Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa
File: tCkEmCOxDSRsGj_nrSshJTq_8p8.roa (raw, json)
Hash identifier: CGZ7qSZwyxtzcPl6+mDfRSw1FiQBgVpMaUSLEhFXvkw=
Subject key identifier: B4:29:04:98:23:B1:0D:24:6C:1A:3F:E7:AD:2B:21:25:3A:BF:F2:9F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05EB03CF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa
Signing time: Fri 15 Apr 2022 08:09:14 +0000
ROA not before: Fri 15 Apr 2022 08:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99288015 (0x5eb03cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 15 08:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b429049823b10d246c1a3fe7ad2b21253abff29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:a3:de:e8:37:03:96:b9:ca:cd:2b:ca:1d:
02:24:07:02:d8:a9:6f:d2:38:68:a9:d6:45:f8:48:
86:ea:51:7a:e1:25:24:4c:0a:82:bb:b0:1f:1a:85:
a9:f8:39:75:05:48:3e:b5:dc:49:55:43:40:9a:42:
f2:3b:5f:81:2a:19:e5:82:ea:02:0c:fa:85:dc:8c:
f1:0b:ea:4b:a9:c7:df:3c:a0:12:88:bd:6d:6e:50:
85:69:44:65:68:ec:11:47:b9:28:fb:0c:de:50:d8:
0c:1c:10:28:13:5d:a3:78:8f:ef:44:27:3e:91:f0:
e5:27:55:6b:1a:8c:8e:d6:9a:5e:e7:50:2d:22:99:
ba:5b:73:b3:52:40:09:a8:5f:45:c1:4e:25:4f:4e:
fa:c9:3f:78:8e:f9:5e:f8:0d:8c:47:3a:50:e2:99:
25:5b:1c:a5:1d:63:a5:4c:87:13:df:b2:fb:ee:2e:
b0:74:08:18:39:e7:62:0e:2b:46:0c:42:f4:6c:88:
b9:ef:3d:16:76:d2:08:07:48:ce:40:97:7b:68:32:
99:e4:b4:5f:69:53:19:e4:6d:3b:36:8d:f1:01:aa:
e8:63:d6:a3:16:b3:60:fc:94:95:05:02:8e:ef:37:
fd:74:02:70:42:0e:19:1f:5a:d7:fa:21:a4:f9:41:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:04:98:23:B1:0D:24:6C:1A:3F:E7:AD:2B:21:25:3A:BF:F2:9F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
46:04:64:2b:a8:da:0f:d3:78:8c:11:a2:5b:4e:56:03:e6:ac:
43:bd:d9:be:75:3e:14:84:bb:25:19:7f:3e:05:57:17:2c:b1:
f1:e4:46:df:50:0c:45:c6:a0:99:0f:09:55:ac:2c:ef:d8:0f:
04:40:b6:6d:9a:2e:bd:a8:fd:b0:f6:28:71:b9:8d:e7:89:24:
68:d0:7e:19:05:0c:3d:7f:19:ca:19:1e:8e:de:2c:fc:ed:59:
4e:a0:73:eb:b3:88:3f:4f:9b:e3:e2:ff:12:27:30:7d:d1:da:
36:8e:4b:b7:47:11:69:12:1b:8e:bc:6c:83:6e:ae:13:f7:48:
4e:b9:89:74:93:51:92:93:56:9c:58:50:80:31:0c:72:95:cb:
f9:c5:73:c4:e5:54:04:3b:fd:7e:68:58:0e:ba:1f:d6:1d:1c:
2d:49:35:a8:10:94:da:13:b3:ec:e6:ac:f6:8b:1f:88:e4:b0:
14:49:c9:b3:b3:73:29:c0:a0:87:41:62:ff:42:be:07:67:91:
38:a3:97:2c:9c:51:bb:72:df:d0:73:bc:4b:aa:dd:14:04:f4:
6e:a8:4a:63:a8:18:89:b8:8e:df:ea:7d:58:68:c6:c3:1a:ce:
b0:f2:38:b6:37:31:f8:f4:56:0f:c4:70:55:19:c6:53:aa:57:
cd:97:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:45 2025 by rpki-client