Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nYss6GYyKUG4Q1EClQHXEMOjOXw.roa
File: nYss6GYyKUG4Q1EClQHXEMOjOXw.roa (raw, json)
Hash identifier: R+2KO7WhubPrTJZxX2PdQKIrM3bPMOAEzvr+u3GfXKM=
Subject key identifier: 9D:8B:2C:E8:66:32:29:41:B8:43:51:02:95:01:D7:10:C3:A3:39:7C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 062D28DE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nYss6GYyKUG4Q1EClQHXEMOjOXw.roa
Signing time: Sun 24 Apr 2022 21:58:19 +0000
ROA not before: Sun 24 Apr 2022 21:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103622878 (0x62d28de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 24 21:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8b2ce866322941b84351029501d710c3a3397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:4e:59:14:9e:82:1c:20:52:bf:98:32:32:
1f:5d:73:d4:97:9e:63:eb:6f:97:72:89:26:b8:a4:
96:5d:3b:aa:21:3f:32:fb:10:30:f5:2d:47:a6:83:
3a:5c:50:94:7a:a3:d4:97:18:bd:6e:5d:38:7f:69:
26:90:f5:3c:4a:32:68:2d:eb:e4:df:41:59:68:24:
44:95:da:d2:23:6b:5d:72:29:6c:8b:d3:75:f4:ee:
52:84:d5:9d:d9:a8:a3:a9:b8:76:ef:f2:a9:f4:5e:
c7:62:e6:34:1e:77:ba:d4:af:c3:fe:0c:9a:d4:ab:
1d:f5:1d:59:85:9c:ec:eb:ff:dd:c9:a6:49:cc:79:
40:82:15:33:b1:90:a3:29:e6:2e:7e:22:d3:28:d4:
0a:4c:d2:ea:e3:80:33:a0:f3:0c:e0:7b:ba:03:23:
ad:93:67:76:30:a3:c2:7f:c4:f3:2a:ab:58:72:87:
77:0c:fb:40:65:89:83:6d:26:dd:5c:0d:36:6b:1d:
4a:2c:5b:98:74:c0:ab:43:a5:21:c9:78:a3:e0:18:
b2:25:6c:96:18:96:c6:77:e6:9f:6d:4d:4c:5e:78:
53:4a:18:8d:33:e8:91:0c:eb:76:62:36:56:c1:66:
be:ed:80:5e:1b:3b:c7:e9:8a:c7:4d:8c:83:bb:84:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:2C:E8:66:32:29:41:B8:43:51:02:95:01:D7:10:C3:A3:39:7C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nYss6GYyKUG4Q1EClQHXEMOjOXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2f:96:30:c8:ae:73:43:c0:dc:b1:de:be:d3:74:9b:a3:c7:
dc:d4:a6:63:e3:07:c5:c9:66:55:f6:86:7e:c3:6d:dd:af:8e:
46:41:ba:b2:48:be:3c:71:d8:08:4f:f9:04:3e:19:c2:88:af:
f8:a2:35:35:fb:8f:63:92:8a:98:6d:75:4f:2a:0c:4b:69:77:
17:4b:3e:a0:9a:d3:44:05:64:fb:6b:e2:a0:2c:53:41:c3:b0:
16:19:57:61:60:2b:40:85:e6:68:da:2e:18:d3:d2:f8:e2:6f:
69:de:ec:8b:9c:9f:dc:1c:ad:99:c0:1b:a6:f2:ff:aa:82:ea:
e5:db:29:e0:81:c6:41:ae:c4:0c:64:c5:0d:c2:4c:0a:e6:01:
63:a6:3c:fe:18:fc:09:c8:08:d8:cc:bd:7a:d6:66:56:6b:11:
d3:3f:32:c9:3b:be:4d:24:c6:82:61:c7:c7:30:4e:63:98:4f:
34:03:c2:df:a8:ee:b1:e3:be:a1:93:50:9e:cc:5a:e8:bc:1b:
5b:da:3b:48:11:1f:a5:56:ac:05:21:a4:3f:92:d6:0b:26:9e:
dd:0f:e8:35:ad:80:65:f7:0e:7b:e6:17:2e:11:1e:77:78:af:
79:5f:da:52:1d:6b:5f:60:a7:2e:fb:e3:82:e8:cf:40:e1:8f:
ad:cd:bd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:59 2025 by rpki-client