Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_eIz7K9bxX5nNnNwKmC8XBvSk6Y.roa
File: _eIz7K9bxX5nNnNwKmC8XBvSk6Y.roa (raw, json)
Hash identifier: ZwgWeAj1Jqw4TX0/SmEGaYuiJNkC6wJUwn77jCk3Cms=
Subject key identifier: FD:E2:33:EC:AF:5B:C5:7E:67:36:73:70:2A:60:BC:5C:1B:D2:93:A6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03BCBE40
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_eIz7K9bxX5nNnNwKmC8XBvSk6Y.roa
Signing time: Sun 30 Jan 2022 17:47:41 +0000
ROA not before: Sun 30 Jan 2022 17:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62701120 (0x3bcbe40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 30 17:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde233ecaf5bc57e673673702a60bc5c1bd293a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:6b:63:62:17:7d:49:45:0d:2a:88:44:7c:
2e:09:47:a6:5d:91:58:e2:c5:69:c1:65:a1:c0:dc:
65:21:cc:46:5e:6e:cb:f4:ed:ae:5f:bd:a4:2f:34:
c8:c2:40:21:3b:77:6e:f4:57:e4:0c:e4:57:f3:92:
bf:45:cd:9a:3d:b6:31:a9:cf:88:71:50:7c:96:c6:
27:70:ff:40:96:a0:b6:c8:a8:84:10:ab:34:63:08:
32:db:18:ab:90:6e:db:fc:ce:95:1b:d2:6a:73:85:
6a:99:40:aa:d0:a9:ad:f3:52:2a:ed:e1:60:7c:d4:
5c:ca:94:b7:e9:29:20:65:b7:d5:08:de:8d:2a:38:
f5:06:9b:f4:2b:54:4e:24:e9:42:dd:fe:2a:dc:62:
ca:8c:87:24:7e:b5:8d:a7:94:75:31:00:4c:c3:14:
05:19:9e:7e:a2:88:ac:f0:48:35:fc:31:cf:e9:2a:
bd:e0:39:18:cf:45:96:9c:cc:f4:09:53:e8:8f:7c:
7d:88:49:42:6e:d2:03:3f:46:4e:68:43:32:b7:31:
01:34:5e:47:10:ba:7c:f8:ea:1d:f8:18:40:ca:88:
16:cc:ef:50:e5:aa:9d:52:9c:2a:d3:d5:c4:89:37:
29:4a:9a:17:73:c1:58:e3:8e:cb:f8:22:ac:03:d0:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:33:EC:AF:5B:C5:7E:67:36:73:70:2A:60:BC:5C:1B:D2:93:A6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_eIz7K9bxX5nNnNwKmC8XBvSk6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
aa:cf:a4:6c:de:ca:f8:56:9d:37:08:c1:c8:cb:b9:8a:ad:81:
16:bf:91:d7:5e:b0:93:27:f9:2e:e4:96:6f:82:65:2d:49:4b:
2f:6a:ee:af:f2:25:f3:56:fc:64:fd:76:b8:3a:58:e8:f5:e4:
71:f7:7e:dc:37:38:b8:db:df:bc:c6:cd:6a:b1:ce:9b:da:bd:
67:09:a8:a4:a8:ac:41:cd:61:f3:35:60:0e:2f:c8:50:a9:1c:
10:0b:cf:9b:b1:48:27:c9:d5:d9:ca:34:1b:57:fe:85:0a:b0:
25:97:3d:7e:6c:89:f5:29:6d:1b:40:29:ec:db:9b:fe:3b:f6:
ae:b3:f7:4d:0b:44:c4:9e:ba:6b:c1:43:d6:27:27:ff:16:94:
a1:b8:57:da:88:f5:d5:68:b7:49:3d:6a:3b:02:0a:ed:17:0f:
2a:32:0d:cd:bb:44:45:13:df:2e:b1:a0:78:ec:ec:44:2b:7a:
55:2c:7f:82:a3:6a:d7:08:57:32:76:53:1b:90:ce:03:a6:c7:
d8:d2:ff:c2:4c:7a:2f:92:43:df:76:5c:62:8c:7d:70:f8:fb:
4f:36:12:d4:3d:2f:01:ea:2c:45:f3:b2:ee:f3:a4:1c:41:f9:
62:88:95:cc:39:86:07:13:7b:99:d9:42:c3:30:27:8c:4d:8c:
3a:c0:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:08 2025 by rpki-client