Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_8ZV2UW_QXxunBzgkmq-R2sGahg.roa
File: _8ZV2UW_QXxunBzgkmq-R2sGahg.roa (raw, json)
Hash identifier: TYnDyQ1XJ2WJuTVy+jfCbUsyQWMkLKnABhoYnhYKcrU=
Subject key identifier: FF:C6:55:D9:45:BF:41:7C:6E:9C:1C:E0:92:6A:BE:47:6B:06:6A:18
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0754F62C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_8ZV2UW_QXxunBzgkmq-R2sGahg.roa
Signing time: Sun 22 May 2022 13:30:29 +0000
ROA not before: Sun 22 May 2022 13:30:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123008556 (0x754f62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 22 13:30:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffc655d945bf417c6e9c1ce0926abe476b066a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:5f:3f:2f:57:22:e6:2c:43:ee:ce:cf:bf:
05:ff:ac:b9:a8:31:a8:d6:9c:f2:03:13:f9:e6:cb:
7c:e6:9a:e1:e0:40:7b:de:ec:e4:40:23:d3:51:c6:
e8:0e:6a:2c:a0:6e:40:09:0a:b1:d8:16:e0:1d:60:
5a:bc:23:70:aa:78:0f:cf:b6:19:0c:60:9c:0f:51:
88:2b:aa:4c:88:40:e0:ee:9d:1c:77:43:3a:b5:eb:
5a:82:ff:bf:53:23:b2:8c:23:24:7a:06:42:ad:34:
ab:87:e0:c3:df:0e:98:05:11:98:6f:de:1c:3e:ad:
fc:53:46:e1:38:cd:9d:9d:ea:68:88:6b:55:54:60:
ac:04:ab:c4:62:30:7f:32:78:ac:90:75:89:e7:ee:
f0:ab:fe:36:93:a3:0c:d7:7b:88:a6:ef:4c:15:a6:
77:81:73:b0:45:41:0d:ff:b7:44:ab:9b:a8:a4:48:
b0:47:56:b0:8f:29:5e:28:7c:d2:ae:89:ad:ba:d7:
c5:e0:b7:88:96:57:82:82:d7:11:dd:97:97:3c:7e:
e0:a5:8b:07:88:f4:eb:c9:3e:f4:c2:62:5c:0d:c3:
99:f5:e8:13:8e:1d:aa:43:14:bf:6a:93:e2:b0:9d:
01:67:87:26:b4:7e:15:9e:51:cd:a0:9d:f3:ba:7a:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C6:55:D9:45:BF:41:7C:6E:9C:1C:E0:92:6A:BE:47:6B:06:6A:18
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_8ZV2UW_QXxunBzgkmq-R2sGahg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:a5:b3:ff:4e:6a:5d:76:c7:5c:a6:30:5e:c2:6f:ea:60:06:
f4:d0:4a:ca:93:7d:fd:70:d2:43:67:55:4f:de:f7:e0:8e:97:
06:f1:65:f7:65:9a:75:61:8d:f9:87:ae:2d:aa:32:68:40:0f:
2c:b2:10:5e:af:8f:61:7f:8c:30:86:0e:3c:ab:12:da:17:93:
d3:43:0e:b8:44:d1:d4:9c:6b:0a:72:49:34:f9:9e:1a:7f:78:
7e:02:fe:a9:15:52:b1:a4:07:21:75:14:63:43:24:bc:9b:a7:
1d:22:0e:e2:e9:22:25:dc:9a:99:49:ee:e2:97:77:c5:ed:41:
06:2b:7d:e5:7b:be:d1:3a:e7:4d:69:7f:57:01:62:79:fb:da:
6b:a6:a1:44:01:3d:82:53:b9:5c:de:bb:5d:2b:2b:27:97:e9:
65:92:66:c7:e7:a5:79:1f:e2:a0:60:6b:f6:87:5c:0b:3e:61:
ab:1d:8a:08:f6:a1:b1:0c:37:38:8b:03:ff:c1:2a:af:c4:8d:
39:47:88:e6:d1:68:f7:aa:38:d2:31:19:19:25:cb:0f:1d:02:
36:55:3f:d8:cf:28:51:7d:32:3c:c4:55:7b:c5:39:d2:c4:1f:
be:b8:a3:6d:6b:34:7a:2f:45:7c:2b:6b:50:1d:e7:5a:84:fa:
87:04:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:30:09 2025 by rpki-client