Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Tr9uiWMGmYa3aP6yGXqhIZbCFA.roa
File: 1-Tr9uiWMGmYa3aP6yGXqhIZbCFA.roa (raw, json)
Hash identifier: 9fyLOJLg3/Elt5FvTLGqdiGcu0kdezXgKRxrCLdaYZY=
Subject key identifier: F9:3A:FD:BA:25:8C:1A:66:1A:DD:A3:FA:C8:65:EA:84:86:5B:08:50
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07A174C9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Tr9uiWMGmYa3aP6yGXqhIZbCFA.roa
Signing time: Sat 28 May 2022 03:50:13 +0000
ROA not before: Sat 28 May 2022 03:50:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128021705 (0x7a174c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 28 03:50:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93afdba258c1a661adda3fac865ea84865b0850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:b0:20:f9:50:80:99:b3:aa:ad:6b:65:24:
4e:9e:ba:99:de:12:6b:b4:e1:0b:e3:7a:98:8e:2c:
17:27:88:ba:27:4b:38:07:d3:07:c6:ec:fa:d8:51:
76:d5:5f:17:93:b1:cf:57:8f:21:af:ed:a9:a3:cb:
3b:fa:91:cc:74:18:64:dd:11:15:ac:0f:c0:cd:d6:
87:36:0e:f6:d5:6d:2e:e0:38:f0:7f:2e:11:71:70:
2e:50:93:c1:c6:c3:10:6c:92:99:ac:86:be:18:e2:
34:88:36:50:c5:6c:ce:4e:8a:2e:60:88:9e:8b:85:
08:9e:8f:3f:09:02:f9:9c:ae:13:d5:bd:9a:02:34:
56:9c:84:da:68:e3:0e:8a:86:ab:d7:2a:5c:80:b9:
17:0c:54:39:07:5d:25:f7:c5:2f:0d:c4:71:dd:5b:
ec:84:72:01:31:d4:f9:9a:7e:95:31:27:9f:ff:ae:
77:11:09:dd:b0:46:01:83:18:ef:4d:a3:b6:e3:ae:
2f:98:30:36:5c:93:67:58:5d:41:ad:43:ed:7d:e9:
34:dd:0d:be:21:ba:3c:17:c0:73:9b:a3:d0:c0:d9:
bd:18:2d:35:7d:5c:84:3a:af:a5:31:48:04:e0:bf:
03:a9:16:f3:12:ee:49:20:4f:3e:92:5b:3b:3a:45:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:FD:BA:25:8C:1A:66:1A:DD:A3:FA:C8:65:EA:84:86:5B:08:50
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-Tr9uiWMGmYa3aP6yGXqhIZbCFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
35:e2:ca:ff:d0:f6:37:4f:86:07:9f:77:33:e3:a7:f7:a7:86:
40:ae:59:84:49:ce:bc:be:99:39:bc:7b:ad:c3:94:5f:c3:8d:
89:ae:5f:3f:32:69:67:54:44:32:c9:36:6c:ef:4a:0c:19:da:
94:6d:b3:02:0b:19:ee:b7:cc:78:36:e7:54:49:1d:b0:7c:c8:
83:93:ce:0c:ee:cc:91:6c:2b:65:61:18:5c:b3:f0:aa:b9:a8:
f8:ca:6d:ea:43:03:65:cd:3f:1d:39:74:78:68:5a:02:7a:1b:
22:ae:90:b5:e9:71:bf:cc:8c:cb:8e:f8:7c:e2:14:c0:8c:cb:
d9:fc:c7:5a:9a:fc:ef:11:62:51:75:cb:dc:f4:22:4a:e2:9f:
90:25:72:3b:0e:03:55:c0:5a:78:90:fc:3a:a5:14:18:e7:28:
b6:32:4c:da:0e:ba:37:4d:59:39:8b:8f:c4:09:01:39:13:9c:
80:a2:e6:93:09:e8:21:a5:be:d1:d3:3a:82:b9:c4:26:79:76:
a9:ce:58:4b:18:70:6d:33:48:56:09:2a:0c:1d:4b:e0:e9:c8:
f3:df:83:c0:12:f4:8b:94:88:33:44:25:95:ae:11:0e:61:9b:
39:81:ec:2f:45:0a:66:a6:b2:25:e8:7c:0d:23:ae:1c:4e:74:
63:74:78:ab
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEB6F0yTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
ODAzNTAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjkzYWZkYmEyNThj
MWE2NjFhZGRhM2ZhYzg2NWVhODQ4NjViMDg1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKkSsCD5UICZs6qta2UkTp66md4Sa7ThC+N6mI4sFyeIuidL
OAfTB8bs+thRdtVfF5Oxz1ePIa/tqaPLO/qRzHQYZN0RFawPwM3WhzYO9tVtLuA4
8H8uEXFwLlCTwcbDEGySmayGvhjiNIg2UMVszk6KLmCInouFCJ6PPwkC+ZyuE9W9
mgI0VpyE2mjjDoqGq9cqXIC5FwxUOQddJffFLw3Ecd1b7IRyATHU+Zp+lTEnn/+u
dxEJ3bBGAYMY702jtuOuL5gwNlyTZ1hdQa1D7X3pNN0NviG6PBfAc5uj0MDZvRgt
NX1chDqvpTFIBOC/A6kW8xLuSSBPPpJbOzpFWjUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT5Ov26JYwaZhrdo/rIZeqEhlsIUDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzEtVHI5dWlXTUdtWWEzYVA2eUdYcWhJWmJDRkEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vi
LzZmMjMyZS0yMjc1LTQ0ZTktOTFjMC1jNzM5N2EyNjY5YTkvMS9TejJtNlp4bVpS
T2l6dVh3NE5PcmRGOFdmY00uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAGX2AQwDwQCAAIwCQMHASABB/wA
AjANBgkqhkiG9w0BAQsFAAOCAQEANeLK/9D2N0+GB593M+On96eGQK5ZhEnOvL6Z
Obx7rcOUX8ONia5fPzJpZ1REMsk2bO9KDBnalG2zAgsZ7rfMeDbnVEkdsHzIg5PO
DO7MkWwrZWEYXLPwqrmo+Mpt6kMDZc0/HTl0eGhaAnobIq6Qtelxv8yMy474fOIU
wIzL2fzHWpr87xFiUXXL3PQiSuKfkCVyOw4DVcBaeJD8OqUUGOcotjJM2g66N01Z
OYuPxAkBOROcgKLmkwnoIaW+0dM6grnEJnl2qc5YSxhwbTNIVgkqDB1L4OnI89+D
wBL0i5SIM0Qlla4RDmGbOYHsL0UKZqayJeh8DSOuHE50Y3R4qw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:20 2025 by rpki-client