Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/X3ncG4Uu__-BUYnAUXob5WD-_N0.roa
File: X3ncG4Uu__-BUYnAUXob5WD-_N0.roa (raw, json)
Hash identifier: lspwiLHZnxnyPVxxwiM77Y2H1Qfdk5OLAKsYdAXJ9Rk=
Subject key identifier: 5F:79:DC:1B:85:2E:FF:FF:81:51:89:C0:51:7A:1B:E5:60:FE:FC:DD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 052952E3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/X3ncG4Uu__-BUYnAUXob5WD-_N0.roa
Signing time: Sat 19 Mar 2022 17:47:20 +0000
ROA not before: Sat 19 Mar 2022 17:47:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86594275 (0x52952e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 19 17:47:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f79dc1b852effff815189c0517a1be560fefcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:63:56:25:c1:dd:f6:73:39:6d:f3:15:2f:e6:
f1:c0:52:4e:86:8f:a7:ed:f0:dc:70:b3:9f:4f:f7:
47:ed:c4:68:4a:11:60:d5:a6:e0:af:de:09:32:ae:
8c:03:7b:f1:a9:26:a6:83:a2:22:65:21:b3:1c:bc:
7a:ee:3c:be:1f:3a:71:64:e2:c5:99:ee:2f:fd:c0:
1d:3f:d5:de:c8:9c:9f:b3:4c:86:87:96:5f:e8:16:
06:b7:50:12:02:c8:80:6f:7c:ab:d7:6f:ab:5b:5d:
04:6b:28:80:00:4d:9c:6d:4c:37:4e:92:fa:0f:fb:
14:79:7c:11:45:67:f8:de:eb:7f:86:c0:07:93:80:
d8:12:1d:f3:07:be:7f:e4:12:bc:0d:4e:15:2e:71:
72:b6:44:03:67:30:ea:be:cc:54:2a:4e:53:ab:e8:
47:08:58:86:ca:89:ac:d3:a9:a4:0e:d9:4f:a3:29:
c8:bb:97:3a:a8:c4:d5:a3:e6:5a:86:b2:36:15:a4:
da:bd:88:f4:2f:ef:89:8d:ae:89:de:cf:8c:56:7b:
ff:e4:f4:22:76:30:ad:d4:ad:8a:20:6c:f5:15:86:
4f:18:8b:b5:33:6a:3b:0f:d0:20:33:a0:6a:4b:2c:
6d:ad:ca:11:af:2d:c5:13:18:35:fa:a5:02:d5:fa:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:79:DC:1B:85:2E:FF:FF:81:51:89:C0:51:7A:1B:E5:60:FE:FC:DD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/X3ncG4Uu__-BUYnAUXob5WD-_N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
68:94:23:4a:42:28:61:86:57:83:10:36:78:21:41:2f:8d:71:
08:35:50:d4:2b:18:48:0e:21:30:b1:15:0a:aa:f9:e8:a9:a0:
b1:d5:23:2d:db:95:72:e7:d3:b2:40:c3:e1:c8:34:f5:00:57:
e1:41:0f:53:a7:53:fb:ae:50:e0:e3:86:6e:4a:a7:24:bb:34:
c0:27:6f:27:db:02:18:a3:89:51:08:4e:5e:e7:be:69:a1:cb:
10:34:1e:f0:f4:64:eb:1c:60:93:1b:b6:35:87:0e:1c:bd:fc:
89:02:fb:4d:37:1f:34:75:67:50:5e:a1:9b:66:67:2b:24:62:
9c:20:67:24:f6:ae:0d:47:db:8d:df:47:f7:74:c8:1e:cc:31:
b4:36:12:32:28:02:df:70:e5:f6:01:28:82:2f:1b:74:a9:55:
55:c8:94:d9:2f:3c:b4:26:50:28:21:d4:e1:32:bc:e9:2b:0c:
a6:de:37:4e:56:bd:46:7c:39:23:c5:a7:ea:d1:04:6d:00:5e:
0b:f9:f6:3a:6c:a7:48:eb:96:b5:5f:d7:8a:38:cc:2c:32:25:
f1:56:74:04:a7:64:82:26:a5:86:5b:26:ed:78:9b:36:26:78:
8b:8a:cd:25:ae:c8:55:f7:8c:e8:13:cb:25:ca:cd:59:ac:c6:
65:4c:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:49 2025 by rpki-client