Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Ior3XAaYIgB8HlFT9d04So2Phc.roa
File: 1-Ior3XAaYIgB8HlFT9d04So2Phc.roa (raw, json)
Hash identifier: ezt3S+TG7N0wtXgRlH0gUImTpA0clAs8MMrY7tdDBVk=
Subject key identifier: F8:8A:2B:DD:70:1A:60:88:01:F0:79:45:4F:D7:74:E1:2A:36:3E:17
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04A046FA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Ior3XAaYIgB8HlFT9d04So2Phc.roa
Signing time: Tue 01 Mar 2022 17:05:43 +0000
ROA not before: Tue 01 Mar 2022 17:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77612794 (0x4a046fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 1 17:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f88a2bdd701a608801f079454fd774e12a363e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:21:05:32:90:d0:a1:30:c6:91:d1:c5:40:
1e:7a:8e:d5:28:f7:f3:30:21:b8:7b:c7:67:0c:6d:
5c:22:73:46:d8:cd:53:0a:4e:f9:28:58:ba:22:8d:
ed:1e:84:14:4e:7e:4c:4a:ac:ff:1e:28:6d:cf:45:
20:18:73:ac:db:cc:d7:ec:c1:c6:00:bd:38:c1:56:
fb:83:c2:e6:c9:52:a5:f9:c2:c6:93:ab:20:9d:89:
9c:7c:e7:b9:7c:6b:b0:67:d7:b0:ac:20:25:f5:92:
6e:b1:7c:6d:7c:b3:3b:b8:40:d9:09:df:05:51:82:
39:b1:19:e8:82:2c:be:ec:8d:dd:32:c2:5a:c5:69:
60:c1:42:e1:1e:6a:cd:cc:8e:a2:b8:de:32:88:27:
81:55:a6:90:87:3a:78:d6:35:9a:53:2f:e8:ce:d0:
c7:02:fc:54:10:30:7c:5c:a5:4b:91:75:a4:0b:b3:
78:e9:cb:a3:cf:54:e2:d7:e1:ac:84:fc:56:df:1e:
ac:4e:55:8e:c7:49:68:17:3c:31:a8:b5:1d:62:0a:
fa:98:f9:06:5e:7c:20:c9:26:ee:2a:ac:8b:09:01:
b0:23:3a:82:05:eb:5c:f7:38:10:b8:f4:53:b9:65:
c7:e5:15:af:7b:c1:25:22:22:c8:d8:bc:77:c2:ff:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8A:2B:DD:70:1A:60:88:01:F0:79:45:4F:D7:74:E1:2A:36:3E:17
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Ior3XAaYIgB8HlFT9d04So2Phc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
9a:4d:26:31:1a:30:79:6d:3b:86:65:15:20:f9:e0:7b:80:c0:
b5:28:a3:55:88:a5:2b:a8:07:7d:9c:53:9c:e0:ff:a8:af:6a:
1b:1c:b6:5c:c0:0b:14:34:f1:df:43:b5:05:91:dd:d1:ea:cd:
48:9f:54:b3:8a:9e:3a:b0:c3:1e:9e:e0:1c:13:b1:be:e0:fe:
fb:11:42:f8:e5:53:38:3d:74:ff:52:56:53:25:68:07:37:1d:
4c:83:8b:34:8d:f5:0f:70:6b:97:c9:50:0b:9e:fb:32:ec:32:
dc:bc:c3:f8:e4:23:0c:b0:7d:3e:a5:69:66:8b:24:83:69:c1:
45:4e:f2:bd:5f:08:cd:7b:9c:84:29:55:06:ec:a8:b3:02:2b:
d6:11:3c:a9:46:bd:4f:40:09:76:99:8f:2a:19:a3:31:15:46:
d2:e6:87:1e:ba:96:b4:e9:c2:9c:b6:06:c7:60:86:b2:2d:db:
69:b4:95:62:97:6b:5f:09:33:d7:c9:6f:37:6e:44:d4:a8:c2:
fd:9a:e9:ff:f4:c8:8a:0e:90:fd:f7:d4:c0:51:da:05:0a:4f:
ad:51:2b:ac:d1:d6:7e:21:04:87:b9:fb:cd:d1:52:c6:4d:cb:
a4:6e:b6:95:4e:f8:3a:c8:0d:b5:3d:6f:b2:fe:cc:99:be:de:
83:a1:a0:d7
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBKBG+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMw
MTE3MDU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg4YTJiZGQ3MDFh
NjA4ODAxZjA3OTQ1NGZkNzc0ZTEyYTM2M2UxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJxMIQUykNChMMaR0cVAHnqO1Sj38zAhuHvHZwxtXCJzRtjN
UwpO+ShYuiKN7R6EFE5+TEqs/x4obc9FIBhzrNvM1+zBxgC9OMFW+4PC5slSpfnC
xpOrIJ2JnHznuXxrsGfXsKwgJfWSbrF8bXyzO7hA2QnfBVGCObEZ6IIsvuyN3TLC
WsVpYMFC4R5qzcyOorjeMogngVWmkIc6eNY1mlMv6M7QxwL8VBAwfFylS5F1pAuz
eOnLo89U4tfhrIT8Vt8erE5VjsdJaBc8Mai1HWIK+pj5Bl58IMkm7iqsiwkBsCM6
ggXrXPc4ELj0U7llx+UVr3vBJSIiyNi8d8L/K2UCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT4iivdcBpgiAHweUVP13ThKjY+FzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzEtSW9yM1hBYVlJZ0I4SGxGVDlkMDRTbzJQaGMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vi
LzZmMjMyZS0yMjc1LTQ0ZTktOTFjMC1jNzM5N2EyNjY5YTkvMS9TejJtNlp4bVpS
T2l6dVh3NE5PcmRGOFdmY00uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBACX2AQwDwQCAAIwCQMHACABB/wA
AjANBgkqhkiG9w0BAQsFAAOCAQEAmk0mMRoweW07hmUVIPnge4DAtSijVYilK6gH
fZxTnOD/qK9qGxy2XMALFDTx30O1BZHd0erNSJ9Us4qeOrDDHp7gHBOxvuD++xFC
+OVTOD10/1JWUyVoBzcdTIOLNI31D3Brl8lQC577Muwy3LzD+OQjDLB9PqVpZosk
g2nBRU7yvV8IzXuchClVBuyoswIr1hE8qUa9T0AJdpmPKhmjMRVG0uaHHrqWtOnC
nLYGx2CGsi3babSVYpdrXwkz18lvN25E1KjC/Zrp//TIig6Q/ffUwFHaBQpPrVEr
rNHWfiEEh7n7zdFSxk3LpG62lU74OsgNtT1vsv7Mmb7eg6Gg1w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:40 2025 by rpki-client