Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UfsS8i545cSKoFWiQ9mdVgHN_Zo.roa
File: UfsS8i545cSKoFWiQ9mdVgHN_Zo.roa (raw, json)
Hash identifier: iQO42h+2Abj3lGlaNNjXsrvZRchd1Vbm2gLW0yy1FSk=
Subject key identifier: 51:FB:12:F2:2E:78:E5:C4:8A:A0:55:A2:43:D9:9D:56:01:CD:FD:9A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 095862A3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UfsS8i545cSKoFWiQ9mdVgHN_Zo.roa
Signing time: Thu 30 Jun 2022 14:32:02 +0000
ROA not before: Thu 30 Jun 2022 14:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156787363 (0x95862a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 30 14:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51fb12f22e78e5c48aa055a243d99d5601cdfd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:7d:0d:90:d5:68:96:fe:cc:ec:67:89:a6:
d5:22:66:12:f0:8d:54:9b:d5:52:4f:70:81:1e:86:
f9:07:f3:55:72:85:4c:69:ef:b3:77:0f:8d:f2:e3:
95:22:cb:74:33:bd:d1:a4:17:c4:60:94:ee:fb:26:
d8:46:3e:0e:b3:b1:87:e0:99:4f:c3:e3:84:00:73:
a4:68:20:88:e0:1b:88:a2:c9:b3:56:ac:ac:01:30:
17:66:42:9e:a3:48:a6:31:81:53:6c:01:2f:32:b2:
fb:a5:47:13:19:29:ea:e9:f7:1a:78:57:50:85:06:
79:e9:cd:a0:d2:37:22:ff:be:86:68:c9:6a:2e:d4:
46:2d:7e:86:61:5d:51:3b:7c:a1:ae:da:9d:c3:7c:
7f:73:de:9d:10:de:bd:4a:2e:92:44:aa:d8:6e:d7:
11:69:29:22:cb:64:a7:39:0f:9c:82:59:6e:98:c2:
44:33:75:29:a2:ad:30:4b:66:54:f7:c8:20:17:a5:
b6:22:08:23:e1:3b:7c:27:64:d3:9e:ae:ab:39:bf:
15:3b:f9:c1:d0:af:02:8a:9f:bf:f4:7f:5b:94:98:
63:ce:0f:1d:39:71:32:be:fe:88:62:46:33:1b:fd:
8c:59:75:e0:10:6b:f2:07:33:90:9c:85:05:ea:92:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:12:F2:2E:78:E5:C4:8A:A0:55:A2:43:D9:9D:56:01:CD:FD:9A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UfsS8i545cSKoFWiQ9mdVgHN_Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
7b:15:b8:fc:a1:4a:57:23:cd:60:49:59:a3:d2:fa:e9:ad:52:
a6:ba:6f:c5:e4:8d:90:40:28:d6:86:2b:ac:c0:67:9b:5f:69:
32:80:d7:9d:df:54:63:01:9a:de:71:0a:53:b4:75:78:b8:62:
f0:3f:69:ec:5b:62:85:66:ef:7a:3c:d0:4e:02:c7:2a:02:7b:
d8:74:4b:1d:b8:71:35:88:1b:c2:e0:f8:5d:e4:5c:f0:bd:f1:
0a:1b:b7:b7:e9:bd:6b:25:70:8c:62:46:05:95:01:4c:9c:27:
58:25:15:b3:e3:54:0b:68:ea:16:43:50:bc:2f:7c:47:63:51:
06:37:8f:0d:f7:98:07:55:42:d8:bf:f1:58:7a:9d:06:10:62:
e6:8b:ab:4e:7e:29:12:9e:ba:6f:b2:47:5a:c2:e1:70:92:8d:
ee:ff:ef:47:ef:bc:b0:40:a1:5d:a6:8e:6f:86:c8:2d:8a:70:
87:ef:f4:86:db:6c:62:f8:ed:12:63:7b:46:ca:e5:cf:1d:61:
20:09:8f:7e:bf:ba:f1:95:92:37:62:80:40:e3:28:32:09:b5:
60:ba:99:8b:92:ea:d3:4a:3c:21:49:f9:b0:1b:67:53:a5:a4:
fe:b1:cb:0b:5a:34:93:10:91:a4:72:8b:88:be:93:c6:41:a9:
a9:4c:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:10 2025 by rpki-client