Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZXGdvQPeo5Qp2RsP9wa-etOW178.roa
File: ZXGdvQPeo5Qp2RsP9wa-etOW178.roa (raw, json)
Hash identifier: fcvOY3KqGx4tm2011JS+mayuJSsWKQzEkAvjyOET4Fo=
Subject key identifier: 65:71:9D:BD:03:DE:A3:94:29:D9:1B:0F:F7:06:BE:7A:D3:96:D7:BF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04D934D6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZXGdvQPeo5Qp2RsP9wa-etOW178.roa
Signing time: Wed 09 Mar 2022 00:52:25 +0000
ROA not before: Wed 09 Mar 2022 00:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81343702 (0x4d934d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 9 00:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65719dbd03dea39429d91b0ff706be7ad396d7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:ff:fa:07:e5:34:06:bc:6a:32:8d:ef:bf:
94:76:11:39:df:6b:e4:a0:84:0c:50:1e:ec:5c:e0:
75:6d:5a:56:44:94:23:43:db:cb:85:4c:90:81:05:
78:f0:77:6c:6a:e2:fb:ff:ee:74:86:bb:cd:53:46:
5b:2a:59:91:1d:7a:f8:9c:8c:83:5d:c7:e5:f2:01:
fe:9b:31:0b:16:ca:20:56:5c:28:91:a5:ab:46:e3:
f1:3c:dd:e8:d8:ca:d3:0e:40:39:85:22:1e:4d:f5:
66:0b:66:0b:3c:30:d6:7d:5e:72:df:4d:fa:32:00:
93:33:5b:ff:e6:da:67:76:85:e0:e4:25:da:74:f3:
b8:91:84:e2:40:bf:94:1b:bd:e2:e8:f7:9c:4a:77:
9e:7d:39:69:02:ca:05:6d:f8:dd:42:38:26:82:2e:
ad:cc:88:fe:c1:04:63:d6:9d:b1:24:3e:8d:bf:98:
df:d2:71:89:45:b8:4c:0d:40:6f:84:4c:f3:79:e0:
7e:43:1b:7e:40:39:d8:c3:48:5d:73:52:fc:ae:93:
23:f7:b2:c7:8f:98:07:33:a4:f8:54:48:f4:7c:da:
70:25:aa:ab:5c:ee:af:37:07:b6:01:c6:10:3f:a8:
05:31:8d:0b:cc:b0:22:64:c4:6d:24:0d:2b:1d:d6:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:9D:BD:03:DE:A3:94:29:D9:1B:0F:F7:06:BE:7A:D3:96:D7:BF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZXGdvQPeo5Qp2RsP9wa-etOW178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
79:bb:90:3a:76:84:30:e1:dd:c1:79:62:7e:a5:f8:c0:87:bd:
9d:33:26:f2:2b:4f:2e:1a:9c:87:d3:4d:52:e2:be:31:9f:f4:
42:cd:8d:e0:1f:f9:cc:5f:e8:a1:5c:90:9e:ae:29:0b:45:39:
cb:c1:2d:64:79:c2:b4:43:49:03:21:78:b9:27:e0:6f:8a:94:
c1:f8:83:a0:dd:1f:8a:a4:80:07:38:7e:c8:2f:a0:78:87:56:
6c:45:84:bc:da:38:9f:43:98:6f:d0:e9:f0:0a:2d:23:de:de:
74:91:16:72:a9:6b:50:6d:21:2a:29:fc:b7:a5:2b:34:d2:5e:
99:23:2e:f4:e9:8e:d5:1a:90:24:6f:f2:a7:4e:e3:2e:4b:f2:
b6:0c:b7:e7:5e:d1:72:6d:d9:8c:03:ae:aa:bf:5f:af:fd:46:
d2:5d:d8:c7:41:a6:09:ac:88:f2:77:f2:23:54:92:09:82:fd:
db:80:9d:01:92:9b:3e:de:51:39:41:eb:60:e7:33:f5:96:91:
2c:6e:03:3c:1c:5e:e6:22:6a:a4:ae:aa:25:c4:59:d3:34:51:
5c:c5:81:a1:e1:00:c8:82:53:6a:99:15:d0:14:ee:3b:1c:c1:
61:1f:57:39:90:f9:e0:59:11:c4:04:0e:ae:bd:a1:07:25:32:
34:40:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:41 2025 by rpki-client