Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/h9OOXibKwsJJkZzPzg9XJVALRRc.roa
File: h9OOXibKwsJJkZzPzg9XJVALRRc.roa (raw, json)
Hash identifier: sjdRKd1pHHZ+nvrbrFS5EytqOYDyLiWuuJNENqI9qEE=
Subject key identifier: 87:D3:8E:5E:26:CA:C2:C2:49:91:9C:CF:CE:0F:57:25:50:0B:45:17
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04AEE4CE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/h9OOXibKwsJJkZzPzg9XJVALRRc.roa
Signing time: Thu 03 Mar 2022 12:22:04 +0000
ROA not before: Thu 03 Mar 2022 12:22:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78570702 (0x4aee4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 3 12:22:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87d38e5e26cac2c249919ccfce0f5725500b4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:61:dc:2f:20:c7:40:21:86:e1:e7:74:56:
a2:9c:89:30:b4:6b:48:d6:34:f8:3f:6b:61:09:2e:
d6:6e:54:8f:49:39:88:44:a3:17:b5:c8:dd:5b:4c:
f6:c4:7f:74:9f:40:15:9b:74:d0:68:57:02:c2:c4:
4a:32:36:39:26:72:cd:91:53:35:6a:ae:ed:b7:38:
95:12:98:2b:9a:7b:a8:08:92:f2:6d:14:9c:ee:96:
d2:45:a3:f6:65:32:33:29:8d:e5:7d:d3:1e:73:91:
16:df:ec:e1:78:65:93:49:da:22:c6:48:0b:54:bc:
79:1e:32:04:71:64:8e:bc:cc:17:eb:fd:0f:f7:50:
40:89:1f:73:1b:6b:86:22:5c:be:60:35:74:42:1d:
e6:e4:8e:df:89:50:74:77:16:7d:6e:37:45:c1:29:
40:e3:54:0b:54:23:be:9d:97:0c:1b:bb:73:40:26:
44:f0:b7:09:6f:f5:0f:6b:f3:09:35:82:1f:89:e8:
d2:cc:af:76:04:1c:a5:f6:5a:ce:17:70:52:2b:11:
66:76:db:87:9c:c6:2a:bd:b1:d0:6d:10:c1:e9:90:
bb:58:cd:82:0f:10:d9:7e:1e:4f:a5:67:33:7b:a3:
05:e0:8c:30:00:51:26:2e:2f:3d:47:5e:f1:6f:7c:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:8E:5E:26:CA:C2:C2:49:91:9C:CF:CE:0F:57:25:50:0B:45:17
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/h9OOXibKwsJJkZzPzg9XJVALRRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
09:76:f7:fd:27:a3:96:c2:40:d6:55:37:ac:14:7d:4c:02:2a:
aa:ca:42:ca:b3:ab:7d:9a:fc:03:69:7a:71:f6:01:25:5a:bd:
8d:52:12:b1:66:ce:e3:71:b9:d4:20:e3:8c:6e:98:c4:d0:6a:
47:d3:31:d4:7c:80:29:ea:43:2f:56:07:82:4d:1d:ae:0d:25:
34:be:5a:7b:0b:bf:d7:d0:ae:db:aa:ae:b6:87:89:14:21:31:
34:21:cd:cd:b5:f7:e8:bc:12:d0:0d:e8:0e:e3:08:fd:a2:50:
fa:4b:87:bc:dd:b9:39:0b:8c:9e:cc:e6:21:1e:6b:f2:53:2d:
2c:4f:6f:dd:a2:bf:6f:d8:16:cb:69:96:be:fb:df:fe:50:95:
0f:da:b8:5e:4b:8f:c1:30:1c:d7:46:c4:54:13:e8:22:39:92:
3f:a2:f6:35:8f:f8:1a:39:38:23:9d:01:bd:8b:26:bb:b0:d0:
1a:cc:d5:1f:1e:d4:b3:b8:53:67:d9:e1:89:b9:1a:2b:8d:c8:
3a:d9:d9:32:4e:37:32:44:6e:b8:7e:71:84:30:c8:2b:87:ce:
e2:ed:d6:29:fa:db:d3:ec:e2:3e:6f:64:b1:1e:ef:f5:79:92:
4b:f0:0c:78:16:cf:59:7b:70:22:a6:9b:45:b3:91:e5:2c:4d:
12:dc:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:04 2025 by rpki-client