Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa
File: oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa (raw, json)
Hash identifier: 06IOhBR7grC64uqGkJj4NCVYIULjhZCxzOFpwVW3pBo=
Subject key identifier: A0:6C:75:DE:F3:3F:2F:1B:71:42:3E:AC:71:9F:E6:EA:03:F9:41:D7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 093CC3C1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa
Signing time: Tue 28 Jun 2022 17:21:02 +0000
ROA not before: Tue 28 Jun 2022 17:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154977217 (0x93cc3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 28 17:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06c75def33f2f1b71423eac719fe6ea03f941d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:a3:56:2f:ff:0e:27:50:d4:93:9a:74:c7:
19:fd:c6:ec:d4:6a:96:2d:57:57:0f:fd:79:7f:a7:
ec:08:ec:fe:7c:f3:e5:76:4d:c7:86:6f:00:35:6f:
22:69:07:ea:f0:c3:9e:f8:38:e2:64:36:42:79:8d:
87:b7:b4:de:50:24:fa:18:2c:6d:3a:f1:04:8b:a6:
c2:df:6c:0b:9e:39:cd:b5:56:33:03:e2:1a:e3:77:
51:5b:92:bf:ab:c6:d8:6d:62:89:a1:34:38:57:a0:
e5:90:4f:18:99:8d:1e:12:ab:98:73:c9:bb:79:d2:
b7:43:bd:89:bf:9b:02:ab:3d:e8:c6:51:cf:11:b7:
de:fc:16:1e:13:55:8c:cd:2c:05:c6:55:ac:d9:60:
2c:80:1b:7a:c1:5e:06:cc:61:c0:90:86:19:01:26:
e5:a3:f1:f1:49:1e:9c:f1:18:da:62:28:16:15:5a:
b1:42:71:b2:89:2d:4b:f3:22:80:d4:24:6e:00:3e:
6d:8e:93:4d:82:3a:79:8c:c9:07:8a:0e:2c:b5:08:
06:e4:82:26:43:bd:4f:87:b9:e1:1a:e2:03:47:86:
f7:29:22:d6:ec:cd:06:7b:0f:9a:09:93:5c:d4:e6:
7e:c0:69:ff:ac:a8:4a:ed:33:9c:01:fe:84:2f:66:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:75:DE:F3:3F:2F:1B:71:42:3E:AC:71:9F:E6:EA:03:F9:41:D7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
9c:33:d8:4a:67:d1:90:72:c4:67:28:17:f4:35:aa:f9:f3:fb:
5f:a7:60:55:ed:7f:ca:8b:0a:c2:04:44:73:6e:74:d5:24:9c:
25:12:ae:c4:00:aa:4b:83:2f:d4:e2:9f:7a:00:d0:96:a8:b6:
9f:54:ee:47:4b:30:d2:25:17:ac:ab:7e:9c:99:b9:49:a6:4d:
bc:04:f0:93:37:2e:44:9a:78:75:7e:87:f7:cc:f4:76:52:99:
9b:81:02:67:1e:09:4c:f4:98:0b:21:5f:56:31:1f:22:c7:42:
5d:4d:1e:59:c3:4b:be:cf:b7:db:14:66:1d:71:41:2a:09:5f:
d6:a7:e5:b5:9c:54:90:e1:44:a5:a6:2f:5b:37:16:fd:5a:f7:
a2:dc:08:08:ec:74:34:4e:4e:30:14:af:be:62:8d:a7:e0:72:
29:d0:52:70:37:85:c7:7b:84:b2:a2:b5:36:65:72:92:f1:5f:
8c:ce:bf:a8:76:0c:11:85:fe:e5:b2:c5:c0:f5:3d:79:a2:d8:
ad:82:57:03:a6:db:78:c4:7a:ad:2c:41:3a:34:b9:c8:de:58:
54:ea:82:0d:43:bc:00:80:77:19:ad:9f:79:ff:32:35:ae:85:
af:25:d1:68:c3:14:4c:f7:97:4f:3d:ad:b7:13:21:7a:c1:56:
e1:58:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:56 2025 by rpki-client