Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zKEU1NaBPkZUvO79CjRLtMzoYAM.roa
File: zKEU1NaBPkZUvO79CjRLtMzoYAM.roa (raw, json)
Hash identifier: 6P4cOQGDW5F8YU5iO4++4YxgObCIrslkVfLapzcYBaI=
Subject key identifier: CC:A1:14:D4:D6:81:3E:46:54:BC:EE:FD:0A:34:4B:B4:CC:E8:60:03
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0449CA26
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zKEU1NaBPkZUvO79CjRLtMzoYAM.roa
Signing time: Fri 18 Feb 2022 01:49:08 +0000
ROA not before: Fri 18 Feb 2022 01:49:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71944742 (0x449ca26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 18 01:49:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca114d4d6813e4654bceefd0a344bb4cce86003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:b0:9d:08:04:70:76:0b:42:45:84:3b:fc:
25:85:25:f0:22:41:7e:a9:01:09:08:db:35:a1:78:
04:63:e6:bc:b2:17:ef:b7:f6:7a:6c:aa:40:65:a9:
e4:d0:86:3a:bc:58:85:5b:16:cc:a9:e2:37:ef:cb:
24:92:8d:2e:c0:1f:11:e4:a0:08:7c:ca:5d:dc:64:
8d:8c:3f:57:4e:73:93:32:e8:7a:b1:e0:70:94:80:
9c:66:32:89:00:09:19:7b:2f:82:53:08:1d:e7:b2:
5c:27:40:88:76:85:2e:46:32:4b:3c:22:be:ae:5d:
a0:21:58:62:5a:94:9b:8b:bc:a8:d6:cc:37:e8:10:
fd:58:ed:32:3f:ae:58:d2:80:74:64:da:8c:c1:cf:
dc:0d:09:75:ce:ee:69:5c:8c:b4:54:3a:4f:3c:95:
8b:0d:48:2c:21:0a:56:64:6e:b9:92:3d:38:bd:36:
62:e5:91:22:95:ee:ed:ad:1b:f1:e1:bd:aa:48:b0:
91:76:35:27:41:94:d9:f1:06:f1:1c:fe:48:e3:89:
41:e4:b2:ec:52:b4:92:f5:c0:3b:26:52:86:e8:60:
11:7b:bc:a4:63:c5:a5:42:64:23:8c:a9:8f:0f:c0:
31:6a:e2:48:22:95:b7:9e:a7:90:d6:78:65:a1:89:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:14:D4:D6:81:3E:46:54:BC:EE:FD:0A:34:4B:B4:CC:E8:60:03
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zKEU1NaBPkZUvO79CjRLtMzoYAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5b:15:10:86:e0:0d:3a:34:6a:cc:57:a3:c6:b6:fb:24:09:2b:
ec:57:f3:a2:6a:98:05:24:98:08:02:c8:42:5c:88:8b:8e:b5:
f9:10:e3:f5:0d:ab:05:10:db:a9:a0:10:22:89:7d:e6:10:10:
63:ca:71:5f:26:05:64:e1:f0:44:f0:f1:96:ad:b1:df:16:84:
4a:51:8a:2f:8c:0c:36:63:86:20:84:25:9e:d3:f4:4b:f1:c9:
b1:af:f2:7b:6f:1c:e7:41:0b:76:7f:75:50:6c:fd:fa:d5:3d:
f9:d6:2c:c5:70:dc:74:f7:4b:3d:c6:8c:2e:de:39:98:54:6d:
90:85:77:39:ad:04:c7:dd:1c:24:d9:29:5e:aa:78:2b:73:ca:
d4:2e:97:8c:7e:ee:7c:2e:b8:57:f3:52:90:92:21:c2:5f:a3:
11:24:ba:b5:35:74:d8:e6:99:47:a0:3e:7f:16:75:22:be:b7:
d7:47:3e:08:b3:0e:7e:bd:5c:38:2c:bb:0b:24:73:9a:9d:5d:
66:9c:f3:f9:7e:40:e6:04:ee:aa:50:5c:95:75:ce:3d:6a:cc:
44:d6:41:8c:91:7a:97:6b:77:fa:66:af:77:85:40:76:25:de:
eb:3b:ba:0c:1b:3a:d1:51:17:78:c7:5a:fb:21:31:15:ef:24:
f4:50:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:25:39 2025 by rpki-client