Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5KDdpnKQ0WodcKPn1BjGLqvJQTU.roa
File: 5KDdpnKQ0WodcKPn1BjGLqvJQTU.roa (raw, json)
Hash identifier: pUVbwH9Ls2cliTn4ld8s6DcN9QRYD3zbkxH1n+YCKLM=
Subject key identifier: E4:A0:DD:A6:72:90:D1:6A:1D:70:A3:E7:D4:18:C6:2E:AB:C9:41:35
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07C8E156
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5KDdpnKQ0WodcKPn1BjGLqvJQTU.roa
Signing time: Tue 31 May 2022 05:53:13 +0000
ROA not before: Tue 31 May 2022 05:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130605398 (0x7c8e156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 31 05:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4a0dda67290d16a1d70a3e7d418c62eabc94135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:ce:3c:a2:97:c2:f4:f8:ff:5b:b0:5c:fd:
55:c5:1b:c7:1a:b0:3e:e4:07:5e:2e:be:76:d8:41:
ae:3d:da:75:90:0e:28:31:91:3a:c8:91:d0:3c:19:
ba:94:73:aa:76:0a:19:fc:ab:4e:86:09:35:e3:21:
f4:7a:1b:2d:e8:78:18:e5:82:3f:55:e1:88:c4:42:
0a:ce:05:e6:92:e8:2f:32:e6:dc:36:76:db:46:10:
3a:f0:42:6d:7d:e0:d1:34:ae:43:43:89:92:0b:14:
5f:fa:28:0a:eb:9f:34:4f:eb:25:7e:be:e7:07:f7:
82:03:e8:95:9d:f2:fa:fa:24:24:09:f9:70:e2:74:
8c:52:35:11:d0:16:ef:52:d2:65:b5:c8:3d:af:04:
c0:db:f6:69:d0:11:34:c0:1d:da:a0:7b:99:da:f8:
e6:52:d5:59:1a:4b:68:8a:c1:ab:cf:87:d8:06:c5:
79:43:cf:f7:7e:e3:fe:16:80:ef:56:a2:f8:91:1c:
a1:f3:dd:8f:3e:d2:02:07:00:eb:c6:32:ec:e0:bb:
d0:11:e3:f0:d9:38:5a:cd:27:e8:5e:17:65:91:9a:
52:36:cf:0a:69:34:aa:38:00:d6:ee:76:3b:d6:33:
be:49:dc:2a:16:d0:32:0d:fb:e8:fc:4d:3f:19:64:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A0:DD:A6:72:90:D1:6A:1D:70:A3:E7:D4:18:C6:2E:AB:C9:41:35
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5KDdpnKQ0WodcKPn1BjGLqvJQTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6f:95:e6:ca:61:b3:26:b9:8d:42:a5:ee:2d:69:ba:6a:71:
19:90:0f:1d:48:16:e4:2f:83:d5:6c:d1:d5:90:3a:b4:65:2c:
7a:ef:aa:04:13:d2:42:e9:84:80:cd:c8:a0:26:42:8a:fc:29:
e1:d7:20:d3:7b:f4:24:6d:3e:b4:cd:08:5b:f7:28:e8:02:5d:
be:fb:29:94:bb:30:c1:81:c7:3f:e2:84:0e:87:85:87:27:a5:
7e:17:e9:7a:f3:84:06:77:d8:a6:8e:6a:a4:da:e2:e1:4a:d5:
ed:f4:8e:38:40:02:8d:57:69:58:35:fb:9a:0d:66:6a:a8:66:
9c:65:e1:e1:10:18:92:a8:38:84:3a:c1:84:3a:6e:f0:38:70:
df:a8:a6:b3:b1:63:85:b5:0a:92:a1:93:b9:d5:44:09:0c:06:
92:da:1d:4e:53:6e:73:2d:df:9c:7a:db:52:3b:48:74:71:f4:
fd:10:14:24:0b:ef:7d:18:c1:55:1d:45:92:8b:46:e1:ca:d2:
89:ec:ab:bb:9e:9b:00:d5:df:b7:9c:28:83:89:92:1d:54:af:
c6:e9:fb:6c:c1:b4:65:7a:81:5c:6d:92:fd:2f:a9:47:9c:fe:
70:c6:00:62:92:a7:72:d7:a9:2d:3f:e6:76:a3:7c:f5:8a:cc:
7e:a4:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:22 2025 by rpki-client