Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQgeOfzhJp17U0OBSLb846gJImE.roa
File: cQgeOfzhJp17U0OBSLb846gJImE.roa (raw, json)
Hash identifier: RRTV4sJANxMoQvB87uK/1Vm9h/BQhih1rKQxfKlpxZQ=
Subject key identifier: 71:08:1E:39:FC:E1:26:9D:7B:53:43:81:48:B6:FC:E3:A8:09:22:61
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 090C8788
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQgeOfzhJp17U0OBSLb846gJImE.roa
Signing time: Sat 25 Jun 2022 05:15:28 +0000
ROA not before: Sat 25 Jun 2022 05:15:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151816072 (0x90c8788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 25 05:15:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71081e39fce1269d7b53438148b6fce3a8092261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:8d:8b:a6:7b:cd:da:f0:64:1c:5a:fc:b2:
71:f0:ae:79:b9:4d:4c:0f:e4:8c:e5:31:c0:8a:c8:
fa:a3:bf:ef:a2:27:a3:b8:1b:e0:fa:b0:a1:8f:07:
58:97:ac:4f:f1:7f:01:db:eb:ce:6f:1c:ea:38:81:
18:74:86:48:01:98:10:3d:ee:f4:98:e9:6c:e6:7d:
2e:fc:f4:e6:89:fd:fe:f6:cd:59:a9:28:d5:33:e0:
1f:08:c4:94:14:d9:1a:8f:45:45:56:0b:6a:46:4f:
ed:44:c3:9b:7d:5a:b1:09:8f:4c:00:c6:6f:2f:7d:
61:ee:89:1f:44:9f:87:26:56:c0:10:5a:e1:c6:ed:
5e:b0:3e:c7:9f:75:4d:3a:c0:a1:97:e5:db:3b:17:
02:75:c5:db:13:04:2d:55:42:8c:52:f0:79:c2:2a:
a7:75:71:dd:3f:90:e1:7e:fa:53:bd:13:5a:e9:fa:
f3:03:32:76:c7:3b:6b:7f:c5:15:2b:dd:bd:2d:ca:
f9:5a:ed:2f:ec:ea:7e:aa:4a:02:9f:77:d1:c9:59:
f9:b5:3f:6b:c8:e2:c7:b9:9e:aa:2c:97:3f:c8:36:
dd:3b:70:f8:20:23:a6:11:8f:60:41:d2:6e:c9:be:
c0:56:0b:52:07:33:16:c2:02:46:db:44:fc:77:6a:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:1E:39:FC:E1:26:9D:7B:53:43:81:48:B6:FC:E3:A8:09:22:61
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQgeOfzhJp17U0OBSLb846gJImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
37:ae:a6:ee:88:0c:e8:5a:6b:74:9e:e6:90:c3:8e:f0:62:f7:
8a:ad:42:a2:5f:3f:c4:8f:55:32:79:5c:d4:30:dc:18:9b:56:
34:29:f2:89:96:f8:8a:c9:98:59:92:50:96:a5:9d:04:b2:f0:
1f:26:e0:93:5e:5b:2c:43:98:f9:38:30:e0:ba:e8:f5:a3:16:
83:0f:b5:ee:e2:be:75:28:e9:54:2c:49:4b:4f:c7:9c:a8:c9:
a5:ce:7e:2d:5d:e2:8a:de:24:f6:44:04:96:e7:73:bf:cb:25:
59:26:f3:9d:12:94:c4:e6:49:f0:ae:b3:17:25:d9:6f:e5:e5:
33:c0:e1:7f:36:dc:21:81:60:f2:b7:33:0f:9e:f4:65:ba:e8:
62:db:14:4e:0e:59:e0:15:fb:39:3d:10:83:2f:3b:73:b8:ab:
04:8f:84:31:d4:29:c6:99:96:34:1c:82:f2:15:38:67:d2:46:
6f:fa:f2:7e:8d:f0:b4:41:c3:21:78:f2:a2:88:0b:41:5e:44:
72:b7:75:4a:87:8e:aa:cd:1a:ca:8e:ac:d2:23:37:7c:3a:ed:
9b:eb:a0:89:84:53:00:45:a9:a8:1b:4d:3c:6a:70:ae:6f:51:
a2:76:65:6e:0a:7a:c6:f6:e8:15:b2:91:47:bb:f7:35:11:4b:
d0:73:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:33 2025 by rpki-client