Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iKeoru4LhbArCUGkvPX_e-gYbEM.roa
File: iKeoru4LhbArCUGkvPX_e-gYbEM.roa (raw, json)
Hash identifier: 3TLqtJthi6FSfFu+dT0sBkMgnJ84ecAqn89vbRY92SY=
Subject key identifier: 88:A7:A8:AE:EE:0B:85:B0:2B:09:41:A4:BC:F5:FF:7B:E8:18:6C:43
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06D49B7C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iKeoru4LhbArCUGkvPX_e-gYbEM.roa
Signing time: Thu 12 May 2022 15:43:01 +0000
ROA not before: Thu 12 May 2022 15:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114596732 (0x6d49b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 12 15:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88a7a8aeee0b85b02b0941a4bcf5ff7be8186c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:41:8b:00:71:43:d5:37:46:b5:3b:51:04:
bd:6d:d4:cf:d5:af:27:54:e8:1e:ab:ae:78:1f:13:
fc:13:ea:90:14:15:e1:81:20:ab:df:17:67:45:26:
c3:9e:64:69:28:47:a0:98:ca:a5:89:62:69:c8:f2:
62:82:f3:91:b8:d0:dd:82:ab:24:c8:49:be:15:0b:
1b:55:90:7e:d0:3d:d7:66:4a:68:2d:b3:cf:ba:f0:
e5:ff:6e:28:18:69:b1:6a:d0:ae:62:af:46:00:c7:
e8:e2:2d:4e:78:05:37:8c:11:87:48:01:95:29:bc:
43:d9:4c:9a:fe:9a:8a:8e:45:83:f4:82:26:a6:bd:
ab:b8:e9:ab:0f:f6:67:d0:45:98:6e:62:8f:97:c8:
22:2f:9b:fa:39:1b:96:6d:ce:52:da:35:d8:49:29:
e4:a7:a4:14:94:1a:a4:90:d5:c3:aa:6a:52:97:aa:
82:ad:43:40:94:32:5f:6f:e1:75:ce:cc:d2:97:96:
09:c5:ce:5b:4c:2f:a8:48:7d:50:d5:04:17:e4:ce:
f1:fb:13:13:66:6a:f0:01:23:dd:55:87:91:5d:c8:
3f:07:95:e7:d0:98:fe:ff:1f:08:e5:11:ba:a8:b2:
2e:2d:76:4b:9f:4f:0f:b4:af:1e:32:77:34:3d:3f:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:A8:AE:EE:0B:85:B0:2B:09:41:A4:BC:F5:FF:7B:E8:18:6C:43
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iKeoru4LhbArCUGkvPX_e-gYbEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
19:72:85:41:6f:e8:f7:c7:52:88:b1:7a:d1:1c:b0:d9:24:8e:
65:b5:9e:3c:f8:ab:40:1d:2f:1b:bb:d0:48:cb:97:16:11:4d:
31:0f:bd:6c:0c:be:c9:1e:88:71:7f:b6:2b:70:63:8c:b6:66:
04:ad:ab:55:e5:c3:ca:87:06:96:c6:81:86:f1:d8:3c:2d:5c:
c9:33:f6:ba:d2:a0:ae:0a:61:e8:8e:7e:12:d1:da:e3:c3:4b:
ce:a5:65:71:c6:b0:d1:21:53:46:44:81:ec:1f:bf:65:eb:1f:
8a:cb:f2:6b:a6:d0:79:bf:b6:36:d0:bb:db:13:28:61:48:1c:
3d:4c:c8:f6:c4:2e:18:c3:57:c6:d0:57:9a:2c:00:46:2c:26:
fa:65:82:8e:4f:8c:f4:9f:e3:11:ae:39:13:55:eb:0e:3a:d4:
4d:61:61:8d:bb:14:6b:cd:63:3c:f3:9f:a1:f9:64:8a:c1:fa:
f4:d2:f1:f4:f4:9b:c2:6c:d6:da:d5:10:b9:94:f6:e4:fe:6f:
24:08:f8:3e:dd:d9:f0:15:f1:6e:00:6c:1e:93:a4:55:6b:c2:
93:af:5b:07:3e:b0:3a:a9:3b:8c:d6:1d:0e:63:00:63:b7:1b:
63:1d:e9:a9:09:3d:5d:34:e5:a7:5c:c5:c3:d9:af:1f:88:92:
35:d3:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:51 2025 by rpki-client