Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/24IVl4rl7T13dt8o3nuEKwBQPiM.roa
File: 24IVl4rl7T13dt8o3nuEKwBQPiM.roa (raw, json)
Hash identifier: sfRsFD2HEwrgAxZCpJMDLN/x3VeMr92Mwsyx+mmA7XM=
Subject key identifier: DB:82:15:97:8A:E5:ED:3D:77:76:DF:28:DE:7B:84:2B:00:50:3E:23
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 075D70EA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/24IVl4rl7T13dt8o3nuEKwBQPiM.roa
Signing time: Mon 23 May 2022 03:59:29 +0000
ROA not before: Mon 23 May 2022 03:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123564266 (0x75d70ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 23 03:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db8215978ae5ed3d7776df28de7b842b00503e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:65:03:73:aa:54:5b:d8:9e:d8:0f:8d:55:
ab:91:1a:37:99:3d:fb:31:17:32:20:0d:64:1f:8e:
44:6e:97:e2:e1:d9:c2:57:6b:76:1e:17:c5:40:cf:
15:dc:41:fe:45:49:bc:fd:aa:51:a2:6c:72:d3:5a:
fc:f2:0b:a0:22:c7:37:73:c1:b1:7a:ac:0b:27:09:
8a:1e:fd:7e:06:ba:cf:e3:1e:ca:e1:3d:d2:34:25:
79:88:60:da:fc:d8:01:83:fc:5c:0b:5b:b5:77:8b:
80:d2:e8:54:eb:c3:06:69:b4:2c:2a:45:67:9e:b7:
26:a2:10:c2:d0:fc:c5:a5:23:b8:46:d8:b8:f3:1f:
93:b3:2d:1e:7f:37:fc:bf:92:80:5f:71:3e:76:14:
41:f9:bb:2b:f3:f3:75:65:19:46:04:c5:b2:54:76:
8c:95:79:2f:15:6f:c9:eb:81:14:c6:31:50:14:00:
6f:c8:3f:fa:a3:0b:46:80:14:72:6b:ea:99:df:b0:
6c:71:63:0b:40:93:e5:44:84:b9:3f:31:00:3f:52:
85:13:04:51:cd:6e:29:2d:c1:25:2d:39:c1:65:2d:
1e:1a:0a:b7:5a:03:d4:ab:6e:eb:ab:ed:4d:30:30:
32:60:94:80:f6:06:70:d5:e3:d6:f6:8c:05:3e:eb:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:15:97:8A:E5:ED:3D:77:76:DF:28:DE:7B:84:2B:00:50:3E:23
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/24IVl4rl7T13dt8o3nuEKwBQPiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:a7:35:4c:9f:ae:6b:79:b4:b1:55:44:7b:d6:06:81:a4:
ee:ce:39:fa:35:4c:6f:ce:d0:24:d2:58:c6:f0:12:4f:aa:e3:
54:c6:26:3f:74:ba:2c:99:57:ee:b8:af:0e:ed:8b:95:65:a8:
f1:6c:0a:c7:ae:06:a6:0d:6e:6f:05:e7:83:60:72:4c:a9:33:
11:48:13:5a:c9:da:37:79:84:7b:4a:a3:16:5d:41:8c:d4:77:
62:31:12:af:2a:ed:00:64:ac:73:d9:3f:9b:03:0c:9d:78:9b:
f7:49:62:36:f8:91:4e:f2:68:9e:36:75:8e:06:0d:99:be:50:
ea:47:3a:4f:e7:67:e4:6c:91:db:fd:79:a0:e8:07:69:c6:fb:
8a:91:ef:47:78:4c:e9:98:b8:21:18:72:fa:36:b0:96:d5:85:
10:ed:66:0a:ef:90:fa:17:b3:12:7f:6f:cd:24:8f:c7:c8:07:
c1:9f:39:14:ac:44:cc:ec:8b:58:b5:e2:03:4a:3a:7b:f1:ac:
35:4c:41:17:ed:eb:d2:c5:4a:c2:ed:91:34:e2:2b:b7:f6:c1:
84:6c:58:55:21:68:08:52:3b:a6:ef:a1:35:3f:d1:27:c2:8f:
46:2c:76:f3:30:f6:23:e0:25:9a:fa:71:9c:33:e9:83:c4:e2:
7a:6a:36:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB11w6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
MzAzNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGI4MjE1OTc4YWU1
ZWQzZDc3NzZkZjI4ZGU3Yjg0MmIwMDUwM2UyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALgiZQNzqlRb2J7YD41Vq5EaN5k9+zEXMiANZB+ORG6X4uHZ
wldrdh4XxUDPFdxB/kVJvP2qUaJsctNa/PILoCLHN3PBsXqsCycJih79fga6z+Me
yuE90jQleYhg2vzYAYP8XAtbtXeLgNLoVOvDBmm0LCpFZ563JqIQwtD8xaUjuEbY
uPMfk7MtHn83/L+SgF9xPnYUQfm7K/PzdWUZRgTFslR2jJV5LxVvyeuBFMYxUBQA
b8g/+qMLRoAUcmvqmd+wbHFjC0CT5USEuT8xAD9ShRMEUc1uKS3BJS05wWUtHhoK
t1oD1Ktu66vtTTAwMmCUgPYGcNXj1vaMBT7rYqUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTbghWXiuXtPXd23yjee4QrAFA+IzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzI0SVZsNHJsN1QxM2R0OG8zbnVFS3dCUVBpTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAdxqnNUyfrmt5tLFVRHvWBoGk7s45+jVMb87QJNJYxvAST6rjVMYmP3S6LJlX
7rivDu2LlWWo8WwKx64Gpg1ubwXng2ByTKkzEUgTWsnaN3mEe0qjFl1BjNR3YjES
ryrtAGSsc9k/mwMMnXib90liNviRTvJonjZ1jgYNmb5Q6kc6T+dn5GyR2/15oOgH
acb7ipHvR3hM6Zi4IRhy+jawltWFEO1mCu+Q+hezEn9vzSSPx8gHwZ85FKxEzOyL
WLXiA0o6e/GsNUxBF+3r0sVKwu2RNOIrt/bBhGxYVSFoCFI7pu+hNT/RJ8KPRix2
8zD2I+AlmvpxnDPpg8Tiemo2gw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:46 2025 by rpki-client