Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d1-8Xy2QrgyhGTxYud9ukQFI-PA.roa
File: d1-8Xy2QrgyhGTxYud9ukQFI-PA.roa (raw, json)
Hash identifier: 8jBau4O/BaY5nPP8Vtl+jwTL4/tSgun0dN/rfKu02CM=
Subject key identifier: 77:5F:BC:5F:2D:90:AE:0C:A1:19:3C:58:B9:DF:6E:91:01:48:F8:F0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04549C19
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d1-8Xy2QrgyhGTxYud9ukQFI-PA.roa
Signing time: Sat 19 Feb 2022 14:56:03 +0000
ROA not before: Sat 19 Feb 2022 14:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72653849 (0x4549c19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 19 14:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=775fbc5f2d90ae0ca1193c58b9df6e910148f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f3:e6:d1:52:37:4f:fb:a5:f1:3e:dd:73:20:
3a:02:0b:56:c6:1e:37:9b:df:d4:e0:ff:0e:ce:b3:
31:87:f3:54:89:94:2b:27:f3:c9:6e:13:d1:3e:b5:
25:22:8e:1c:04:a5:ea:60:39:71:6b:e1:a7:0d:5b:
02:10:75:01:d0:32:89:69:a5:93:7e:41:b3:51:0d:
2a:94:7d:53:de:3e:98:15:93:4c:34:33:94:25:4c:
4f:df:40:ec:8b:7b:58:f0:91:78:b5:0f:02:6a:fa:
e5:8e:39:68:34:ef:1a:0c:bd:bd:c1:d6:c2:46:e5:
f7:d4:c5:d6:41:73:c1:67:6f:3d:06:40:53:b2:4e:
c4:02:d6:78:05:89:6e:f5:60:5a:1a:b4:b4:46:63:
64:71:be:41:85:c0:1a:b4:c0:94:80:10:22:70:a6:
df:14:c7:d1:36:c6:fa:a2:a3:11:c3:ec:b8:7e:6e:
1d:4d:51:b0:b5:91:d8:1a:9c:d2:c6:75:eb:e1:0e:
4e:3a:37:54:ab:b3:c8:53:7e:a4:42:07:7d:2a:a5:
8d:97:2b:54:da:0b:e7:de:51:2d:b9:c8:42:5e:6c:
d4:b7:4c:94:58:20:55:71:17:6e:ee:3a:69:c0:b8:
de:6e:08:d0:36:43:c4:cf:97:bc:2d:65:ab:de:8a:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5F:BC:5F:2D:90:AE:0C:A1:19:3C:58:B9:DF:6E:91:01:48:F8:F0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d1-8Xy2QrgyhGTxYud9ukQFI-PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
2f:f3:07:fb:ea:91:07:0a:64:6a:39:bd:1f:0f:a4:62:d2:d3:
0b:8c:81:09:ec:bb:7b:47:b0:93:81:7e:ec:4a:16:70:bd:1d:
9b:5b:d1:9f:04:05:f4:6b:50:3f:d6:65:85:34:c8:d9:ba:c6:
b1:32:4b:73:c2:3f:36:84:99:06:32:1a:90:63:7d:3c:b9:00:
0c:0e:fc:fa:ce:1f:22:61:33:c0:4b:79:b2:aa:75:ea:ac:69:
6d:23:3e:02:df:e5:13:b1:f6:69:15:d5:b2:7d:89:56:77:fe:
62:12:5b:52:2c:e7:9b:51:2c:45:b3:aa:1c:6c:3e:61:37:b3:
4e:f2:c4:e0:9c:be:32:91:3f:a8:d2:33:d2:9a:73:93:46:33:
f1:18:1a:0f:f7:4d:62:b0:d6:f3:1b:39:00:f8:04:6a:13:af:
4a:0c:43:73:6a:a5:3d:85:d7:da:7a:25:2d:c3:d3:40:74:ab:
7a:87:82:88:32:54:92:5d:ba:f9:ea:27:bf:93:3c:7f:31:49:
4b:53:70:43:b0:87:e8:ba:77:d8:f0:39:00:50:d2:fc:33:e2:
d2:09:46:7c:6f:06:9b:60:7c:88:28:32:37:25:74:ea:19:e2:
35:d8:5a:46:cf:40:c3:66:f8:ce:a4:81:72:e2:8d:40:e2:f8:
7e:4c:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:35 2025 by rpki-client