Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uo1sxBGjYXYge-bU4VcSh2WbBJE.roa
File: uo1sxBGjYXYge-bU4VcSh2WbBJE.roa (raw, json)
Hash identifier: soPcYJ+jQBTdX1WlSAO0S9aaS9oFWYm9BhJaUMOtAq0=
Subject key identifier: BA:8D:6C:C4:11:A3:61:76:20:7B:E6:D4:E1:57:12:87:65:9B:04:91
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08001413
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uo1sxBGjYXYge-bU4VcSh2WbBJE.roa
Signing time: Sat 04 Jun 2022 13:07:20 +0000
ROA not before: Sat 04 Jun 2022 13:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134222867 (0x8001413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 4 13:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba8d6cc411a36176207be6d4e1571287659b0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:16:bb:19:20:7a:c9:16:9e:99:c0:6f:67:
90:40:4d:0c:15:db:53:45:3d:c7:8c:14:92:7d:29:
a8:56:e3:7d:8e:64:ee:fc:30:ee:78:c1:ac:ff:df:
1d:f2:30:8b:fd:bb:60:63:b2:d8:20:0e:01:cb:70:
30:f4:78:20:d2:97:84:11:ad:39:e9:98:e5:9e:37:
3e:63:e4:63:9c:93:2a:42:fd:f3:3b:c2:11:ca:73:
a6:31:de:84:d4:61:2e:a0:69:8a:f2:07:90:64:c2:
d0:c1:83:48:90:48:84:17:6e:01:f7:7c:d0:58:53:
48:cd:25:86:10:37:85:c1:3d:71:0d:15:b0:fd:2a:
46:97:43:bb:67:e6:28:25:55:c7:9c:b6:41:ff:42:
4b:5f:29:b1:a4:fc:45:db:e2:d9:99:f8:53:a9:4a:
df:7c:96:d1:21:ff:b9:fd:37:29:f0:09:d0:f5:ce:
c3:05:b9:e5:45:0e:e1:1d:0a:e8:3d:75:3c:e5:71:
b5:07:3f:35:5e:37:fa:61:0b:76:b2:6f:b6:71:9d:
e1:cb:61:f5:f2:e2:a3:e6:1b:bd:91:ab:93:5b:ba:
80:e5:2a:8f:99:b8:f2:08:ce:87:dc:03:5e:c2:c7:
2a:0d:61:68:1f:31:40:08:95:25:f6:32:1f:ee:f7:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8D:6C:C4:11:A3:61:76:20:7B:E6:D4:E1:57:12:87:65:9B:04:91
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uo1sxBGjYXYge-bU4VcSh2WbBJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
60:d6:60:0d:1d:51:fe:1b:ca:72:61:4e:b2:52:1a:2d:db:f3:
19:92:e3:4b:47:0e:71:a1:6f:7f:ef:97:37:9f:62:f9:32:fe:
4e:79:65:b8:dc:6e:a5:28:5f:7d:53:ac:d0:1e:4c:09:bc:a5:
30:d6:48:4f:d9:6f:86:72:ae:c0:38:c1:df:26:87:38:62:e8:
95:8d:56:3e:8c:af:44:15:ca:1d:0e:ec:1c:bd:57:12:dc:e1:
03:b0:71:0e:ad:1c:bc:b0:39:e5:de:86:aa:59:7a:bb:8e:14:
6d:b7:e7:41:93:af:59:5c:1e:33:35:f9:7b:ae:5f:0e:26:ec:
0e:a5:87:85:1b:39:25:aa:af:bb:3c:ec:31:ac:5a:d6:1a:dc:
30:d0:01:a7:de:50:14:2e:47:16:e1:64:cf:0b:98:89:8b:4e:
47:fe:3f:8d:17:b0:dc:05:3a:4e:50:fa:bb:b0:a2:a0:d8:48:
bf:bc:eb:91:4e:06:5f:0e:97:87:ef:3a:42:30:10:2f:99:ac:
52:ad:47:71:8a:bc:c4:23:77:a6:80:8b:c3:f7:aa:86:41:42:
e4:32:27:f3:2e:f0:24:1e:44:74:2f:b6:b0:af:f1:23:92:8e:
40:42:c5:af:0f:c4:42:78:78:28:6f:9d:11:4f:0b:9b:f6:ad:
9a:51:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:31 2025 by rpki-client