Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa
File: xRz4rFFA2c8n33sXsZjG7KneQuQ.roa (raw, json)
Hash identifier: zTdiI3Ha3RjqkNGe8xvntgr8CQZwD7onXssrZsL1O/c=
Subject key identifier: C5:1C:F8:AC:51:40:D9:CF:27:DF:7B:17:B1:98:C6:EC:A9:DE:42:E4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04CF4094
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa
Signing time: Mon 07 Mar 2022 12:57:14 +0000
ROA not before: Mon 07 Mar 2022 12:57:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80691348 (0x4cf4094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 7 12:57:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c51cf8ac5140d9cf27df7b17b198c6eca9de42e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:82:7e:48:76:89:4a:34:59:ad:ce:02:a6:
91:6b:9d:62:13:51:15:c7:bc:d0:ee:63:89:3e:8b:
1a:5b:fd:8f:f1:a3:76:c2:63:06:6f:56:d0:c5:05:
ed:88:0a:c4:61:6f:53:da:ac:8d:69:ae:2d:68:c8:
88:e9:85:ea:0b:62:9c:ca:11:e9:c5:fb:7d:ac:b8:
f7:0c:4b:13:ab:f9:79:1c:8d:bc:81:49:ba:11:e5:
c1:9e:3e:e5:59:6d:08:e4:af:11:61:e2:5c:1f:1a:
56:75:de:03:70:cb:68:c4:a3:6c:88:9a:19:3c:07:
f3:bc:b8:cf:e5:6a:64:af:e4:87:96:3e:d9:33:19:
87:d8:8d:41:b9:aa:9b:82:43:28:2e:6e:e3:93:c6:
c6:53:1d:60:a0:a3:64:eb:9f:55:b5:7a:ee:b3:d9:
f1:25:83:c0:b4:b0:33:52:e3:97:ba:44:5c:c3:8d:
2a:86:7f:78:50:1e:a0:8d:13:ae:23:87:9e:ca:9a:
6c:0f:e5:f6:3f:ee:e8:77:de:4a:e2:af:71:6b:e6:
e6:40:12:7a:14:92:40:df:39:fa:07:29:87:7e:d8:
d7:38:13:9d:4e:18:74:26:28:a2:9a:2a:c6:4d:74:
d4:6e:7b:22:a9:7d:7b:d2:14:7c:2d:2c:8f:a3:19:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:F8:AC:51:40:D9:CF:27:DF:7B:17:B1:98:C6:EC:A9:DE:42:E4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
75:aa:88:5d:83:c0:25:03:7d:f4:68:27:81:5b:db:ec:5e:a4:
a3:7c:35:03:35:07:68:5a:9c:63:3a:a9:be:15:cf:37:b2:b0:
07:0c:72:98:79:42:c0:e4:d6:5d:da:60:0b:08:06:cd:e1:b9:
79:9d:f1:52:b8:c8:43:db:7b:ee:89:03:c6:5c:7d:eb:6d:45:
5a:62:0b:7e:8b:ec:f7:35:32:68:ab:08:99:97:21:99:bf:1a:
1f:92:ba:1f:31:4c:56:e7:8c:a2:e0:7b:95:43:ac:08:b0:d4:
a4:5b:c6:ea:ce:a5:f1:65:1d:ee:cc:05:88:22:08:97:ac:16:
ae:97:7d:77:de:bd:b4:b1:8e:98:e8:2f:2f:c9:31:62:86:0e:
4d:e0:74:c1:62:81:da:9e:42:e1:0d:80:bc:df:63:aa:c1:de:
18:7b:31:55:ed:0c:35:72:1b:f5:0e:23:b3:41:6c:8c:50:17:
f2:fb:69:91:5b:a2:8f:07:bc:52:02:4f:d7:e1:57:19:d0:8c:
93:36:59:6f:c4:ca:19:2b:be:64:30:ee:35:fb:e7:8b:0d:36:
c1:c9:f4:56:3a:da:37:3d:f1:b8:95:78:a9:52:f5:50:44:53:
90:e9:a6:b1:d1:0d:58:ed:c2:a8:00:6d:0d:d1:41:3c:23:3f:
dd:97:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:02 2025 by rpki-client