Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TZoB4aaOY-CJ5m4kHiIfwpkMm7I.roa
File: TZoB4aaOY-CJ5m4kHiIfwpkMm7I.roa (raw, json)
Hash identifier: iAli89ArRsP5G01QhnuPUe7NvozQ0n9mbPkCpdO0kqw=
Subject key identifier: 4D:9A:01:E1:A6:8E:63:E0:89:E6:6E:24:1E:22:1F:C2:99:0C:9B:B2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06444F3C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TZoB4aaOY-CJ5m4kHiIfwpkMm7I.roa
Signing time: Tue 26 Apr 2022 13:32:03 +0000
ROA not before: Tue 26 Apr 2022 13:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105140028 (0x6444f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 26 13:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d9a01e1a68e63e089e66e241e221fc2990c9bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:8d:d8:2c:5e:0c:95:da:d0:a2:c3:39:35:
06:c4:8a:5a:7d:64:ef:4f:c9:0f:61:58:fe:b6:1e:
5b:41:4f:2e:4f:45:18:d6:13:7d:a1:a5:6b:21:67:
25:13:38:12:b4:cf:11:5a:31:49:b2:5f:02:17:7f:
8b:17:f0:a5:f8:7f:c2:63:7f:12:73:49:d9:8d:fd:
a6:df:64:7d:f4:34:09:04:4c:58:0d:2d:43:a9:47:
5d:9e:53:3e:76:b2:82:84:d1:e0:f8:08:70:92:0c:
b7:e4:ca:36:a6:45:ef:3d:71:31:04:27:e2:53:bf:
fd:e3:89:88:f6:fd:6e:ac:3e:37:47:f2:24:aa:f3:
e9:36:c9:bb:6b:ec:20:e7:34:c4:4f:65:f4:6f:5f:
a0:a7:32:e5:24:df:31:bf:ca:24:d2:ba:a0:7a:09:
3e:9c:12:62:11:59:b3:a5:e1:9a:41:b4:4b:40:84:
23:b0:32:fc:29:ac:22:8d:c7:d2:ca:f1:0f:96:a7:
e9:6b:aa:ba:02:02:63:40:98:ed:87:aa:63:51:50:
1a:5e:5e:c9:76:d9:ed:91:27:ec:d2:07:67:52:4b:
55:24:89:8c:df:b4:52:42:98:dd:2a:e8:df:16:fb:
c4:2f:62:c3:77:cd:0d:a7:37:4a:a9:21:9a:71:ef:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9A:01:E1:A6:8E:63:E0:89:E6:6E:24:1E:22:1F:C2:99:0C:9B:B2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TZoB4aaOY-CJ5m4kHiIfwpkMm7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8f:9d:69:2f:f4:fa:bb:fa:ab:d0:d7:82:0c:44:b8:06:f5:
73:27:1e:50:57:4e:3d:09:c7:7d:6c:71:c0:82:e2:bc:dd:99:
27:3b:39:6b:e2:d3:5b:05:c8:4d:fd:25:ab:f5:c4:4c:87:05:
1c:4b:30:34:b9:2e:b7:42:d0:87:2d:50:b4:18:95:2c:07:17:
31:f4:0c:4e:e2:93:1e:7f:4a:49:62:3c:ce:66:47:57:f1:10:
89:b6:97:f8:aa:6d:5e:50:06:b4:e8:2c:76:d8:2a:dc:9e:9a:
7d:e7:8e:b0:74:66:4e:d3:48:69:87:b0:5c:67:ae:e6:ba:87:
92:62:3e:f6:33:4d:67:15:30:b1:2f:75:bf:80:6c:dc:b1:ca:
96:aa:67:b0:68:f3:0c:2c:c4:f6:fc:5e:19:43:ac:c4:4a:89:
4c:45:f5:3e:ce:34:c4:2b:9b:fa:1b:9d:e0:f5:c4:10:66:76:
c1:b8:55:4c:5a:18:8f:46:61:6d:38:e9:af:6b:78:62:de:48:
2d:26:03:a5:71:e1:18:95:c6:43:40:fd:be:74:77:b2:e2:4a:
81:4c:e2:a7:88:45:ab:01:d3:40:3b:1e:54:31:67:25:9b:45:
95:15:3f:e1:d3:7d:8f:37:b4:30:37:f3:3f:84:93:9f:f0:ce:
59:c2:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:18 2025 by rpki-client