Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJJwRsw33gIoWq_2TcsE1Ci7Ca0.roa
File: pJJwRsw33gIoWq_2TcsE1Ci7Ca0.roa (raw, json)
Hash identifier: QL4uyIKBIwv4woqq7yjuG4CslBV+6AYpwU10aVotG1A=
Subject key identifier: A4:92:70:46:CC:37:DE:02:28:5A:AF:F6:4D:CB:04:D4:28:BB:09:AD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 042EA9B6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJJwRsw33gIoWq_2TcsE1Ci7Ca0.roa
Signing time: Mon 14 Feb 2022 13:54:40 +0000
ROA not before: Mon 14 Feb 2022 13:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70166966 (0x42ea9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 14 13:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4927046cc37de02285aaff64dcb04d428bb09ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:44:b4:4c:39:30:c6:56:01:0e:f1:7d:24:
6e:f1:a0:33:30:62:c1:00:76:56:b0:0a:d2:48:36:
bc:8e:f0:8d:44:eb:4c:7f:bb:cc:52:12:25:b3:bc:
5b:97:f4:4e:ed:1e:ed:1b:36:68:ea:f4:fa:2b:51:
97:a6:49:c7:dd:29:97:a8:8a:ca:78:bc:8b:d9:f8:
65:d1:83:27:8f:34:c7:1c:d2:f1:5f:bc:1d:21:06:
a2:0a:3c:5e:65:cc:a2:35:18:eb:e9:a6:2f:f0:6d:
91:6a:6e:98:1f:a1:db:86:b5:17:0c:04:08:ef:92:
52:4d:42:7f:db:ab:b0:52:26:19:6a:4d:bf:95:6e:
0c:a9:b4:23:d7:40:ab:28:81:ba:1e:78:89:ee:e7:
de:e2:c3:e0:5f:ad:c3:eb:37:7f:50:0d:49:1a:08:
2a:da:57:0e:a3:66:00:b1:a2:d5:c4:a8:13:f9:83:
eb:ae:9a:69:d5:64:7d:a1:fd:02:a0:30:00:ce:55:
1f:44:f4:78:26:23:82:0e:64:74:42:83:2e:55:94:
4c:c3:df:7e:2c:7d:d2:cd:8f:08:84:b1:23:af:cb:
74:34:96:98:28:e2:4c:9c:0d:8a:ff:c5:5c:3c:0d:
18:bc:8f:1d:67:02:08:2a:8b:86:9c:13:c1:7b:0f:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:70:46:CC:37:DE:02:28:5A:AF:F6:4D:CB:04:D4:28:BB:09:AD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pJJwRsw33gIoWq_2TcsE1Ci7Ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
68:95:56:0d:17:2d:8c:19:be:ad:98:b4:95:f7:cc:e2:02:4b:
87:c3:ca:1f:f6:0a:a2:00:e4:31:e7:ff:d8:5b:49:31:9f:59:
52:fa:3c:41:e1:b3:70:29:68:83:f1:69:9e:9f:b3:ec:5c:9f:
d2:32:45:b7:cc:fa:2f:ca:a5:9a:ab:de:f5:b1:40:05:94:f3:
00:1d:31:59:10:4a:bd:db:8a:89:d3:7e:38:79:ad:cf:95:6f:
b8:fd:fa:1d:44:b4:89:03:0e:43:06:ac:87:c5:f3:0c:e7:f5:
a8:60:ad:2d:03:56:71:2c:de:fe:d9:7f:bf:86:6e:f6:b3:96:
db:55:de:78:5e:81:23:3c:ab:5c:44:9b:69:c1:ce:d5:60:27:
c9:f0:bc:a4:37:a3:84:75:dd:db:76:b1:b9:a3:95:e8:a9:f4:
46:2d:ff:ca:3b:be:97:4a:e5:86:61:96:29:69:81:96:b6:7d:
16:40:16:19:49:6c:55:fc:cd:55:49:a8:d3:fa:83:0f:63:4b:
ee:3b:e5:cb:ff:92:0f:43:fc:fe:8c:be:a2:10:7c:d8:82:32:
2a:ff:97:3d:81:84:c7:f9:f4:44:e0:78:f0:f4:dd:b9:08:f4:
bb:e9:d3:ce:74:e0:a6:79:4d:1d:8e:03:c4:07:90:3d:96:fd:
94:08:0d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:07 2025 by rpki-client