Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa
File: k7d__UF1eYzLmhLvnDBYslm78KE.roa (raw, json)
Hash identifier: T9dFbdT2Cx61rZCDWv+qF8WuUfKfbhZEugUlTX7nA2g=
Subject key identifier: 93:B7:7F:FD:41:75:79:8C:CB:9A:12:EF:9C:30:58:B2:59:BB:F0:A1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0436C241
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa
Signing time: Tue 15 Feb 2022 15:13:38 +0000
ROA not before: Tue 15 Feb 2022 15:13:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70697537 (0x436c241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 15 15:13:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93b77ffd4175798ccb9a12ef9c3058b259bbf0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:38:26:3f:f4:ed:a2:79:0e:76:aa:ff:3f:
ee:64:d3:40:d5:5b:66:f7:8a:e9:34:91:61:54:98:
98:07:4d:01:ea:ce:55:12:5f:2c:aa:6d:13:21:54:
b8:08:0b:92:ab:15:71:8a:73:32:dc:11:f2:f9:04:
62:b5:83:6f:6c:46:34:c0:90:d5:95:93:66:e9:48:
77:80:c6:27:f4:56:c0:b6:87:3c:45:30:f0:4b:0d:
cd:38:47:4c:96:93:f9:fe:b6:2e:e2:90:42:fb:56:
34:d7:36:ad:7f:52:01:d5:09:6f:ee:26:a5:e6:48:
98:1a:c7:da:a5:aa:c6:49:f8:cf:cc:4b:6a:b6:f2:
f5:34:2a:71:75:cb:1d:8a:ec:e5:24:19:23:b8:78:
98:bc:04:cc:28:11:07:af:1f:9f:86:03:25:7f:a1:
f3:20:3d:d3:ea:f7:af:ba:21:88:19:a8:02:f9:de:
82:67:ed:36:21:c3:16:88:4e:de:24:78:4f:b9:51:
72:1e:8f:6b:8e:f4:de:1c:40:47:24:f7:30:61:08:
66:e1:fe:42:a3:dc:29:e8:07:4a:85:2f:df:90:bb:
68:b8:53:85:1d:04:23:74:3d:1e:1a:11:f7:9c:7a:
3f:1e:7f:9b:32:41:66:d1:e5:3e:16:dd:e0:2a:e3:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:7F:FD:41:75:79:8C:CB:9A:12:EF:9C:30:58:B2:59:BB:F0:A1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
1b:09:d6:c7:f7:4c:89:7e:87:37:5f:0d:4f:53:ab:6b:84:5a:
9e:0a:2e:cb:a4:1a:0b:7e:ae:1d:24:4e:b9:5b:8a:d5:bb:e8:
bb:d6:ef:df:06:80:a6:67:c4:7a:4a:d3:95:ff:be:68:f2:b9:
60:2c:b0:bb:60:8c:6f:7b:fe:05:bc:48:5f:98:86:a7:b0:c8:
fd:e6:1a:a8:a9:58:8c:7f:22:9d:55:9d:9c:ad:0a:a9:23:cc:
f5:09:9d:6d:c5:12:06:26:67:61:35:c1:09:dc:70:8b:2b:41:
b4:f1:98:e4:86:a8:62:fc:89:63:c2:11:22:29:68:5e:eb:22:
0d:7d:ae:c1:e8:9c:fc:c4:d3:aa:08:96:78:9b:6d:41:76:ee:
2a:50:12:d3:3f:a6:42:c1:a6:95:23:66:c6:60:f7:ce:e8:dd:
f8:cb:85:a3:53:33:fb:57:7a:16:a6:d6:01:c2:66:0f:ea:28:
a9:19:1f:8b:08:09:2c:9a:91:d7:94:68:94:fe:40:f2:95:50:
3c:00:25:aa:1c:7d:8d:2d:f8:1f:07:ad:97:60:aa:f5:23:1f:
56:aa:7c:e4:4b:ce:3c:3a:3e:de:87:a1:db:66:6f:e9:7d:4c:
01:96:0c:ac:a4:79:d6:93:26:70:63:12:ff:ed:eb:ea:e2:ca:
8e:2b:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:44 2025 by rpki-client