Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ycKgHXPDQ4o6ZeKdMaKsTkvqckY.roa
File: ycKgHXPDQ4o6ZeKdMaKsTkvqckY.roa (raw, json)
Hash identifier: GX6O+CDkv8KVXsTs8yX60Hyg4Ii1Jj97nhs+i1mVxM4=
Subject key identifier: C9:C2:A0:1D:73:C3:43:8A:3A:65:E2:9D:31:A2:AC:4E:4B:EA:72:46
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 050FC0A4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ycKgHXPDQ4o6ZeKdMaKsTkvqckY.roa
Signing time: Tue 15 Mar 2022 13:38:26 +0000
ROA not before: Tue 15 Mar 2022 13:38:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84918436 (0x50fc0a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 15 13:38:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9c2a01d73c3438a3a65e29d31a2ac4e4bea7246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:65:cb:10:af:84:77:24:b8:7c:eb:ad:3c:
1d:14:0c:2e:57:72:57:99:cd:d2:c0:c1:2f:9d:e3:
34:7f:99:88:29:fe:85:a0:bb:ea:6d:0c:ef:e4:18:
d1:51:36:c7:30:29:c1:4b:2d:8f:30:91:1c:61:d6:
ca:93:42:82:fc:74:2b:2d:5f:72:d7:98:58:04:7b:
5e:87:2a:c8:82:ef:51:0c:d8:99:8a:76:27:62:04:
a8:67:23:5d:42:c6:a1:8f:42:ad:93:8f:03:09:bb:
ba:76:87:b4:79:aa:56:99:fa:d3:21:64:5c:3f:bd:
9f:af:83:c7:3d:42:d3:1a:a5:7f:bb:4f:6c:c5:2c:
13:77:19:3f:2f:25:64:08:b6:ed:24:fc:d4:f7:77:
fa:3a:39:07:51:0e:5d:be:66:56:5a:b5:09:d3:09:
ae:4b:21:d7:8e:2b:02:61:c5:95:e7:45:51:81:97:
52:c9:1b:20:a5:8e:d4:31:1f:56:c3:0b:00:82:ab:
76:94:82:ee:0b:f2:fd:25:2c:ea:78:0b:a5:08:86:
c5:d2:ed:7e:1a:7b:e1:82:45:1f:c4:7b:a0:c0:e0:
4f:9f:ac:e5:0e:e4:7f:be:8c:28:00:89:0a:cf:57:
18:2e:b7:4c:cb:dc:bf:4b:e2:5e:88:8d:52:fb:1f:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:A0:1D:73:C3:43:8A:3A:65:E2:9D:31:A2:AC:4E:4B:EA:72:46
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ycKgHXPDQ4o6ZeKdMaKsTkvqckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
3b:29:81:21:60:10:cb:26:e4:f1:fd:56:36:78:30:01:de:22:
8a:af:ca:3c:75:05:b0:a7:73:4c:2a:c0:08:70:01:8d:fd:ac:
cd:1d:42:54:4b:ab:4c:7d:c3:0c:6a:57:77:46:1a:66:bb:ad:
1c:c6:79:c4:75:6b:a0:28:ce:61:0c:fd:5a:5a:4f:c1:6f:06:
3f:e7:e9:9d:30:5c:94:0c:ff:21:be:ff:12:48:d5:c6:f8:f4:
91:d3:a3:0e:9c:22:a4:ce:8c:20:f9:e4:87:1f:85:a9:35:21:
76:4a:72:42:88:01:f1:91:d0:0c:de:fd:30:35:f7:9a:64:d2:
4f:b3:9f:d8:0d:84:88:fd:65:a6:2b:ab:35:d0:95:e5:e1:dd:
a1:18:1d:b0:89:58:4c:e7:e1:8e:c6:0f:a0:75:b1:ed:17:71:
9a:30:2e:b4:ff:6f:51:3f:94:90:ee:29:24:d5:df:03:58:22:
d7:10:8d:bc:17:3f:c8:e9:77:7c:f1:53:ab:37:aa:7d:35:8b:
14:4c:d8:3e:d6:b2:ea:07:06:fb:db:bb:f7:3a:b5:e8:b9:ce:
ec:ea:89:45:c1:bc:39:cd:44:b6:be:7e:f8:cb:68:c1:c7:08:
35:a5:1b:03:e7:f6:d5:b8:5b:7d:dc:88:20:16:53:98:2f:7c:
e4:f2:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:37 2025 by rpki-client