Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_Zj7ONP9AZepuiCYQa-2sOVtw3s.roa
File: _Zj7ONP9AZepuiCYQa-2sOVtw3s.roa (raw, json)
Hash identifier: 2YVDPu+wuFADQe2y63CcXoCT8ogTUgGNqhlHwwVQNjU=
Subject key identifier: FD:98:FB:38:D3:FD:01:97:A9:BA:20:98:41:AF:B6:B0:E5:6D:C3:7B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E5B9742D0DFE4E0074A0877AE137C96D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_Zj7ONP9AZepuiCYQa-2sOVtw3s.roa
Signing time: Sun 10 Jul 2022 01:29:05 +0000
ROA not before: Sun 10 Jul 2022 01:29:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e5:b9:74:2d:0d:fe:4e:00:74:a0:87:7a:e1:37:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 10 01:29:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd98fb38d3fd0197a9ba209841afb6b0e56dc37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:86:da:ef:e8:62:9f:cc:04:e0:0d:3d:49:
14:72:21:35:bb:c1:e4:25:1c:f4:b5:d7:1f:37:37:
bd:4d:d7:01:2c:86:d9:20:32:5b:26:a0:32:9f:cc:
63:d7:32:89:18:7c:d1:e8:49:e1:8e:22:93:a7:97:
a1:b4:b9:ab:6c:3e:4f:6f:fa:93:1f:40:28:e9:db:
04:d0:87:83:58:11:47:90:78:c4:6d:03:32:4c:fc:
66:90:d2:51:43:74:6f:06:37:d8:0a:6b:9f:74:71:
e6:d5:b0:ee:58:d0:bb:30:93:f4:9e:94:0b:65:87:
77:7e:34:af:07:c9:28:c5:29:73:fa:53:5a:43:e2:
c9:37:bd:e0:49:b7:53:2e:ab:2b:21:6b:c3:d1:4d:
62:7f:32:6a:a6:ba:0c:ab:1c:59:86:89:56:67:ff:
04:cf:65:5a:ef:79:56:08:64:e5:41:88:69:41:cc:
2c:2e:1f:a4:ae:48:05:a0:48:56:a1:21:ad:9d:24:
3f:fa:83:08:0f:08:7b:8c:87:c6:5a:c6:fe:ad:4c:
2e:9a:55:37:f3:ab:2c:4e:e5:4d:d5:62:24:48:ec:
7a:d0:55:0e:62:56:a0:c9:a8:7e:d4:1b:66:ee:ea:
01:04:18:1d:1d:19:bb:d5:81:4e:e1:34:23:e7:26:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:98:FB:38:D3:FD:01:97:A9:BA:20:98:41:AF:B6:B0:E5:6D:C3:7B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_Zj7ONP9AZepuiCYQa-2sOVtw3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
9a:df:2d:86:a3:7e:06:2e:72:7c:cc:18:9d:2a:53:c5:cc:f6:
f1:23:da:75:a9:ed:80:2f:74:a1:27:59:61:27:9f:fc:29:6c:
2d:5f:67:26:b8:ff:8f:bf:7c:e4:51:f1:72:32:02:24:82:73:
61:b7:ff:39:09:9b:ff:9e:a0:73:2f:ed:bb:3d:df:b2:be:e8:
b1:6a:f6:31:73:9c:a9:e9:47:d7:2d:ea:73:b3:c4:e6:84:62:
a2:74:d3:1f:c8:15:eb:57:ca:ec:68:c6:28:c6:9f:f1:a8:07:
41:86:fc:e2:81:7d:f6:cf:2d:ea:e3:b6:a0:6a:ae:dc:77:70:
3b:da:2e:24:2b:b4:d7:55:8b:c1:64:10:ab:90:79:6e:d9:52:
f5:b5:88:51:66:b2:27:2c:09:5a:4c:7b:7e:bd:57:f6:86:ef:
cd:30:84:c8:09:cd:7c:d2:2b:89:b9:91:b2:1a:85:4c:ea:15:
25:7e:85:9d:9e:cd:dc:9c:72:ee:f2:8f:fa:bb:9c:cf:e6:8e:
0c:11:3e:2d:d0:e5:d0:89:bd:ac:87:60:4e:73:b3:ef:5f:f2:
d7:72:d3:60:df:00:b0:9c:a5:af:d5:15:f1:6b:d3:b7:a2:bf:
56:d2:3c:dd:32:fb:76:45:bb:23:74:a1:cc:5e:9d:d7:40:38:
a5:1a:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:42 2025 by rpki-client