Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa
File: Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa (raw, json)
Hash identifier: rN5Z+pA8QZtSRthw7+FTVyvzPimxjBfphnCfLJWGwzU=
Subject key identifier: 67:E5:60:54:BB:58:09:F1:ED:A5:39:28:06:45:8A:3A:8E:7C:8B:44
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 040D4DD6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa
Signing time: Thu 10 Feb 2022 13:03:24 +0000
ROA not before: Thu 10 Feb 2022 13:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67980758 (0x40d4dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 10 13:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67e56054bb5809f1eda5392806458a3a8e7c8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:51:01:06:bc:95:75:fd:66:5e:b4:0e:18:
85:39:46:c7:26:e1:48:1b:95:62:17:ab:87:ea:8f:
22:b8:6c:ca:13:87:d9:c7:0d:0a:e0:fc:49:7d:17:
92:23:19:91:e1:68:a1:ae:5d:05:11:31:64:7c:86:
24:9b:00:38:b1:fb:ef:7d:0e:1f:da:5a:36:4f:d9:
56:59:23:3f:46:23:d8:fb:a4:a7:ba:17:ab:e0:ac:
58:b2:93:be:51:d2:25:e1:f7:95:fd:f4:7d:91:52:
22:fc:d8:14:7c:78:07:1c:ba:4f:56:ea:88:f8:ed:
1d:49:75:9b:e8:48:ab:95:97:7c:52:39:83:61:c1:
ec:59:f9:43:c4:52:00:05:f2:33:a1:3d:0e:c9:65:
e1:ae:7b:d9:67:d9:56:88:24:ef:d0:f3:d9:d9:fc:
89:83:46:dc:6e:24:03:04:29:ab:88:13:4e:07:db:
d8:9d:fb:11:b2:5e:88:32:00:97:5b:95:d0:8b:08:
0c:ac:b8:c9:2d:c2:52:ef:19:f9:a5:a3:fe:e8:e5:
21:f9:66:08:5c:f7:53:a4:ef:42:57:0e:86:d3:d1:
94:c8:89:8a:94:08:87:19:a9:d0:e2:7a:fa:e1:fc:
a2:4c:13:e9:5e:33:e9:3d:03:30:df:f3:fb:b0:1f:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:60:54:BB:58:09:F1:ED:A5:39:28:06:45:8A:3A:8E:7C:8B:44
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
78:62:e7:1b:87:90:2d:cf:23:b0:18:ad:8c:8a:75:97:6e:6d:
96:e3:79:17:d8:1f:bc:65:3e:83:55:56:3e:aa:c3:48:c0:98:
c8:40:24:39:56:2e:d5:65:03:68:ca:bf:b2:aa:1b:48:c7:e6:
64:b7:f0:da:f0:99:6c:af:30:eb:57:bd:36:51:b8:72:b6:4d:
7d:32:a2:1d:b3:a3:03:53:41:77:fe:c1:cd:37:3d:c6:a8:3b:
98:c3:0c:0e:bf:4a:dd:57:43:31:84:64:b5:98:8c:6a:ac:41:
a0:e4:6d:60:55:83:be:11:b3:8c:d4:67:08:cb:fb:57:8f:44:
60:86:05:1f:70:80:f8:d3:36:8c:25:bf:f8:37:c8:da:6e:5f:
9d:0d:3f:13:c0:d5:73:13:30:4a:cf:b7:64:0d:a4:c7:91:a1:
9f:72:c1:06:2d:93:2d:ae:5f:6c:84:56:c8:d6:a0:b1:da:92:
75:e7:3f:b8:06:f0:cd:5a:82:de:61:cf:c0:5b:ab:27:4c:0c:
4d:3b:f5:cc:f3:25:58:1a:e4:13:69:0a:ad:95:1b:85:f0:2d:
12:02:3e:bf:9b:7c:50:e2:ee:4d:dc:89:a7:65:41:09:fc:e3:
4d:a9:30:49:66:15:96:d7:b1:26:a2:9b:21:2f:45:7d:b0:09:
83:b9:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:13 2025 by rpki-client