Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WycHV62NfcMDhT9BwCeYY8P-Y54.roa
File: WycHV62NfcMDhT9BwCeYY8P-Y54.roa (raw, json)
Hash identifier: N+qSW8VjtVahkuSiHfKa3tay2MxXRqom7Y413ngElos=
Subject key identifier: 5B:27:07:57:AD:8D:7D:C3:03:85:3F:41:C0:27:98:63:C3:FE:63:9E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0814F381
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WycHV62NfcMDhT9BwCeYY8P-Y54.roa
Signing time: Mon 06 Jun 2022 01:41:33 +0000
ROA not before: Mon 06 Jun 2022 01:41:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135590785 (0x814f381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 6 01:41:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b270757ad8d7dc303853f41c0279863c3fe639e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:19:66:ac:f0:7b:d1:1b:60:f3:0f:b3:56:
57:e5:93:83:83:de:89:40:a4:94:07:5e:ad:8c:06:
58:6d:b8:e8:d2:00:cd:0a:81:af:53:c3:bf:18:f1:
f8:42:26:16:df:b6:d2:8e:f7:52:df:1a:89:3b:0f:
fc:14:3a:44:b5:83:71:2e:ed:ba:b9:d5:08:58:44:
e8:4c:93:8f:2b:6f:b7:82:b8:f3:85:0f:03:02:41:
d6:53:bf:e4:b0:9d:c0:9f:fd:51:6c:0f:c9:d1:24:
36:d7:7b:d2:37:22:9b:8e:c0:ef:97:9a:9d:56:d6:
b0:f7:dd:b4:8e:e8:3f:e9:ee:9f:30:2c:48:a1:12:
e6:81:01:e9:3d:29:b3:d6:f2:85:5c:75:06:cb:2d:
3c:c7:87:b6:a7:60:0e:a2:21:9d:59:d0:2c:31:f7:
b7:8d:25:51:ae:3c:99:2d:21:38:b9:4e:be:b1:7d:
56:c4:1c:1f:84:9e:b1:e0:d2:3d:79:ef:35:bd:0f:
bf:eb:88:ef:3e:0e:83:d2:0c:f8:13:2a:c7:af:13:
4d:cf:56:a7:58:9e:12:f4:07:cd:a2:2e:d0:09:49:
d9:41:55:5b:83:49:da:a2:86:b6:8b:99:af:e0:35:
0a:ff:28:42:d8:67:f4:26:6d:d1:58:41:e1:61:d3:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:07:57:AD:8D:7D:C3:03:85:3F:41:C0:27:98:63:C3:FE:63:9E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WycHV62NfcMDhT9BwCeYY8P-Y54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6a:be:d8:7f:f5:2e:24:a9:1d:a5:a4:5d:85:45:3c:6b:02:d1:
12:94:f9:32:e2:b4:a0:b7:de:ce:6c:6e:bb:33:37:d2:09:d2:
c9:a6:90:ac:cf:9f:fd:7e:1e:fa:2d:6a:9a:37:d0:01:79:2c:
08:92:7d:6d:53:5a:c2:97:b5:21:88:32:29:7d:b1:b2:b2:24:
38:f6:40:fe:73:8c:2d:0f:9d:4d:cb:b9:26:2f:26:a4:3f:30:
80:ab:04:3d:01:02:53:05:3e:57:b0:7a:62:bd:ca:d5:33:66:
b8:a1:ee:51:02:4b:c1:72:c1:72:7b:b7:5d:df:3a:4c:2d:60:
90:18:25:ff:94:ac:f6:f7:d6:1a:36:6b:a3:67:a8:19:ba:de:
4d:11:fa:51:81:f6:02:75:61:2c:2d:cc:92:e8:49:38:cc:53:
91:54:93:d7:7e:da:45:db:1f:f3:a0:74:d8:02:45:85:4b:98:
64:8f:8e:fb:08:80:cc:29:db:81:d3:50:6f:3f:b8:55:a6:89:
f4:ef:82:a1:ab:41:01:e3:d2:a7:17:5c:d7:18:2c:3a:76:10:
99:05:01:0d:a6:bb:50:05:a5:14:20:8b:b7:35:c4:4f:74:cf:
c6:1a:96:f6:07:77:d3:f5:66:ef:04:dd:f0:ae:5b:45:e2:e0:
18:fb:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:20 2025 by rpki-client