Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XrQUHiU3NB3RJBaLwIQh2j66UIE.roa
File: XrQUHiU3NB3RJBaLwIQh2j66UIE.roa (raw, json)
Hash identifier: x8kzU+3Yx0uNEjoQROBGOZItG4oogQZLrviMic4vq/0=
Subject key identifier: 5E:B4:14:1E:25:37:34:1D:D1:24:16:8B:C0:84:21:DA:3E:BA:50:81
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06D71A6B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XrQUHiU3NB3RJBaLwIQh2j66UIE.roa
Signing time: Thu 12 May 2022 16:54:02 +0000
ROA not before: Thu 12 May 2022 16:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114760299 (0x6d71a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 12 16:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb4141e2537341dd124168bc08421da3eba5081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:70:94:c6:e9:a5:8e:8b:c5:6f:a1:36:90:
dd:09:de:fd:f9:74:9f:ac:f7:a9:80:14:52:14:56:
c7:72:4c:0e:35:68:6e:d5:ed:90:7b:74:76:a5:5b:
93:6d:1d:a1:7b:4f:b2:b7:9c:8c:63:f4:b2:db:2f:
eb:e7:2d:ca:31:64:fb:68:fc:78:d0:9e:ec:91:f6:
35:80:89:da:01:71:db:20:f9:79:89:da:e5:07:86:
77:ce:cc:63:2c:90:69:52:30:58:94:28:99:a9:cf:
70:33:ca:68:35:42:1b:69:87:c2:53:47:c6:08:74:
18:9a:5f:f6:fd:bc:5b:90:47:2c:21:11:60:84:b9:
97:01:bc:ce:a6:1c:85:ec:a3:a5:76:3a:6e:0e:e6:
92:4f:f6:d7:06:a9:ac:fc:22:ef:13:f9:ff:b3:aa:
9d:fc:d0:a4:0e:eb:d9:e4:52:56:63:b3:cf:76:20:
c6:01:be:39:79:71:ff:23:84:aa:67:7f:e8:b8:5d:
3e:98:38:0b:89:0d:d6:15:a7:81:db:2c:7e:f7:ba:
ea:db:b4:9f:9c:e3:f7:36:bd:3a:45:52:33:73:5a:
68:22:b6:9d:fb:be:e3:97:45:98:da:ac:0b:a6:a2:
a9:92:71:bb:1e:3d:cb:0d:63:bb:26:8d:2b:9b:54:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B4:14:1E:25:37:34:1D:D1:24:16:8B:C0:84:21:DA:3E:BA:50:81
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XrQUHiU3NB3RJBaLwIQh2j66UIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
67:97:f7:93:18:77:18:62:73:85:2c:e0:09:30:76:ba:9e:4f:
1f:f4:b8:6c:d7:3a:5b:40:af:ab:da:a8:ff:9d:c3:59:16:3f:
48:ab:85:8c:af:ab:6d:60:00:c7:38:0d:d3:71:56:4d:19:66:
92:39:ef:be:51:8f:ef:bc:55:6f:d9:28:e0:b5:8b:55:05:02:
0d:29:9f:ba:15:85:18:a0:0d:58:0f:34:d0:51:f6:6f:ac:04:
1c:79:1d:08:84:58:df:25:05:1a:eb:d8:55:12:5b:a6:4c:5e:
f4:d5:b3:f7:cf:b1:cc:e3:10:69:c7:01:92:f6:28:52:4a:79:
82:9f:c6:d9:34:64:22:e5:f0:e6:eb:0d:55:9b:92:c9:39:e1:
cc:2c:a7:ae:8c:40:76:c1:1f:bf:2d:9a:f2:7b:6c:cf:b4:2e:
64:13:43:67:11:83:34:0c:df:34:92:8f:83:1b:fe:bc:08:d6:
2d:e7:78:cc:2d:54:ac:fc:2a:f0:23:07:1f:8a:9f:19:27:43:
44:e1:3e:26:0f:f4:db:80:5c:1e:45:9c:dd:10:bb:92:36:d0:
21:90:a1:12:06:48:d7:a0:df:3c:50:ed:11:6d:f4:db:1f:f4:
a8:c1:18:64:3a:be:f5:be:83:76:5a:f4:ac:3d:25:75:34:69:
a2:1b:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:44 2025 by rpki-client