Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa
File: v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa (raw, json)
Hash identifier: t8Fa9FL1Zaepnbg38CssiwWCyGzl/0dWpkHlOmJJDYo=
Subject key identifier: BF:7C:70:36:FC:50:5B:CD:06:B7:51:A0:07:E2:C6:04:FB:C1:CB:41
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0514B52D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa
Signing time: Wed 16 Mar 2022 14:13:28 +0000
ROA not before: Wed 16 Mar 2022 14:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85243181 (0x514b52d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 16 14:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf7c7036fc505bcd06b751a007e2c604fbc1cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:8c:15:fb:18:3a:66:61:2a:5f:5d:39:85:
2b:b7:f3:49:74:ec:03:ae:bb:9f:a0:b8:6c:88:03:
49:5c:0b:40:92:ad:8c:fd:a4:07:a8:fa:cc:d4:b5:
c3:02:0f:97:a6:9b:06:94:9a:26:54:da:d9:80:5c:
87:49:d1:ea:d7:15:fd:ff:99:20:7e:4f:41:56:1e:
91:bb:71:1f:30:17:e7:6a:1a:03:c0:83:d7:68:3c:
4b:98:4f:af:a3:89:73:d7:ac:40:39:d3:c6:44:97:
01:96:05:c8:f4:9e:61:92:70:77:c5:a6:e3:79:8f:
6b:7a:41:8f:0e:f5:e1:4c:27:bc:c6:67:c9:4f:29:
08:24:a0:b9:a2:fd:e6:c3:32:91:5c:ea:e4:13:7c:
19:85:ac:bb:8a:b7:65:8e:a8:92:f8:3c:a0:d9:2f:
9b:f3:49:04:73:e9:c4:6f:81:17:44:d2:2f:11:55:
27:52:2f:55:ac:fa:05:38:38:9e:05:7e:65:39:b8:
91:f4:ba:4b:04:64:8e:fe:9a:27:e8:d6:f7:2d:0a:
b5:4f:9c:06:85:2c:22:57:b4:70:13:c5:8f:7d:1d:
bc:a4:58:81:5f:bd:e6:7e:48:d7:65:a3:89:3e:49:
c8:6f:f2:c1:28:32:05:85:bf:fd:65:ef:bb:b3:f6:
1d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7C:70:36:FC:50:5B:CD:06:B7:51:A0:07:E2:C6:04:FB:C1:CB:41
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
8f:bb:e0:90:fc:a6:34:d5:93:88:d1:ce:5d:db:30:ef:c2:4b:
2e:35:8a:71:b6:7c:d9:f0:3f:0d:90:09:19:c0:d3:4f:c2:5c:
b3:55:41:f9:b1:04:dd:5a:bf:c7:27:dc:43:2b:64:0c:24:12:
27:af:fa:09:e2:92:d3:da:05:bf:3a:b5:9e:81:80:7e:db:cf:
fe:e0:0a:e8:5c:94:a8:cf:55:cd:de:b3:2c:d0:4d:9d:d4:7f:
5a:e9:77:ca:94:6c:b7:71:92:c9:7a:79:12:9a:0e:40:28:dd:
fb:7b:fa:77:01:55:c0:27:74:5e:35:62:46:63:28:42:87:c0:
6d:35:60:75:22:62:7c:32:fa:86:b0:85:41:07:17:3c:99:e4:
60:31:f2:c3:08:2f:21:e0:80:12:f5:d2:25:61:c6:47:94:b7:
2b:26:f9:cf:45:ff:4f:31:9b:18:88:02:5f:a2:10:8d:2c:cf:
a9:8f:e7:38:0d:07:a4:fa:97:82:32:7f:ec:46:7e:c3:f9:b7:
e5:e4:cb:2d:67:69:16:1a:e7:a1:fc:44:c5:79:b8:28:e7:24:
4f:04:07:72:b3:b3:93:cd:63:20:d4:77:dd:b8:66:b0:6b:4c:
96:e8:dc:44:10:c6:29:3f:23:9d:e8:5f:b6:07:7b:16:97:07:
21:47:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:23 2025 by rpki-client