Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/a11yddkGTtOQ6W-3Xp-BgaqdZtk.roa
File: a11yddkGTtOQ6W-3Xp-BgaqdZtk.roa (raw, json)
Hash identifier: SnHMxCJp/rX8g7WKqqSVROlm+CpleESoA5qTOkUcseE=
Subject key identifier: 6B:5D:72:75:D9:06:4E:D3:90:E9:6F:B7:5E:9F:81:81:AA:9D:66:D9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08B1502F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/a11yddkGTtOQ6W-3Xp-BgaqdZtk.roa
Signing time: Sat 18 Jun 2022 01:37:44 +0000
ROA not before: Sat 18 Jun 2022 01:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145838127 (0x8b1502f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 18 01:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5d7275d9064ed390e96fb75e9f8181aa9d66d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:ac:2c:f9:df:9b:de:4e:67:80:8b:f5:0a:
b2:1a:8b:1a:cc:4b:f4:d9:85:82:f0:9b:83:47:90:
5c:5b:2c:8f:a4:94:9a:be:28:e0:6a:62:db:7b:84:
88:83:bf:3b:62:29:3f:75:7d:c9:06:ac:3e:b6:a7:
97:67:f1:4d:64:b1:ec:62:a0:62:4c:07:4b:ed:0a:
a3:01:56:6b:bf:d5:d8:66:d3:ef:81:60:d9:5b:da:
33:7d:3a:8e:9a:cd:44:75:24:39:9d:e4:36:ca:d5:
b0:2e:94:4f:2d:a9:f8:39:dc:b5:16:06:69:6d:78:
f8:36:0c:bb:9b:0e:9a:32:96:04:ac:b1:3b:49:af:
7a:66:3a:8a:07:cc:9c:da:c9:e5:22:4b:36:76:50:
41:40:d6:9c:e5:0a:10:89:66:78:e2:94:35:b0:c6:
7d:11:64:7c:40:ac:93:39:25:4c:9e:ff:0b:e9:6d:
3f:f9:1c:ca:51:6a:29:7b:cd:c3:6e:3d:e7:51:5f:
35:35:8e:f9:10:c5:41:25:1c:fb:33:d3:d4:b0:95:
c1:f0:ea:d3:ab:5d:f3:af:a0:2a:7d:a6:1c:ad:f8:
cd:07:de:ad:0c:c3:a4:a5:ef:95:d8:b0:a2:0f:7d:
f1:60:26:66:80:c6:09:13:48:c9:23:90:88:45:57:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:72:75:D9:06:4E:D3:90:E9:6F:B7:5E:9F:81:81:AA:9D:66:D9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/a11yddkGTtOQ6W-3Xp-BgaqdZtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
63:1c:eb:e9:c6:f7:1f:bc:97:93:1e:22:56:5b:e3:f2:94:fa:
b2:fe:ec:a7:78:d5:05:fc:d1:d4:72:fc:47:af:42:3b:75:39:
58:5d:b5:12:85:66:6c:4a:51:be:e0:9d:ff:b0:fa:f0:3c:12:
28:8f:20:d7:50:98:94:9e:e7:d7:23:03:12:3f:c2:91:c5:e8:
64:83:6e:1f:2c:cf:e6:e6:43:65:74:37:78:21:e1:8b:82:aa:
64:3a:98:2b:a4:1c:15:f8:42:46:e3:5e:36:78:0a:d8:0c:50:
58:89:86:23:99:ae:2e:b4:4e:bc:db:c3:ad:b5:dd:1f:72:15:
0e:e1:a5:e2:40:7e:8f:20:e1:29:a2:21:70:90:1c:94:cf:ac:
0b:40:d0:4b:de:55:0d:45:a3:45:61:e6:fa:63:a4:dd:78:09:
76:ce:97:3f:39:df:ec:93:36:cb:80:a7:c5:74:32:cb:65:f3:
f1:df:eb:11:4b:75:16:dc:7c:40:dd:41:3e:23:94:bf:99:5e:
4b:26:08:31:8c:33:58:66:38:9c:58:3f:3b:de:30:f1:da:54:
fb:89:d4:fc:ba:0f:57:64:94:87:7e:20:18:e8:e6:86:1a:b2:
72:f2:12:f9:fb:d3:47:cd:e2:08:f6:ef:a6:74:4e:13:e2:a9:
b5:8f:77:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:39 2025 by rpki-client