Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3J3OlAC-v6vl2KJZXoYnT6CAcf4.roa
File: 3J3OlAC-v6vl2KJZXoYnT6CAcf4.roa (raw, json)
Hash identifier: NCpPP+vI/b2IxPCy59X1rSENS/wgDJYoGraZ5+r93Ns=
Subject key identifier: DC:9D:CE:94:00:BE:BF:AB:E5:D8:A2:59:5E:86:27:4F:A0:80:71:FE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03E613E6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3J3OlAC-v6vl2KJZXoYnT6CAcf4.roa
Signing time: Sat 05 Feb 2022 15:01:24 +0000
ROA not before: Sat 05 Feb 2022 15:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65410022 (0x3e613e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 5 15:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc9dce9400bebfabe5d8a2595e86274fa08071fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:5b:f1:23:76:ad:74:9d:55:54:02:8c:06:
9c:a5:c0:a4:d8:da:e7:d7:39:6a:b4:db:d4:17:e0:
40:ea:a2:3b:c7:64:50:8e:fc:13:97:20:d0:d7:78:
73:c8:8b:0f:cb:3b:2d:87:4f:05:b2:31:66:60:27:
05:06:21:cb:4b:45:d7:dc:bf:6d:9a:72:fb:87:ff:
6d:25:6e:ab:80:14:24:1d:fc:45:52:a9:b5:1a:1c:
41:5e:6d:40:3a:c2:e8:fa:db:f4:05:29:dc:4b:af:
33:86:da:a4:32:15:7e:85:0b:0d:7e:db:94:2c:62:
9b:61:fb:ac:c4:59:63:21:ce:bf:ef:30:ad:e8:33:
f4:16:20:91:68:91:0a:bd:a9:0f:a6:73:0d:5b:b9:
33:b2:3e:49:04:af:28:cb:29:c9:0e:bb:fa:26:1d:
cb:f0:3e:53:ed:38:86:e9:7d:60:1b:54:7a:8d:2f:
21:29:07:90:52:8a:36:eb:c9:3d:2e:30:da:4a:3f:
22:91:22:b1:1f:23:93:17:40:34:50:09:1d:9a:4e:
ed:cc:d4:c5:fb:99:a4:5d:e0:15:ed:f7:d8:b0:46:
7d:0b:02:50:f2:2a:bd:52:3b:e9:55:d8:7b:b6:f0:
fe:7e:d3:94:1c:4a:66:1b:dc:83:ce:da:d3:ee:26:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:CE:94:00:BE:BF:AB:E5:D8:A2:59:5E:86:27:4F:A0:80:71:FE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3J3OlAC-v6vl2KJZXoYnT6CAcf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
25:56:45:0e:f6:40:14:cf:07:ff:19:af:6a:df:68:8d:3a:a4:
b4:5c:0e:cd:97:43:5b:8f:81:1c:8d:79:5a:6f:97:44:a4:8b:
27:72:ff:b4:d7:09:93:1e:26:0e:3a:d9:5b:40:ad:a8:a9:d0:
7d:0f:cb:87:ef:59:e3:c8:47:63:ef:a8:1a:d9:bd:dc:18:51:
12:c6:2d:f1:a1:81:0f:e3:37:2d:63:6d:df:8f:db:31:54:65:
d7:f9:7f:ab:c9:dd:6c:7b:98:d2:7b:1b:72:af:60:0e:9f:2d:
7f:4d:0d:33:d4:f8:c9:5e:3d:02:f2:37:4a:a9:20:93:c8:8f:
18:e1:b1:74:5c:2a:73:2d:42:80:b9:c5:97:eb:13:71:42:f6:
70:d4:f1:30:6f:c4:bd:76:c5:e3:29:ce:9c:43:34:f8:4c:e3:
9a:d1:54:31:8e:10:40:b9:39:5a:b6:61:98:27:cf:a5:70:dd:
06:af:5e:67:45:14:ef:3d:d4:55:2e:09:fa:f5:01:80:59:46:
d0:86:72:98:96:46:76:f3:1b:a7:0b:2d:5d:89:dd:ef:96:ba:
2a:fd:94:70:82:02:94:7a:48:a6:31:34:a6:54:6d:cc:d1:39:
e6:6d:d2:0c:b8:f1:c4:8a:9b:f3:1c:c8:03:8b:f5:b8:51:7f:
b0:ca:31:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA+YT5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIw
NTE1MDEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGM5ZGNlOTQwMGJl
YmZhYmU1ZDhhMjU5NWU4NjI3NGZhMDgwNzFmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuxW/Ejdq10nVVUAowGnKXApNja59c5arTb1BfgQOqiO8dk
UI78E5cg0Nd4c8iLD8s7LYdPBbIxZmAnBQYhy0tF19y/bZpy+4f/bSVuq4AUJB38
RVKptRocQV5tQDrC6Prb9AUp3EuvM4bapDIVfoULDX7blCxim2H7rMRZYyHOv+8w
regz9BYgkWiRCr2pD6ZzDVu5M7I+SQSvKMspyQ67+iYdy/A+U+04hul9YBtUeo0v
ISkHkFKKNuvJPS4w2ko/IpEisR8jkxdANFAJHZpO7czUxfuZpF3gFe332LBGfQsC
UPIqvVI76VXYe7bw/n7TlBxKZhvcg87a0+4mxKsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTcnc6UAL6/q+XYollehidPoIBx/jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzNKM09sQUMtdjZ2bDJLSlpYb1luVDZDQWNmNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAlVkUO9kAUzwf/Ga9q32iNOqS0XA7Nl0Nbj4Ec
jXlab5dEpIsncv+01wmTHiYOOtlbQK2oqdB9D8uH71njyEdj76ga2b3cGFESxi3x
oYEP4zctY23fj9sxVGXX+X+ryd1se5jSextyr2AOny1/TQ0z1PjJXj0C8jdKqSCT
yI8Y4bF0XCpzLUKAucWX6xNxQvZw1PEwb8S9dsXjKc6cQzT4TOOa0VQxjhBAuTla
tmGYJ8+lcN0Gr15nRRTvPdRVLgn69QGAWUbQhnKYlkZ28xunCy1did3vlroq/ZRw
ggKUekimMTSmVG3M0TnmbdIMuPHEipvzHMgDi/W4UX+wyjG9
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:34 2025 by rpki-client