Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/otZvt4SZDWfzKNjdy4y0cVpUq84.roa
File: otZvt4SZDWfzKNjdy4y0cVpUq84.roa (raw, json)
Hash identifier: PU7djX+T3Rmxk0i2M+cbtNgAPokO7qX834NSARHiOBs=
Subject key identifier: A2:D6:6F:B7:84:99:0D:67:F3:28:D8:DD:CB:8C:B4:71:5A:54:AB:CE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05163C82
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/otZvt4SZDWfzKNjdy4y0cVpUq84.roa
Signing time: Wed 16 Mar 2022 16:24:55 +0000
ROA not before: Wed 16 Mar 2022 16:24:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85343362 (0x5163c82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 16 16:24:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2d66fb784990d67f328d8ddcb8cb4715a54abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:36:91:aa:ea:50:e1:25:f0:82:75:2c:1b:
82:1d:89:eb:9b:d2:8c:b7:f8:cc:03:fd:57:09:a9:
e9:f3:0f:66:c2:ac:4f:eb:e9:a9:50:93:38:d3:e0:
ca:0b:b1:c5:e2:fe:de:38:c3:20:45:38:65:8d:cd:
51:d6:38:a4:cf:14:83:4a:a4:26:9e:0f:36:af:af:
38:c9:bc:35:6d:95:a5:d2:69:8d:42:2d:23:30:33:
11:5a:78:f4:ff:3e:6c:cc:36:1c:99:bc:20:0e:ee:
76:82:f7:05:76:6a:cc:e8:bd:22:18:4e:5a:cc:f2:
10:0e:af:4e:06:13:02:00:30:e3:41:a8:25:d0:83:
68:6e:43:87:30:04:26:51:26:53:52:c3:9c:69:8f:
68:dc:ac:68:f8:a3:87:66:30:d5:13:e5:1d:55:1d:
ff:57:51:cc:4a:51:ec:e9:51:7e:6e:e5:22:c8:4c:
ca:e5:ed:6d:8a:44:06:aa:c2:c2:e5:83:33:f2:9c:
7e:d7:9d:a9:ec:be:5f:4f:87:b6:77:08:df:25:86:
5e:2b:73:b8:86:3e:59:30:06:60:e2:35:64:8a:c2:
4d:de:b8:4c:fb:0e:ef:62:c9:1e:80:18:5d:aa:97:
e0:88:0e:e2:d6:7a:72:78:ee:b6:b8:cd:fc:85:c5:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:6F:B7:84:99:0D:67:F3:28:D8:DD:CB:8C:B4:71:5A:54:AB:CE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/otZvt4SZDWfzKNjdy4y0cVpUq84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
7b:94:05:3c:f3:28:37:bc:57:f3:08:ff:9d:87:49:38:78:1b:
e4:21:37:c7:98:07:95:92:25:cc:18:d4:6f:a8:32:11:ce:08:
f8:e4:c3:bc:8a:aa:85:a4:1c:f9:3a:a3:d0:da:b0:0c:4f:c6:
9f:dc:53:ea:79:8b:85:6b:69:73:a2:6d:09:a1:24:43:60:c0:
52:52:b0:50:f9:70:19:83:20:ed:52:b6:87:1e:0a:21:24:c6:
59:be:34:4c:07:fb:61:75:09:bf:ec:af:18:85:8a:7b:5d:ed:
22:a8:ee:21:85:4d:56:ce:b9:0b:20:5e:e9:53:e0:63:77:39:
e6:2f:85:e0:26:77:09:bc:af:a8:45:c8:f5:ef:64:e5:58:cc:
6c:b1:44:57:c2:52:cd:97:47:bf:c4:2b:f0:a1:c8:d9:b2:f3:
be:24:13:0a:71:72:9b:7c:8f:82:bc:8f:9b:7f:84:ad:07:fe:
2a:07:5b:d2:4a:bb:fa:a7:25:10:bb:81:8b:1f:c4:40:f1:d5:
c0:8a:78:8b:45:aa:82:48:ba:32:76:e6:48:31:44:1f:f2:a4:
b9:3a:90:f5:00:0c:ad:e7:6d:a3:c2:58:71:9f:b6:5f:87:dd:
1a:0b:df:0f:a3:29:17:1b:0b:08:50:ec:27:1a:d9:ec:1f:34:
90:c5:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:38 2025 by rpki-client