Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kX4T5d7eLO4YmJ_AEEtKY0qNPA0.roa
File: kX4T5d7eLO4YmJ_AEEtKY0qNPA0.roa (raw, json)
Hash identifier: bLNd4UjdR4UkQtWTl8gM/+q2nkYH7K4pPBcBKotxsP0=
Subject key identifier: 91:7E:13:E5:DE:DE:2C:EE:18:98:9F:C0:10:4B:4A:63:4A:8D:3C:0D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07235718
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kX4T5d7eLO4YmJ_AEEtKY0qNPA0.roa
Signing time: Thu 19 May 2022 04:56:08 +0000
ROA not before: Thu 19 May 2022 04:56:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119756568 (0x7235718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 19 04:56:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917e13e5dede2cee18989fc0104b4a634a8d3c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:ab:3a:5e:f7:5b:6a:85:43:0b:1d:36:37:
08:52:0a:7f:9c:5c:ad:46:89:0e:a8:a8:46:61:41:
05:4f:54:2a:f9:3a:7a:34:e3:b0:b8:e3:61:75:6b:
72:1a:ab:67:81:66:64:b5:14:c8:c8:46:f0:4f:8b:
46:ae:ca:ef:31:9c:16:8c:a5:7b:67:fd:b3:e7:f0:
ab:48:67:f2:64:b1:7a:b9:d9:45:cf:91:e2:f4:70:
3e:8b:2f:f4:61:98:06:2c:63:33:8b:06:ce:41:da:
c6:27:76:42:9f:30:4f:fe:22:9a:8c:91:84:b6:ef:
c2:90:94:d3:bb:6e:60:77:4e:a2:79:3f:11:6a:7a:
93:f5:99:bf:15:dc:3c:c6:c3:d9:93:d5:2b:6d:c6:
76:f1:85:ed:d7:68:cc:a2:a8:d4:01:7f:7b:bb:ef:
6a:3a:2f:b1:34:d4:10:df:7c:b7:e9:6d:db:12:f8:
4c:fc:83:a4:fe:e4:1e:c5:15:b5:79:15:d0:f2:b6:
22:37:9c:b0:a6:f6:cb:61:73:b3:17:47:aa:e8:91:
5f:0d:cf:6c:65:cf:b2:2c:f1:69:0e:ee:b0:ce:01:
c2:41:88:29:68:5b:4a:e1:26:72:3c:03:3d:24:9d:
ff:58:92:c5:8e:bd:1c:3e:1a:b6:6b:52:b8:49:ff:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:13:E5:DE:DE:2C:EE:18:98:9F:C0:10:4B:4A:63:4A:8D:3C:0D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kX4T5d7eLO4YmJ_AEEtKY0qNPA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
78:69:d2:24:d6:7a:76:61:29:f0:68:b3:73:30:49:d6:35:a9:
ba:a3:c0:f1:71:88:c7:e8:32:65:53:b0:64:db:d4:19:a3:c5:
e1:6f:df:c2:c5:19:af:3d:2a:89:41:6d:bc:7d:bc:e8:e0:a7:
a2:fe:34:59:14:5f:9e:2f:e6:b6:39:c1:d7:7d:cf:d9:c9:b2:
7a:3d:34:e0:66:33:0a:8e:17:86:42:19:ae:e7:07:de:f5:0d:
ac:b5:fa:e0:b9:2b:23:71:37:32:4a:99:4d:11:a9:87:a0:96:
d2:a0:55:20:31:5f:01:02:df:b3:e3:cf:05:89:1d:a2:e9:4a:
e1:7a:21:a3:c0:5b:05:69:37:ad:15:74:24:be:60:a6:1c:5d:
4a:cd:b4:38:48:0b:dd:40:d8:48:ab:54:e6:f5:05:1f:eb:8c:
bf:ab:2f:68:c2:ca:8c:e3:bb:6e:ce:20:bd:34:95:13:6f:0a:
4c:a0:63:e4:f3:2c:4e:a8:d3:e0:c3:7e:a1:30:23:e8:f5:bb:
dd:72:f6:38:c6:11:3e:cc:9f:3e:43:d8:bb:dc:3d:4d:7c:81:
1a:10:77:d1:50:1d:7b:10:d7:a2:28:be:8b:fb:20:1c:af:11:
42:6b:c8:64:60:16:ec:63:d1:5f:ed:7e:75:ea:03:6b:74:d6:
27:b8:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:24 2025 by rpki-client