:98:8c:1a:f3:59:97:29:f9:d0:ab:9d:5b:c8:81:
30:fd:aa:7f:23:98:ce:f4:83:72:1e:3f:ad:e5:0c:6c:49:62:
b0:63:56:08:63:9e:bd:0d:63:e7:b6:33:c6:fa:86:7d:11:85:
17:a0:fb:f9:29:c1:c4:3b:26:2c:0a:b9:b3:d9:51:70:40:d1:
86:bd:49:a3:70:9b:4b:c9:68:14:66:f5:b9:50:4e:b9:f0:54:
09:77:dd:23:2b:e6:0d:73:ac:26:3c:f0:b7:75:44:fb:f4:7d:
b0:0d:45:ab:ce:ae:f1:14:19:e9:62:55:a6:2d:17:23:5d:83:
a8:35:aa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:11:14 2025 by rpki-client