Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k4keXc_U79LwAteTk0sjF_myPP0.roa
File: k4keXc_U79LwAteTk0sjF_myPP0.roa (raw, json)
Hash identifier: WNTdqrS39gRegY81FePAr6nafxR+R3gPpv9zD6kKPuY=
Subject key identifier: 93:89:1E:5D:CF:D4:EF:D2:F0:02:D7:93:93:4B:23:17:F9:B2:3C:FD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05D4399D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k4keXc_U79LwAteTk0sjF_myPP0.roa
Signing time: Tue 12 Apr 2022 09:28:03 +0000
ROA not before: Tue 12 Apr 2022 09:28:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97794461 (0x5d4399d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 12 09:28:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93891e5dcfd4efd2f002d793934b2317f9b23cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:5c:b4:00:32:d4:13:c7:6b:50:a8:d1:b6:
b4:16:fd:70:78:15:b0:ec:28:a4:2a:8d:21:30:c2:
5b:1b:90:77:8a:5e:61:cd:56:b4:52:25:9d:6b:b2:
35:8b:2b:88:6c:6f:26:36:fa:37:b8:7b:19:29:84:
82:93:3f:51:b3:57:14:1c:2b:75:e9:22:14:4b:a6:
94:12:a9:68:ec:21:11:48:39:41:b2:87:22:74:59:
00:bd:5d:f8:9f:42:19:9b:c4:4b:b8:69:df:83:c3:
a9:95:d0:8e:34:42:91:4e:c3:d2:97:5f:67:8f:83:
bc:f8:b8:5d:b4:2c:6b:2e:b0:e7:8b:1c:29:07:47:
5a:08:7e:35:a8:7f:b4:a4:dc:f6:4a:02:f3:7d:92:
20:c1:3c:8e:05:28:11:6a:02:71:bb:50:b1:c0:22:
f7:e2:68:e3:a3:6b:18:cd:48:fe:83:da:8b:6d:65:
28:19:fe:80:93:fe:bb:bd:59:fd:6a:36:04:75:c4:
49:dc:45:b7:ab:53:90:d7:48:17:87:a6:3d:80:65:
7f:31:09:c5:fe:43:d3:6f:b1:3a:0c:b6:98:f8:01:
9d:46:31:5a:fb:87:bc:ad:e1:6d:d8:98:95:58:60:
d6:46:7f:14:8a:dc:b7:4f:e7:55:4e:ad:50:33:a5:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:1E:5D:CF:D4:EF:D2:F0:02:D7:93:93:4B:23:17:F9:B2:3C:FD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k4keXc_U79LwAteTk0sjF_myPP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
00:a6:97:9b:75:d5:ec:d8:06:06:bc:0e:a2:13:5f:9d:61:ea:
33:f5:fd:72:0f:91:51:48:75:43:86:d5:e1:78:07:7e:98:77:
59:88:09:b0:96:4e:6c:6c:ea:ee:b3:90:c7:7f:5b:48:7e:d7:
d7:e3:9c:b9:85:01:f2:19:b4:e6:80:f8:90:b9:f5:cf:72:db:
e4:db:33:b5:34:81:17:14:ef:fe:3c:4d:2b:7e:f4:ab:4b:62:
61:8c:c9:67:6c:2e:86:17:31:5c:57:c2:1e:e7:4e:ba:1a:55:
d2:f6:9f:49:53:d3:35:53:4b:f0:06:ad:fe:e1:f5:49:f5:35:
1e:06:d1:10:22:09:50:6f:1d:7d:db:56:a6:1c:b1:78:df:35:
e8:e3:b1:e6:14:3f:ef:e1:68:8f:17:28:56:85:55:c6:f3:64:
16:a6:dd:9a:b9:d2:47:16:e8:d5:02:f8:6b:c4:71:67:03:56:
e8:7c:6a:3b:1f:d7:c8:02:79:94:08:8c:8f:7a:d1:ab:75:98:
20:d4:11:4e:e7:1c:2f:16:47:b4:19:6e:e5:8c:57:ca:49:5a:
c5:a8:20:a5:e3:f0:de:78:9f:bf:33:47:af:76:a8:b5:7a:80:
4d:a6:81:20:f2:24:93:84:24:68:c5:e0:af:7b:a8:96:18:b2:
8a:c8:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:46 2025 by rpki-client