Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xfoEf_2pWVyQkP8MPuEVA70DXjQ.roa
File: xfoEf_2pWVyQkP8MPuEVA70DXjQ.roa (raw, json)
Hash identifier: Fo/lv25GbGdB8HIIJpkBwmDbd3rcvunKfqeFOOdj6UY=
Subject key identifier: C5:FA:04:7F:FD:A9:59:5C:90:90:FF:0C:3E:E1:15:03:BD:03:5E:34
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07EDE6C6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xfoEf_2pWVyQkP8MPuEVA70DXjQ.roa
Signing time: Fri 03 Jun 2022 04:47:20 +0000
ROA not before: Fri 03 Jun 2022 04:47:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133031622 (0x7ede6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 3 04:47:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5fa047ffda9595c9090ff0c3ee11503bd035e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:b3:ae:96:9c:32:48:72:53:ac:0d:b8:70:
f4:10:1c:51:3f:d2:1f:5e:0b:17:81:56:7c:cb:b9:
d3:f1:13:b4:58:43:0e:5b:8d:a8:2b:e3:89:62:a2:
c0:55:70:ee:98:53:5a:65:a1:6c:4c:2c:7b:ee:a8:
9d:af:08:cb:10:8c:ad:49:d1:b3:d8:c5:89:2e:6a:
19:0b:28:27:89:18:33:1e:5e:a4:57:df:9c:68:f4:
02:a2:ac:d7:7c:26:93:ed:ea:92:d9:44:0a:d6:3f:
eb:15:68:a9:f0:6a:31:7a:f8:74:c1:5f:50:c8:97:
bb:83:d8:1e:23:c8:4b:49:04:59:5a:11:45:7f:4c:
9d:02:7b:fd:10:bf:d1:fe:87:bb:5b:36:ff:b0:d5:
90:7f:f1:6a:d8:34:bd:a4:2c:1c:a5:6c:a5:a3:2c:
71:7d:ca:d2:20:7f:c8:83:4a:ab:58:4f:78:3b:7e:
7e:00:2e:df:c4:bb:f5:8b:47:64:97:41:d4:55:fc:
c7:cc:76:d6:30:ca:3c:73:9d:b0:62:71:f0:9c:74:
3e:6e:f5:fb:ca:63:9e:8b:c8:9a:f7:45:ea:94:21:
c2:e5:09:4b:db:b4:43:94:d6:0b:3c:38:7f:2d:53:
92:ce:3c:65:a9:a0:90:03:ac:78:c5:34:3c:3d:98:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:04:7F:FD:A9:59:5C:90:90:FF:0C:3E:E1:15:03:BD:03:5E:34
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xfoEf_2pWVyQkP8MPuEVA70DXjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
89:30:19:04:84:40:53:d6:68:29:2f:37:7f:c2:c4:0d:13:bb:
70:70:14:49:ae:d5:c4:be:59:c0:bc:d5:09:7b:be:fd:53:c1:
fe:c9:ed:7b:a6:1f:7d:d2:83:43:b4:1e:32:50:c0:68:3d:4a:
35:8d:d0:3d:0f:ad:eb:b2:d9:7a:01:3c:5e:5b:31:ef:83:0e:
8f:0a:a6:99:bf:72:53:43:25:a6:0a:42:d6:fd:67:2b:a1:25:
27:c6:13:94:85:07:a7:34:8a:c5:0d:67:7f:6d:13:ef:b9:90:
b8:8b:70:d9:fc:47:40:e9:18:83:71:a9:e0:ec:f1:21:54:52:
d9:9b:85:f0:9a:91:2b:69:84:a7:1b:e5:cc:d0:ba:4a:a9:07:
9a:c1:a1:d1:dc:8b:a9:f8:83:58:0e:fe:5c:03:f5:18:1c:2c:
b8:b5:6d:1b:aa:95:b8:78:d5:6c:5a:18:5f:81:46:68:c4:9c:
4e:0d:bd:0d:d3:e4:ed:1f:d6:da:c8:dd:20:c6:84:bd:58:08:
5b:bf:61:8b:c5:74:6a:1c:b6:0d:08:f1:0d:60:16:fe:5d:1f:
5d:4c:83:79:61:d0:cc:4a:30:74:b0:fe:65:69:6d:54:a5:19:
ed:12:88:66:04:68:f1:bf:af:8b:36:23:3b:73:31:17:66:6c:
6d:af:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:52 2025 by rpki-client