Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WcBuevtuD0iL2puo4CcxGSyOXWw.roa
File: WcBuevtuD0iL2puo4CcxGSyOXWw.roa (raw, json)
Hash identifier: nUJS8LHQubulYzTxqMeyyLk27QhTA7eCaPbe9rMelRI=
Subject key identifier: 59:C0:6E:7A:FB:6E:0F:48:8B:DA:9B:A8:E0:27:31:19:2C:8E:5D:6C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D6CD50BFC9D1C14601D516B438FC855D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WcBuevtuD0iL2puo4CcxGSyOXWw.roa
Signing time: Thu 07 Jul 2022 03:56:28 +0000
ROA not before: Thu 07 Jul 2022 03:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:cd:50:bf:c9:d1:c1:46:01:d5:16:b4:38:fc:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 7 03:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59c06e7afb6e0f488bda9ba8e02731192c8e5d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:21:52:65:af:b1:06:ea:70:05:1f:32:f0:
73:0e:28:f3:ee:9e:26:2d:54:a1:5c:55:9a:8d:b7:
51:cb:eb:a4:3c:7f:62:10:a5:cc:30:fe:c3:cd:a3:
a4:f9:a1:50:0b:1c:98:e8:e4:41:f0:d2:4f:35:0a:
59:0d:88:8c:08:5d:d2:90:fe:1c:cb:47:89:94:b7:
4d:93:c3:ce:d4:b6:b8:4b:80:9a:65:39:19:d5:41:
93:3a:6d:18:68:26:7f:1a:39:d3:85:c5:8c:7c:f1:
f8:c9:76:36:b9:7b:de:82:b8:c2:66:53:33:d0:05:
f9:c1:7d:c1:33:11:06:5c:87:7a:1b:53:1b:2f:dc:
73:db:34:94:85:25:a7:17:f8:a7:50:63:1f:92:ca:
fd:f2:ba:4a:41:0d:71:8c:03:d7:85:cd:1c:12:ab:
01:1a:a8:4c:c1:1e:74:d6:1b:47:ae:e4:c4:8a:3f:
5b:51:d4:88:e4:05:96:f2:13:55:10:6b:b5:8d:fa:
cf:56:9f:bb:bc:fc:07:90:cd:de:3c:b4:8b:62:15:
ba:a3:ca:d4:43:ba:8a:b2:11:be:bf:07:99:a5:ec:
b4:f0:f1:44:fa:c1:ca:6c:29:ec:78:85:0f:39:20:
10:48:0f:86:20:6e:0c:23:03:e6:41:7e:96:fc:df:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:6E:7A:FB:6E:0F:48:8B:DA:9B:A8:E0:27:31:19:2C:8E:5D:6C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WcBuevtuD0iL2puo4CcxGSyOXWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
37:04:8a:c4:7b:a4:93:d8:27:c6:00:ef:32:24:b3:0f:c0:0c:
2a:c1:57:2c:57:89:45:9d:07:9a:ed:9c:ca:fa:e0:80:ce:12:
dd:fb:a7:a3:4c:f3:8d:43:98:14:8f:fa:ed:f8:2d:b6:0b:3b:
94:4d:c2:1d:eb:cb:0d:77:bc:bc:d1:45:e3:9e:67:65:e6:0d:
78:b7:8c:ae:2f:59:1d:fe:ad:5b:2f:ca:08:54:8b:e4:3d:38:
d0:93:17:41:ab:79:67:30:7c:79:63:90:79:5f:a1:98:0f:6b:
4d:5e:f0:2e:46:5d:aa:e0:26:16:11:8f:2b:e1:a8:ba:ba:83:
6b:9b:ed:65:d4:2b:59:a8:54:07:1d:bf:40:fc:9d:c6:a3:12:
d7:36:b1:d8:10:c7:20:da:37:72:60:06:f3:a0:ca:db:cb:bb:
75:6f:9d:0d:39:14:8d:e2:a0:a3:5b:a2:b1:cf:11:52:dc:f9:
3e:f2:aa:6a:6c:23:f9:c9:07:40:23:f7:88:c9:1b:72:f4:c8:
84:87:37:54:ca:0e:3c:7d:33:f5:08:6c:f0:63:4d:35:91:71:
23:09:91:c8:1d:b3:6c:3b:e8:85:db:4c:89:c7:10:e4:3e:a8:
fe:07:98:58:69:c2:2b:6b:ad:7a:f3:a7:89:ad:7b:ae:85:ec:
35:3e:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:06 2025 by rpki-client