Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vl7ZMsW32ZK-QvThdM-opGernjk.roa
File: vl7ZMsW32ZK-QvThdM-opGernjk.roa (raw, json)
Hash identifier: Q5LAqvdVAywKbgBg5zGAXZQBKyHAVowMy0GY8sxrE/o=
Subject key identifier: BE:5E:D9:32:C5:B7:D9:92:BE:42:F4:E1:74:CF:A8:A4:67:AB:9E:39
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 065DC0CF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vl7ZMsW32ZK-QvThdM-opGernjk.roa
Signing time: Sat 30 Apr 2022 01:38:04 +0000
ROA not before: Sat 30 Apr 2022 01:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106807503 (0x65dc0cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 30 01:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be5ed932c5b7d992be42f4e174cfa8a467ab9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:25:39:8e:78:ce:51:97:f2:ab:2c:bc:b8:
14:b2:01:78:7d:5f:5f:6b:98:7f:f7:01:43:cc:8b:
a1:29:93:de:04:26:e9:2d:35:07:47:7b:17:9e:9b:
14:d0:28:f6:f4:33:be:ba:ce:ea:81:65:88:2f:5b:
2f:fd:40:10:b9:8a:b1:14:b5:09:48:fe:6a:80:0a:
a1:a6:69:76:d6:bd:8d:16:8a:0e:78:b1:32:bb:90:
a2:0f:38:19:b1:4b:b8:a0:9f:29:f4:5f:37:0f:97:
4d:f1:1f:a5:63:0b:26:4f:5e:99:30:07:f9:ed:77:
22:6b:62:60:13:37:6a:22:96:5f:13:1f:f9:00:ea:
29:b3:2c:81:43:26:c1:e9:9e:be:a7:8c:b7:e8:3a:
ef:0f:fd:34:0e:3b:69:a6:df:6d:1e:0a:d9:96:d7:
35:d6:98:ce:b7:24:fe:bf:a9:b3:68:1c:47:cb:de:
ca:ce:12:25:9c:b7:67:9f:92:ab:c3:d2:ed:93:80:
cc:d9:72:fd:93:ca:e4:9d:8f:b8:fc:7b:6d:41:1b:
5e:f4:9c:44:5b:b2:c9:cc:f0:cf:72:b5:ab:4a:17:
59:98:25:eb:0e:72:7d:e6:15:40:d3:02:c2:61:f5:
09:ad:a5:e8:a9:28:79:79:a3:08:04:57:73:c1:b4:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5E:D9:32:C5:B7:D9:92:BE:42:F4:E1:74:CF:A8:A4:67:AB:9E:39
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vl7ZMsW32ZK-QvThdM-opGernjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
29:85:43:f9:b7:7f:5a:0e:a6:6f:34:f9:cd:b6:cf:a2:17:01:
72:53:95:9f:9c:ab:2a:67:23:f2:5f:e7:b5:c1:b2:f8:51:29:
16:ee:6a:f3:e0:a3:30:52:af:3e:fa:84:02:0c:5b:1e:da:b2:
25:a0:16:ca:60:c3:bf:94:f3:90:78:26:85:02:73:db:91:7b:
d7:c2:d5:8a:9a:a0:d8:dc:44:73:83:fe:73:9e:88:28:b7:d6:
b5:f2:a8:df:44:06:70:92:ff:c7:af:de:74:73:45:c9:d4:48:
81:f1:da:5d:bb:02:09:ad:23:08:ac:24:62:4c:7a:8e:ab:9c:
21:f5:5b:80:b4:22:ec:5c:0d:29:ad:55:21:bd:03:cb:1a:81:
d7:ab:39:bd:2a:25:7e:a1:e0:69:b5:ee:a4:53:34:77:d0:30:
53:06:1b:e4:90:df:1f:7a:f1:df:f6:94:de:3c:54:0d:50:83:
ae:af:8c:f6:28:d9:38:ca:be:f0:b0:80:62:ab:cc:e3:1c:a9:
7c:64:e9:33:ca:af:51:7c:bb:a1:b3:7e:7f:46:33:f9:94:a8:
61:ed:f4:54:2c:8e:4f:2d:5b:2a:83:ed:a2:f7:8a:38:3c:48:
3d:5c:e8:9f:56:d9:9b:e2:40:a2:cc:77:7e:80:b7:a8:78:f2:
bd:b8:f5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:48 2025 by rpki-client