Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa
File: UPRF0SzozvXJT9aKWfFytke08-s.roa (raw, json)
Hash identifier: Ufa6/YhBT+r24MlH6UUh/p5eozHOPs+XqthFqmBsUeA=
Subject key identifier: 50:F4:45:D1:2C:E8:CE:F5:C9:4F:D6:8A:59:F1:72:B6:47:B4:F3:EB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06C4CAC0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa
Signing time: Wed 11 May 2022 04:21:02 +0000
ROA not before: Wed 11 May 2022 04:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113560256 (0x6c4cac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 11 04:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f445d12ce8cef5c94fd68a59f172b647b4f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:90:45:66:29:79:fa:67:aa:60:65:27:a1:
44:19:be:72:88:6e:a8:39:d8:a7:a6:60:2c:73:b3:
e6:ff:6d:a4:52:b7:c5:f1:1f:18:11:01:ac:1b:3e:
b1:9e:78:41:9f:59:de:2b:c8:82:63:cd:fa:10:cc:
ac:12:df:2b:52:3c:53:70:9c:2d:4a:af:e9:20:2e:
a6:06:32:31:d4:dd:64:bb:d4:02:2f:7b:41:ab:49:
99:05:79:1e:bd:b7:2b:a4:dc:6e:62:f1:ff:7e:87:
83:ac:fe:fe:ff:67:5c:b0:97:b6:2e:a3:44:9d:32:
87:64:61:76:57:97:82:e0:13:ca:67:20:38:2c:62:
88:0a:5e:9c:a6:12:e6:a2:9b:82:4f:71:fc:9d:96:
cc:c8:4e:97:5e:50:ee:b2:b4:af:f5:6f:13:1e:2a:
b8:22:2b:db:02:62:7e:84:46:96:f4:4b:e2:f7:2b:
06:63:62:f9:b2:70:82:61:20:08:69:58:b0:db:5e:
5d:2a:3f:3c:d9:54:39:6a:36:61:d8:77:74:7f:2b:
d6:3d:45:f7:4e:4d:67:00:6a:c4:b3:35:ae:8d:37:
85:2b:37:32:8d:20:b9:12:24:52:c1:24:1f:a3:47:
15:ae:4e:3b:5a:a3:0b:d1:c5:fa:5f:6a:c4:80:2b:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F4:45:D1:2C:E8:CE:F5:C9:4F:D6:8A:59:F1:72:B6:47:B4:F3:EB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
97:be:76:82:b1:b0:db:31:d9:de:25:68:f8:82:51:5e:cc:62:
dc:90:9b:b0:a0:6d:20:7c:86:0b:e5:8f:8d:d4:84:e1:92:1f:
b5:63:ca:87:68:60:94:ce:a9:23:03:fc:5e:54:2b:f2:29:8a:
9b:6c:df:43:34:9d:74:9c:83:a7:31:e7:82:ab:54:3f:c9:36:
fe:5f:81:a9:fe:3f:8d:a7:49:2e:fa:b9:54:8b:6f:9d:f8:bf:
9b:1b:a2:cb:28:29:d4:83:88:e6:19:10:07:a4:bb:a2:8c:f1:
83:65:d3:73:29:2b:cd:5b:86:ca:7e:5d:f2:c6:e4:f3:87:d2:
16:4d:80:a3:33:71:51:44:c6:6a:69:7c:55:60:39:24:69:ac:
d7:73:f0:17:a9:e8:df:c8:11:04:a0:9a:01:1f:a9:55:f4:a0:
c8:ea:99:b7:73:85:89:36:1b:8c:93:84:8a:dc:64:36:c2:fb:
08:60:a2:f7:8c:a6:db:74:d7:e8:ae:53:f2:db:fd:e7:ed:6b:
76:87:71:1b:0a:32:b3:e1:90:38:43:cf:e9:d7:79:75:57:7b:
79:6a:69:52:fd:ec:ab:9c:e0:93:b5:eb:e1:31:6f:52:1b:ae:
e9:5b:c9:c7:e7:ca:99:87:b1:05:6e:73:bb:f9:98:fb:24:ea:
a9:8e:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:41 2025 by rpki-client