Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa
File: i4m9H46UEgPK2_YHZHkhD4zVXf8.roa (raw, json)
Hash identifier: BHi/zoDP7jd86c5VRBNOixusTL90JWGQpJy7drfqqJw=
Subject key identifier: 8B:89:BD:1F:8E:94:12:03:CA:DB:F6:07:64:79:21:0F:8C:D5:5D:FF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 047A303E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa
Signing time: Thu 24 Feb 2022 12:57:15 +0000
ROA not before: Thu 24 Feb 2022 12:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75116606 (0x47a303e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 24 12:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b89bd1f8e941203cadbf6076479210f8cd55dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:74:e0:bd:97:bd:bd:46:7f:dd:36:a6:54:
08:5f:aa:0a:d3:80:60:2f:cd:3c:05:a2:9d:20:85:
5f:14:ca:7b:bb:47:af:60:54:38:4a:a2:05:f6:f1:
70:0b:f5:0e:76:0e:e3:ae:1e:9d:4b:8d:72:b5:b6:
cd:e4:68:ba:5d:49:8d:17:db:2e:57:f4:ac:60:98:
65:99:8d:60:4a:e6:17:9e:fd:1e:fc:89:d2:7d:bd:
ef:7a:71:e1:84:20:09:06:85:50:2a:18:5b:62:51:
66:07:b0:ff:64:a0:24:f8:49:ee:c8:f1:5a:43:8d:
af:4f:27:1b:13:98:6a:c3:c9:88:b7:b6:2a:fc:6e:
2b:f8:c6:b2:f5:73:02:27:d7:24:99:f8:72:14:44:
4a:90:f9:f3:e3:09:9a:62:de:03:44:b7:9e:0d:8c:
9e:e5:31:33:e4:52:75:68:95:53:96:94:13:31:b0:
48:0f:60:45:8c:6f:5c:d6:06:96:87:e6:ea:b9:81:
b2:6f:9d:64:df:9d:b8:5e:68:4f:46:3b:cd:6a:b5:
7c:e5:11:bb:0f:58:84:d2:b9:49:60:7b:f4:c3:d9:
e6:ab:8d:39:9e:c6:76:85:7d:7a:07:1a:c1:7c:6d:
0e:13:6e:2c:11:9e:7d:b2:50:9b:bd:e9:98:46:72:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:BD:1F:8E:94:12:03:CA:DB:F6:07:64:79:21:0F:8C:D5:5D:FF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
4d:f8:0f:0d:65:53:90:c9:c0:5a:62:85:3b:8d:63:0a:7d:1d:
35:8b:23:60:62:2b:7d:a5:0f:73:cf:9a:16:dc:1a:16:9d:8e:
6d:1d:c7:8f:91:81:fc:91:90:30:45:38:e4:54:d4:e0:a5:98:
d7:e7:93:ae:92:be:55:b8:cf:54:c3:c0:e2:79:96:d2:d4:5c:
6f:7b:5a:95:4a:5b:d3:c0:4b:2f:10:8c:cf:98:27:c3:26:3e:
96:29:73:fa:50:9c:32:10:ea:0b:6b:dd:51:51:d8:48:8c:41:
9a:72:b4:f7:78:d8:5f:8d:ae:9a:a3:d3:11:69:e0:9d:6f:7d:
eb:45:cb:41:e2:c2:06:23:2b:1d:71:96:7c:ee:7b:0f:e9:da:
8f:0a:fa:45:c9:25:2b:b7:ec:bd:69:8b:b8:d2:6f:12:75:87:
20:3a:f2:81:29:d3:f0:41:a9:9e:64:a4:8b:94:74:cc:a0:33:
e6:33:ce:7d:7a:a8:a9:fb:cc:26:da:b0:28:fc:e6:7f:1d:dd:
77:ab:08:97:f6:03:ec:cf:d0:9d:80:dd:fb:39:3a:b0:36:8f:
71:3f:99:30:d9:cd:eb:ae:1e:24:f2:a2:48:45:2a:15:e9:df:
b3:59:61:77:ca:e4:83:ef:e9:db:28:8d:1b:00:0b:95:75:ac:
ef:b4:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:45 2025 by rpki-client