Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa
File: lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa (raw, json)
Hash identifier: TPfMLruucoxnA49xd7+oHmIA5tcV36aO6NZpl0ZEzvQ=
Subject key identifier: 96:FF:D3:F2:15:6D:E8:6A:1E:A5:84:FF:8D:0E:1C:E5:0D:C9:F2:06
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04418E1B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa
Signing time: Thu 17 Feb 2022 01:42:22 +0000
ROA not before: Thu 17 Feb 2022 01:42:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71405083 (0x4418e1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 17 01:42:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ffd3f2156de86a1ea584ff8d0e1ce50dc9f206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:23:6d:14:f0:bf:6d:de:22:86:f8:f8:bb:
79:e6:23:46:bf:f7:b0:39:fb:08:30:f5:ac:0b:b6:
c8:d8:2d:97:0c:3a:d9:1d:7b:f1:81:22:0d:27:27:
7b:78:fe:52:41:cb:ea:96:ca:c3:10:1f:c4:5a:56:
bd:70:e8:2b:08:19:79:40:d2:46:9a:c0:04:80:2a:
b6:23:0c:ba:6b:24:c2:6c:e2:d0:c7:d7:39:c6:f5:
13:07:47:77:07:be:d9:c0:db:ec:9c:78:8b:42:c7:
7d:99:49:d7:1c:5b:ef:0e:29:21:08:83:6f:ef:72:
7a:ec:ff:dd:87:88:c4:38:29:0c:34:f5:b3:36:6e:
73:c9:b2:f4:32:6a:ca:11:10:a5:60:58:30:10:fb:
56:78:b7:d0:6f:ef:f9:fd:08:85:9d:18:9f:1c:c7:
75:3e:6e:42:88:db:e7:e2:9e:a5:d1:71:6d:4f:8e:
38:99:59:39:d4:9c:61:e1:4b:30:79:a1:dd:03:51:
d4:8d:07:57:09:d2:69:77:61:f9:f5:03:c5:14:52:
be:ce:3e:ea:c3:d3:19:c7:d9:d6:c6:ba:a6:05:0f:
c7:f8:60:39:b3:f0:cb:03:2a:6a:4f:06:e0:a0:4a:
dd:7b:71:56:39:f8:09:56:ac:4c:a6:f8:bd:54:3c:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:D3:F2:15:6D:E8:6A:1E:A5:84:FF:8D:0E:1C:E5:0D:C9:F2:06
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
6c:24:1b:84:51:cd:1d:78:b5:26:c8:50:29:41:38:a9:b0:42:
67:20:34:bb:de:df:e7:0a:76:e7:cd:4c:01:9f:57:2b:4b:56:
b0:e1:0b:d0:8f:cd:01:5c:3f:00:fd:3b:1c:20:27:22:cb:9e:
9b:d0:8c:7d:20:b2:64:d1:f5:80:cf:d8:c8:ac:a8:2d:b7:84:
4a:4a:c0:9e:77:e2:ca:54:83:b0:5d:ca:6e:de:28:a5:c5:5d:
dc:15:c0:7e:18:7c:c1:49:5d:d5:46:64:de:ea:b8:60:44:f3:
7d:a8:aa:67:fe:f9:20:a6:28:0b:dd:34:f3:c9:d9:61:0d:8d:
57:44:a8:7c:67:e2:be:14:e3:dd:42:3c:ec:e5:5a:12:63:08:
0a:4e:45:80:36:5c:13:7a:b5:6a:eb:e0:67:3d:81:85:95:ea:
b2:88:83:8c:0e:e5:78:23:f0:d1:8b:92:dc:66:e5:62:ba:78:
ce:62:1a:44:c7:fe:2e:2e:89:c0:5a:96:87:d5:59:ed:0e:f6:
22:c7:7c:59:37:e7:9c:ff:ad:ea:4b:ea:a7:61:dc:f8:c3:76:
84:37:e2:23:bb:2e:d3:79:b9:0c:7f:e0:0d:b3:50:4a:bf:1b:
57:a0:47:e5:98:6e:60:e7:23:48:84:64:5e:60:94:bb:39:0d:
0f:3e:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:02 2025 by rpki-client