Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tczMpXZ1BNLwe5dswipDTFLTLB8.roa
File: tczMpXZ1BNLwe5dswipDTFLTLB8.roa (raw, json)
Hash identifier: BEFseIcSP0nPwRlAICdQfhEVtua6+tSvYU/6J3+Zlt8=
Subject key identifier: B5:CC:CC:A5:76:75:04:D2:F0:7B:97:6C:C2:2A:43:4C:52:D3:2C:1F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05AE345E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tczMpXZ1BNLwe5dswipDTFLTLB8.roa
Signing time: Thu 07 Apr 2022 17:02:14 +0000
ROA not before: Thu 07 Apr 2022 17:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95302750 (0x5ae345e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 7 17:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5cccca5767504d2f07b976cc22a434c52d32c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:4e:57:ae:fb:cb:b8:9f:89:7a:23:e9:ce:
17:e0:09:3e:d7:3c:93:6e:15:6d:ae:20:79:3c:2c:
5e:82:89:97:35:0b:2f:64:0c:86:dc:58:c3:c2:56:
d6:74:40:c8:82:7c:93:48:7d:dd:65:8e:0d:13:dd:
d5:ce:f1:34:8b:ac:d1:05:d3:81:10:d3:3b:d0:a6:
08:e6:ca:b8:64:62:0a:76:fc:61:3d:1c:6c:0f:28:
2c:72:6f:26:db:bd:01:2b:63:66:d3:f4:39:b6:a3:
dd:80:5f:db:e9:79:49:36:73:db:ef:a0:54:ef:78:
e9:1b:62:65:27:6a:da:41:3a:42:06:4e:0b:98:86:
82:60:29:b4:86:ce:7f:42:ec:ca:69:3f:2b:f2:4e:
6d:a9:86:46:53:d3:8d:bd:ec:d4:99:c9:32:f2:c0:
0e:bf:7d:99:fe:5c:05:29:43:6b:fe:d1:b0:53:d0:
44:75:a5:11:12:e2:30:54:7a:51:91:73:42:6f:23:
3f:26:ab:2c:83:5d:68:71:06:7d:72:ea:6f:e7:2d:
95:ba:aa:d9:23:c5:ca:b5:36:a4:5d:a5:45:39:42:
14:4c:84:39:d5:5b:b1:74:04:04:91:dc:55:70:5b:
b6:d6:c0:ba:b9:a7:d4:73:7a:06:87:c9:af:76:20:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:CC:A5:76:75:04:D2:F0:7B:97:6C:C2:2A:43:4C:52:D3:2C:1F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tczMpXZ1BNLwe5dswipDTFLTLB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:54:4c:1d:7f:c2:2e:19:46:56:a3:c5:36:6a:29:28:89:b3:
04:65:e6:fe:64:4d:3c:98:e1:63:76:c2:3d:a2:26:58:70:d0:
10:7b:26:7b:e0:f0:ed:77:c5:77:d9:56:d3:ed:3a:8c:ad:7c:
c9:b3:d6:74:fe:de:a9:82:e6:94:66:18:35:c7:45:00:53:be:
dc:32:ed:68:3c:4e:4e:8b:78:fc:fd:1a:83:53:0b:5f:4a:ec:
46:21:27:d3:e1:6e:23:f1:19:53:c1:52:ea:51:a7:a7:5c:be:
6e:fe:c2:fe:da:d7:5e:90:74:b8:e4:07:f5:57:7c:89:99:c7:
dd:39:ed:14:63:26:d6:6f:55:8d:04:14:7b:db:d7:51:c9:74:
96:ae:97:8a:78:97:ed:fa:2a:ae:45:df:ee:dc:fd:af:74:17:
31:a8:7f:0b:c4:02:5e:ed:16:3f:7b:1d:cc:97:e6:6b:b0:be:
f3:1c:a2:64:c3:c9:f9:79:d2:db:49:6e:e5:1b:ee:6c:b4:19:
06:36:cd:c2:ec:da:a9:d6:be:60:2c:0c:d6:9d:f8:92:26:9b:
9f:a5:ce:da:69:7e:fc:68:8b:de:c2:65:eb:d6:b8:ae:88:82:
ec:ce:d9:90:1b:9b:af:30:fa:6e:1c:7d:22:a8:ad:df:72:f7:
85:68:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:27 2025 by rpki-client