Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa
File: YCzw7lG19wQv5QZSd137y0xxJRk.roa (raw, json)
Hash identifier: 2wm3iuBcAao2QRddaG3/HMwJ2Kq3IdbgWwQQjXWsOe4=
Subject key identifier: 60:2C:F0:EE:51:B5:F7:04:2F:E5:06:52:77:5D:FB:CB:4C:71:25:19
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06288759
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa
Signing time: Sat 23 Apr 2022 21:08:06 +0000
ROA not before: Sat 23 Apr 2022 21:08:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103319385 (0x6288759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 23 21:08:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=602cf0ee51b5f7042fe50652775dfbcb4c712519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:c9:72:a0:a4:cb:e9:6a:2a:99:1e:72:04:
ad:93:f4:a2:6b:6b:49:1e:86:bb:e6:32:a3:9e:ab:
32:7d:8c:db:a0:af:af:5a:31:c0:81:04:62:11:ee:
30:63:4f:6b:07:fa:4e:30:f9:a4:82:45:7c:6f:dd:
ee:fb:98:59:52:6c:93:d6:f3:39:f6:8b:d1:51:b9:
7c:55:08:bc:5e:b6:3d:ec:f8:ce:ae:4d:46:4f:c3:
d1:75:6f:ee:a8:7a:71:8e:c6:94:97:52:c4:e0:11:
81:bb:c8:a8:a7:c4:bf:44:d4:48:68:6d:39:a9:07:
d3:0c:92:4e:02:94:b8:55:08:ba:a0:a6:ba:90:3e:
c3:f7:38:44:52:76:c0:35:9c:b0:e2:67:2f:80:86:
6a:8a:32:61:9e:a0:6f:9c:a6:12:6b:7e:b1:da:6b:
39:5d:65:79:d7:4a:ff:6e:16:32:15:bf:d1:8b:92:
68:6e:b1:df:48:d6:dd:29:00:71:3c:98:ac:87:92:
d0:40:08:aa:ae:e5:b3:1e:86:05:18:11:09:b0:0a:
c9:a3:c5:4e:e7:aa:c7:9f:99:ff:d6:35:10:26:ee:
22:7c:c6:14:1f:f4:e4:6c:77:73:ce:ed:1e:98:14:
a8:62:95:a4:fd:38:20:81:ac:c9:b5:23:eb:4c:30:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:F0:EE:51:B5:F7:04:2F:E5:06:52:77:5D:FB:CB:4C:71:25:19
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
57:76:f4:8a:b4:13:5a:cc:04:f9:f5:74:e6:ef:4a:3b:9a:68:
f9:2c:7c:13:6f:71:ff:c0:8e:4b:24:1e:1b:de:d3:18:ae:45:
1d:fa:ec:d8:72:89:0a:49:92:93:9e:d9:bc:53:45:bd:bf:ab:
dd:a2:a2:64:c2:3c:53:bf:0a:09:30:66:42:48:a0:9b:51:78:
27:05:94:8c:c4:a3:8c:24:ce:a8:33:37:ee:6d:d2:54:7f:0b:
15:21:8e:0a:05:7b:32:22:5a:6b:eb:02:91:c7:27:ae:04:74:
71:09:5c:26:5e:b8:11:98:05:b6:5f:ce:2c:45:56:54:71:45:
87:88:e6:be:27:7c:dc:e0:2d:55:8e:65:56:54:43:24:63:e4:
e3:71:13:43:51:40:12:99:d6:0c:13:9f:21:97:e4:ff:29:9c:
80:89:e9:63:85:c1:2d:24:93:20:77:5f:f5:5a:16:2b:61:e3:
53:d9:e5:c4:55:55:04:bd:16:a8:ea:f2:a9:83:5c:c0:59:1f:
46:42:37:c6:c5:89:df:2a:65:b5:f3:be:f7:c3:ea:97:e4:4b:
f5:d8:e8:d5:a1:86:fe:b2:79:34:96:68:27:ff:ff:67:3c:e8:
69:02:e6:ee:12:1e:80:e9:b1:6b:51:1c:f4:c3:c2:ca:67:51:
cb:35:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:38 2025 by rpki-client