Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa
File: ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa (raw, json)
Hash identifier: T0T84KLlCFbb7khLVzf+Np9qdespHT2HNkeCTN+p9Vk=
Subject key identifier: BA:34:D4:BC:99:18:E6:AE:00:8E:57:75:14:CC:A1:53:88:5C:EE:3D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06EEDE8A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa
Signing time: Sat 14 May 2022 17:23:31 +0000
ROA not before: Sat 14 May 2022 17:23:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116317834 (0x6eede8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 14 17:23:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba34d4bc9918e6ae008e577514cca153885cee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:66:b3:20:88:ff:ee:d7:20:05:2e:a8:67:
0f:70:82:55:dd:c5:a2:ef:07:de:f3:02:7f:9b:11:
c7:65:14:f2:6c:7c:18:c5:bb:70:30:5c:cd:0d:e8:
e7:65:1d:e7:5e:64:dc:64:46:e3:98:8d:39:d0:b9:
25:5c:a4:5b:61:36:16:86:90:93:63:46:ef:9b:ca:
7c:80:72:99:55:6a:ca:4e:e0:6c:9f:0c:7d:08:57:
3e:00:d2:b4:d0:6a:24:27:a8:68:ca:a9:e1:45:5e:
be:1d:c0:29:b6:3e:55:f2:32:d5:e5:99:c7:76:a0:
0a:2c:4f:ea:0b:ee:48:67:55:f5:15:45:6a:25:2f:
5b:fe:bc:fc:30:b2:26:52:bc:94:84:54:76:88:f2:
8e:20:a7:db:b6:07:5c:47:e0:5b:7c:8e:b3:2c:e7:
16:fe:c4:a2:fd:1c:56:f9:25:9e:d3:0d:05:9f:02:
bd:9c:6c:28:13:31:cb:ac:ec:ee:fb:ea:56:37:7b:
c9:1a:d8:39:f8:88:51:53:19:56:18:c8:4f:78:4f:
c5:85:bb:d5:9a:9c:8e:d7:fe:53:39:65:dc:7c:b2:
3c:ae:7e:d6:af:4a:1f:8b:82:ba:7e:44:d8:37:a9:
e0:fe:a3:23:72:83:77:ca:9c:44:d8:2a:de:2e:db:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:D4:BC:99:18:E6:AE:00:8E:57:75:14:CC:A1:53:88:5C:EE:3D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
0f:73:2d:31:26:84:18:95:af:c0:5e:c9:96:a2:b7:c5:c5:bd:
f9:f6:68:b8:e5:7d:13:d3:78:7c:7c:c3:2e:02:41:9a:f2:06:
32:da:21:ff:44:4a:41:9d:37:36:b6:80:f1:4c:57:3b:de:b6:
d6:1f:0c:13:bf:a8:36:fa:2e:d3:f1:05:7c:94:b6:9d:ab:8e:
89:c2:c9:dc:46:64:39:89:83:f6:a0:60:5a:c0:36:61:2e:21:
54:e2:4d:1f:2d:e3:1b:37:99:ec:0b:b5:b7:fb:4e:6d:77:99:
05:a0:ea:1d:de:0e:2c:28:35:c2:ca:29:78:f5:b2:80:e1:cf:
f4:5b:86:50:10:3b:b3:c9:7e:ab:11:16:e8:fb:31:92:4f:b2:
5e:a3:1d:cd:08:f8:0b:90:65:17:5c:11:54:2d:22:27:aa:92:
58:7a:2e:c7:49:73:bf:ff:1a:fd:80:7b:f6:bf:df:b1:eb:96:
77:f4:da:c1:9c:6d:f8:79:1b:ce:4f:33:c5:2c:6d:ae:0a:64:
ee:37:83:77:54:b5:b0:53:82:ab:a1:90:ae:27:69:87:67:ba:
1d:de:e4:7a:34:86:b4:2a:8f:f2:74:0d:00:d8:55:bb:7c:da:
fc:43:da:29:fd:a0:d5:ee:9a:9e:23:e5:93:44:32:37:f1:da:
ce:4d:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:00 2025 by rpki-client