Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/41TCJqUtkPsiU445SLyvY6NEx0k.roa
File: 41TCJqUtkPsiU445SLyvY6NEx0k.roa (raw, json)
Hash identifier: 4qcgLWSlB4FzPW+naeACl/+1wmk3advjIb4IbGryXHg=
Subject key identifier: E3:54:C2:26:A5:2D:90:FB:22:53:8E:39:48:BC:AF:63:A3:44:C7:49
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06B1E73B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/41TCJqUtkPsiU445SLyvY6NEx0k.roa
Signing time: Tue 10 May 2022 01:43:25 +0000
ROA not before: Tue 10 May 2022 01:43:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112322363 (0x6b1e73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 10 01:43:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e354c226a52d90fb22538e3948bcaf63a344c749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:28:aa:75:82:27:e7:87:d8:a3:c8:f1:c7:
f4:b3:88:8a:9f:9f:ff:f7:10:91:bd:09:a8:63:cd:
0d:cf:a9:63:d5:7c:d1:fd:2a:26:a4:1f:42:5c:e2:
fb:8d:4a:8c:70:27:41:94:f2:df:0a:2b:7a:2a:2c:
d6:7c:6d:d8:79:48:e4:62:82:01:2f:83:7a:94:db:
91:a2:ff:1a:99:51:9f:d4:d9:93:76:39:d4:fc:64:
43:b7:db:60:df:8a:b6:71:b7:0d:79:c0:9a:fd:bc:
51:02:86:b8:d8:cf:bd:22:78:75:11:36:c4:50:a8:
b0:3c:96:ef:04:42:e8:9a:98:20:ba:a2:46:33:83:
16:d4:bd:99:49:9d:a1:87:3e:0c:bd:95:52:c2:65:
48:de:b2:bc:fa:8e:36:c4:33:37:b7:2d:47:2a:40:
8b:93:14:5c:ba:5d:a5:8f:15:8f:d0:b7:39:d4:f6:
20:6b:aa:9d:e9:36:4c:0a:ab:64:02:ff:ab:ab:c5:
66:ad:c3:05:04:5b:0e:c4:6d:b1:00:6a:d4:53:0e:
56:6d:47:ca:3e:d9:cb:c1:a0:14:43:44:b8:6b:47:
5b:d1:ba:6c:80:2b:9d:c9:3d:38:b1:80:12:0f:5f:
70:51:fa:9f:c3:86:d6:6d:fb:12:d4:ac:dd:92:2c:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:C2:26:A5:2D:90:FB:22:53:8E:39:48:BC:AF:63:A3:44:C7:49
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/41TCJqUtkPsiU445SLyvY6NEx0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5c:78:db:33:aa:c3:f5:47:cc:b5:ae:b4:40:91:2c:8e:a7:b0:
ec:44:15:18:c6:3f:36:3b:1d:a4:17:0c:91:72:3a:f2:b7:f1:
a7:6a:43:28:e7:d2:c3:a4:d6:96:94:0b:45:2d:98:a0:16:e8:
ca:88:ba:b2:91:ea:f8:ff:e4:f8:84:58:08:71:78:d3:2c:79:
47:9f:8d:c2:81:c8:9b:ff:c3:76:e9:aa:49:56:38:c1:f5:b1:
39:98:63:60:95:23:13:e7:da:8b:64:30:28:a3:e5:ed:c2:ae:
53:60:9b:24:22:87:d5:42:e4:1a:f5:0f:4f:56:44:30:38:fc:
7f:d3:79:25:1f:0f:64:bc:26:5e:42:0f:57:ca:8e:56:c3:89:
fe:e4:c4:5f:38:25:43:11:6a:47:d7:37:45:12:77:93:8a:16:
cf:a9:36:0d:b4:9d:48:2a:02:30:79:61:4a:2c:a3:be:d9:75:
a1:c6:18:8d:c9:68:9c:5d:82:a2:14:be:b1:7f:68:9d:92:3b:
74:8a:a4:e5:f4:11:84:41:f1:39:0a:d6:70:59:66:6b:3c:20:
ff:b0:f6:22:90:c1:97:24:2c:a4:77:46:87:74:84:da:8b:b8:
a1:ce:79:50:fb:7d:07:fd:a9:e1:e8:d4:81:2f:1b:cb:40:9f:
b2:39:88:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBrHnOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
MDAxNDMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM1NGMyMjZhNTJk
OTBmYjIyNTM4ZTM5NDhiY2FmNjNhMzQ0Yzc0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALFCKKp1gifnh9ijyPHH9LOIip+f//cQkb0JqGPNDc+pY9V8
0f0qJqQfQlzi+41KjHAnQZTy3woreios1nxt2HlI5GKCAS+DepTbkaL/GplRn9TZ
k3Y51PxkQ7fbYN+KtnG3DXnAmv28UQKGuNjPvSJ4dRE2xFCosDyW7wRC6JqYILqi
RjODFtS9mUmdoYc+DL2VUsJlSN6yvPqONsQzN7ctRypAi5MUXLpdpY8Vj9C3OdT2
IGuqnek2TAqrZAL/q6vFZq3DBQRbDsRtsQBq1FMOVm1Hyj7Zy8GgFENEuGtHW9G6
bIArnck9OLGAEg9fcFH6n8OG1m37EtSs3ZIsTRUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTjVMImpS2Q+yJTjjlIvK9jo0THSTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzQxVENKcVV0a1BzaVU0NDVTTHl2WTZORXgway5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBceNszqsP1R8y1rrRAkSyOp7DsRBUYxj82Ox2k
FwyRcjryt/GnakMo59LDpNaWlAtFLZigFujKiLqyker4/+T4hFgIcXjTLHlHn43C
gcib/8N26apJVjjB9bE5mGNglSMT59qLZDAoo+Xtwq5TYJskIofVQuQa9Q9PVkQw
OPx/03klHw9kvCZeQg9Xyo5Ww4n+5MRfOCVDEWpH1zdFEneTihbPqTYNtJ1IKgIw
eWFKLKO+2XWhxhiNyWicXYKiFL6xf2idkjt0iqTl9BGEQfE5CtZwWWZrPCD/sPYi
kMGXJCykd0aHdITai7ihznlQ+30H/anh6NSBLxvLQJ+yOYhy
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:07 2025 by rpki-client