Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dnP7wvJx3lDnv6FIb798mYkV9qg.roa
File: dnP7wvJx3lDnv6FIb798mYkV9qg.roa (raw, json)
Hash identifier: 2R0VaqynorIAJ+dqrHmQIXdHzSI3bf8+c8FpRKT6+xg=
Subject key identifier: 76:73:FB:C2:F2:71:DE:50:E7:BF:A1:48:6F:BF:7C:99:89:15:F6:A8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06B379A0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dnP7wvJx3lDnv6FIb798mYkV9qg.roa
Signing time: Tue 10 May 2022 02:36:47 +0000
ROA not before: Tue 10 May 2022 02:36:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112425376 (0x6b379a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 10 02:36:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7673fbc2f271de50e7bfa1486fbf7c998915f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:b1:78:5a:66:d7:57:b4:4f:7c:51:8f:b0:
4f:4e:cb:19:ad:74:75:a4:29:44:57:d4:0e:1d:c5:
9a:c9:cc:24:c5:04:46:5c:77:4f:6f:22:9a:6e:44:
75:f7:15:7c:d4:cf:cc:0e:d4:df:27:3e:93:65:c8:
11:a6:25:f7:7a:15:57:e6:ed:c8:11:c1:a5:75:32:
27:a3:96:1e:11:6e:e6:76:3d:e1:62:d6:94:14:2f:
f9:c0:3e:06:46:33:23:14:2a:66:00:01:ef:ee:ea:
1d:04:0b:56:ef:7a:4f:c8:cb:84:a6:36:a4:59:72:
64:bd:32:fd:57:1d:dc:d9:34:ab:51:b8:e5:aa:12:
f9:da:9f:00:92:16:4b:dd:2b:51:da:31:9c:e7:22:
82:50:d3:05:7e:a5:ec:cf:8d:eb:6b:3b:f4:2b:5d:
e4:cb:2a:20:48:13:66:63:9b:d1:47:f0:15:ad:f8:
56:33:c0:3d:9c:39:1d:80:4b:f6:21:ba:75:7b:6c:
05:65:7d:5d:84:4f:a1:2c:b0:4c:8a:71:4d:de:8d:
29:6a:55:6b:4e:66:47:4d:c9:60:2a:b8:ef:3a:8a:
30:60:68:e7:e9:06:f6:f1:00:5d:43:07:f5:31:df:
25:17:9f:d5:96:42:37:15:3c:71:9e:c2:de:b5:af:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:FB:C2:F2:71:DE:50:E7:BF:A1:48:6F:BF:7C:99:89:15:F6:A8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dnP7wvJx3lDnv6FIb798mYkV9qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b4:df:43:9e:f0:95:02:ca:df:4b:b0:54:de:12:e9:a6:18:
b1:21:0c:48:05:7b:8d:e6:78:32:a0:c2:12:96:62:6a:c2:d7:
c3:d3:f1:c8:bc:57:3e:f3:3d:7a:0f:9e:cc:a8:3d:35:7b:1b:
71:16:a4:8d:d1:66:23:77:b2:e4:91:ab:10:1c:5f:d3:23:67:
db:05:62:4c:80:db:88:46:fe:02:6d:cd:cb:f5:d1:86:f3:f4:
86:50:7e:64:fa:4a:78:ab:74:bd:1c:1e:0c:30:8d:35:5b:a6:
51:7c:59:c2:07:78:a7:d7:c3:bf:4b:f2:0b:ce:d0:6f:78:bd:
08:ea:a5:d8:90:f5:3e:7c:52:a3:e7:45:04:d2:17:0b:44:fd:
fa:9c:8c:f8:3d:59:e1:6b:0f:da:d4:1e:55:a5:73:fd:9e:3e:
40:27:bb:81:ec:6d:b4:c5:6d:08:77:4d:55:ae:d2:5d:a7:e0:
0e:9c:a7:b9:8f:b8:85:40:f8:7f:b9:47:a6:93:e8:5c:09:00:
89:90:fd:59:a4:f9:dc:54:f8:8f:10:d4:33:da:92:1d:89:84:
1d:da:00:06:ca:62:87:92:51:aa:be:39:e4:6d:5b:b9:f0:97:
c3:a5:43:b9:bf:da:94:5a:55:23:37:5c:8b:99:5a:ed:54:ef:
a8:40:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:34 2025 by rpki-client