Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ii0dnBClkQ77Gk_-i9jMmsjxz6c.roa
File: ii0dnBClkQ77Gk_-i9jMmsjxz6c.roa (raw, json)
Hash identifier: +jSCXId1P3d4Cje0kguspa/BYI2Wv3RWhMOuvLTtvJo=
Subject key identifier: 8A:2D:1D:9C:10:A5:91:0E:FB:1A:4F:FE:8B:D8:CC:9A:C8:F1:CF:A7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04872886
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ii0dnBClkQ77Gk_-i9jMmsjxz6c.roa
Signing time: Sat 26 Feb 2022 17:31:51 +0000
ROA not before: Sat 26 Feb 2022 17:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75966598 (0x4872886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 26 17:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a2d1d9c10a5910efb1a4ffe8bd8cc9ac8f1cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:ee:01:e4:4a:98:d1:bb:fd:bb:0f:25:3c:
a1:64:62:54:b7:e3:bd:49:4a:c1:31:63:83:b6:6d:
5f:75:8f:7a:b9:05:30:de:fa:25:47:ed:34:df:2a:
75:93:28:44:29:6a:4f:d6:9b:c7:8a:38:26:bf:3b:
81:5e:f2:4c:7f:4c:d9:f9:fb:cd:4e:ef:e2:99:43:
9c:bf:f7:05:04:57:91:23:89:d8:3d:f1:25:92:2b:
0f:78:5c:08:d4:7b:d1:b7:d9:39:ee:1b:31:99:65:
03:da:e5:51:d7:06:77:65:e7:fe:a2:e8:b1:b0:b7:
0d:fc:73:7a:0a:be:75:29:68:dc:07:08:87:a6:cc:
9f:e2:10:e2:4c:22:19:23:11:3d:50:85:3f:35:ca:
92:27:60:85:16:d2:2e:ac:58:6c:d9:9b:22:11:a6:
42:e8:1c:c4:c7:5c:21:40:97:b2:59:f9:73:56:30:
c2:e5:3a:28:4e:a0:b2:3b:e8:19:da:87:a4:d8:b2:
03:14:90:05:4f:1f:62:c4:5a:1d:b4:50:8d:ec:ec:
82:9e:a0:a2:50:36:f6:eb:a1:90:3d:35:66:c1:e5:
8b:76:ec:02:c0:33:e1:ca:55:92:1d:07:57:17:c5:
46:4b:57:43:67:a2:f8:dd:16:a2:33:1f:6b:3a:cf:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:1D:9C:10:A5:91:0E:FB:1A:4F:FE:8B:D8:CC:9A:C8:F1:CF:A7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ii0dnBClkQ77Gk_-i9jMmsjxz6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
94:5b:27:b5:a5:cc:6e:92:c2:27:89:28:3f:61:78:43:7d:79:
dd:84:d9:1e:c1:d9:ae:f5:35:e6:c1:af:46:7c:9b:a0:a8:18:
45:01:ca:89:04:70:51:10:63:75:e2:44:30:17:f7:6a:9d:a5:
c9:a2:9d:c6:3e:03:51:0a:e1:35:fc:f5:0e:8d:bd:73:9f:1e:
e1:82:e9:a3:a7:ed:b4:b5:0b:84:a6:04:dd:cd:00:05:e4:66:
50:e3:bd:ce:cd:e5:5f:d6:1f:21:59:85:77:12:81:35:92:81:
83:aa:25:3f:38:5f:f3:eb:1a:7e:cf:33:2d:42:b1:44:a7:85:
89:fb:52:a2:65:8b:9b:18:43:e3:e7:e0:44:63:9e:9c:d9:0d:
94:2d:24:b3:a5:70:56:70:fd:1e:b3:65:d0:f5:09:41:2d:c2:
60:a0:11:c5:35:c4:c9:60:27:b9:88:af:5c:71:09:ff:07:ce:
fe:c9:ae:0d:0e:7e:06:86:27:f9:11:5f:31:23:b4:19:c1:17:
33:bc:27:fc:d6:0a:54:d4:2b:d9:ce:11:78:ab:6c:ee:eb:ce:
f3:9e:db:43:88:da:20:9f:aa:53:73:13:51:71:6d:a3:73:c0:
34:dc:9f:4c:99:a9:e2:cf:85:79:67:cb:ef:d1:6b:33:b4:2c:
8c:4d:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:51 2025 by rpki-client