Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5xUS1nBstVgYOB2tux9roPcUAhk.roa
File: 5xUS1nBstVgYOB2tux9roPcUAhk.roa (raw, json)
Hash identifier: vssg0cgLhyuiAwzuVeNLfZOSgglVMwtSrml/scnGwYk=
Subject key identifier: E7:15:12:D6:70:6C:B5:58:18:38:1D:AD:BB:1F:6B:A0:F7:14:02:19
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05010861
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5xUS1nBstVgYOB2tux9roPcUAhk.roa
Signing time: Sun 13 Mar 2022 13:10:40 +0000
ROA not before: Sun 13 Mar 2022 13:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83953761 (0x5010861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 13 13:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e71512d6706cb55818381dadbb1f6ba0f7140219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:f9:70:21:3a:e7:99:bf:cc:0d:58:37:9e:
1d:f9:44:91:19:d0:5c:93:a0:bf:c7:88:cd:a3:4d:
02:12:74:4d:e9:32:34:ad:55:77:f9:93:22:49:c5:
79:1b:ab:3e:30:89:90:8a:8b:e3:30:11:75:dc:b6:
31:67:89:fc:ed:ba:cf:75:c3:70:bf:20:40:e3:02:
df:1e:f4:b1:03:40:64:1e:bb:80:c6:7d:55:33:1b:
a5:c1:f1:48:55:93:3a:6a:d5:da:e3:d2:37:de:e4:
c4:0b:98:8e:63:da:e6:0d:5e:b5:8e:c3:f0:ba:81:
78:6e:9a:4b:71:f6:8c:cc:22:a9:a4:c3:ba:6f:43:
3c:64:50:26:b0:c9:e3:1b:13:45:25:db:1e:85:ef:
02:37:62:fe:f4:61:87:d8:aa:8a:7a:27:dd:ce:30:
03:e6:38:cc:69:08:ea:b1:dc:c4:8f:24:87:f1:ad:
a8:1d:e9:b5:11:b9:67:05:2f:72:43:ec:86:41:2d:
ef:a6:12:2d:07:0e:5f:a7:84:a8:23:5e:c1:da:20:
da:cd:b4:b8:8a:a5:65:54:21:2d:de:69:a0:6d:1e:
2c:15:90:8a:c1:56:98:7a:4f:02:40:a4:73:11:40:
f8:14:a3:18:87:97:04:af:d7:d7:f4:92:08:c0:f3:
1c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:12:D6:70:6C:B5:58:18:38:1D:AD:BB:1F:6B:A0:F7:14:02:19
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5xUS1nBstVgYOB2tux9roPcUAhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
19:e2:68:e5:db:e1:49:6a:18:cf:8d:97:58:5c:0d:75:5a:d6:
1f:1a:e1:60:b5:fb:89:d3:07:e9:67:fd:08:0a:6f:f6:21:17:
0e:63:e0:92:20:9d:30:cf:83:10:5f:86:60:7c:49:54:df:a1:
e3:a2:cd:b3:5d:fd:22:8e:c6:0e:9f:bb:59:84:e5:87:ec:6b:
1a:97:33:dc:fa:52:be:1f:20:50:ed:81:96:a4:cb:16:d6:64:
53:0c:ac:8c:2a:fb:30:3f:28:c0:af:1a:54:8f:10:09:94:48:
cd:5f:1c:10:83:55:89:81:52:cd:3e:92:cb:77:5e:fa:27:1a:
67:63:cb:be:26:c9:94:04:13:74:37:56:da:10:43:e5:c6:57:
44:54:9b:2f:aa:4a:58:c9:f6:e2:d1:18:4b:c0:aa:0f:3e:f3:
81:b4:1b:02:ea:c1:8c:9d:84:e7:ad:cf:4a:19:e4:37:f6:b6:
66:0a:82:30:d0:f0:b3:4a:0c:4d:2d:aa:ba:35:c2:9b:d0:7c:
94:0b:fe:37:5b:f3:82:b8:e5:d9:0a:b8:bf:2d:d7:e3:e9:42:
7f:ed:16:8b:9b:b7:c1:b7:18:03:b6:35:34:43:c7:09:97:09:
ce:6a:5d:c2:03:30:ab:b9:cb:a1:9c:be:e2:d2:22:2b:ac:6f:
94:46:5d:f6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBQEIYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMx
MzEzMTA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTcxNTEyZDY3MDZj
YjU1ODE4MzgxZGFkYmIxZjZiYTBmNzE0MDIxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJGC+XAhOueZv8wNWDeeHflEkRnQXJOgv8eIzaNNAhJ0Teky
NK1Vd/mTIknFeRurPjCJkIqL4zARddy2MWeJ/O26z3XDcL8gQOMC3x70sQNAZB67
gMZ9VTMbpcHxSFWTOmrV2uPSN97kxAuYjmPa5g1etY7D8LqBeG6aS3H2jMwiqaTD
um9DPGRQJrDJ4xsTRSXbHoXvAjdi/vRhh9iqinon3c4wA+Y4zGkI6rHcxI8kh/Gt
qB3ptRG5ZwUvckPshkEt76YSLQcOX6eEqCNewdog2s20uIqlZVQhLd5poG0eLBWQ
isFWmHpPAkCkcxFA+BSjGIeXBK/X1/SSCMDzHOECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTnFRLWcGy1WBg4Ha27H2ug9xQCGTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzV4VVMxbkJzdFZnWU9CMnR1eDlyb1BjVUFoay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAZ4mjl2+FJahjPjZdYXA11WtYfGuFgtfuJ0wfp
Z/0ICm/2IRcOY+CSIJ0wz4MQX4ZgfElU36Hjos2zXf0ijsYOn7tZhOWH7GsalzPc
+lK+HyBQ7YGWpMsW1mRTDKyMKvswPyjArxpUjxAJlEjNXxwQg1WJgVLNPpLLd176
JxpnY8u+JsmUBBN0N1baEEPlxldEVJsvqkpYyfbi0RhLwKoPPvOBtBsC6sGMnYTn
rc9KGeQ39rZmCoIw0PCzSgxNLaq6NcKb0HyUC/43W/OCuOXZCri/Ldfj6UJ/7RaL
m7fBtxgDtjU0Q8cJlwnOal3CAzCrucuhnL7i0iIrrG+URl32
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:53 2025 by rpki-client