Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7WZ9OFSuGKITvXHdN8uCpblP11I.roa
File: 7WZ9OFSuGKITvXHdN8uCpblP11I.roa (raw, json)
Hash identifier: hAdSvrhrg1fJsV7ZCvm9+QqCrW5QNNYwfq1qZ+vjGyk=
Subject key identifier: ED:66:7D:38:54:AE:18:A2:13:BD:71:DD:37:CB:82:A5:B9:4F:D7:52
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08E36C2A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7WZ9OFSuGKITvXHdN8uCpblP11I.roa
Signing time: Wed 22 Jun 2022 00:05:44 +0000
ROA not before: Wed 22 Jun 2022 00:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149122090 (0x8e36c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 22 00:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed667d3854ae18a213bd71dd37cb82a5b94fd752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:22:92:7d:8c:08:48:16:9b:ec:e9:83:b3:2d:
bd:21:c7:eb:3a:e7:00:f7:1a:20:2d:24:f5:33:b7:
a8:69:8e:f8:38:72:01:87:35:05:d4:19:dc:d1:4b:
9d:92:8c:13:2b:50:2b:d3:94:17:50:8b:e7:5d:28:
a1:15:6d:a8:4d:60:5e:9f:b7:02:b7:8c:ff:8e:c9:
4f:c7:a6:77:d5:01:6c:ec:14:e0:50:69:16:b7:18:
b7:9c:4a:fb:d5:bb:57:cd:2c:e8:5a:f6:d6:21:0d:
51:25:e3:50:ee:f8:04:ff:1c:8b:2b:6b:3b:6a:bb:
c6:ab:83:5e:36:bd:c9:e3:d0:d2:f6:5b:17:2c:09:
07:55:ec:4f:bc:d3:d8:e2:7a:da:cc:83:fd:36:32:
fb:c8:c6:ca:50:1f:b7:af:09:f7:9a:30:2b:5f:05:
f2:73:e8:88:29:80:fb:ef:08:c0:56:f1:12:a7:14:
5b:2a:88:de:64:73:21:18:ff:a3:e9:1f:a3:3d:79:
68:6c:e2:a0:ef:23:7c:84:28:b6:c3:b8:e6:69:2e:
0c:42:d6:0d:3c:a0:d4:2f:26:77:f4:16:47:f0:a7:
dd:97:cd:b8:12:6b:66:a9:28:ef:15:1a:81:97:75:
5b:f7:1b:52:e0:30:b6:61:43:3b:41:53:07:c4:63:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:7D:38:54:AE:18:A2:13:BD:71:DD:37:CB:82:A5:B9:4F:D7:52
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7WZ9OFSuGKITvXHdN8uCpblP11I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
33:81:8b:7a:a2:12:e0:aa:90:8e:54:5c:2f:95:dc:c7:de:e4:
02:1e:32:3d:a7:b6:e3:96:c9:ba:01:74:d3:8b:1f:ff:ae:9d:
43:34:e1:61:3a:f5:aa:6f:4c:be:fe:8a:0b:6f:d7:86:85:6d:
20:fe:4b:a6:cc:19:a6:0f:31:6f:34:86:ae:45:41:04:70:e4:
6f:fe:ca:97:6e:b1:fb:8e:63:01:5c:6e:11:c0:a9:9b:3d:b0:
bb:55:4e:31:d5:1c:95:20:d1:16:8d:b9:0f:e2:11:2a:8a:f7:
c5:a4:65:20:fd:6f:13:d3:f4:e8:18:88:b0:12:ee:85:80:ce:
10:b1:a9:71:47:c7:10:57:c9:3c:95:4d:fd:cd:62:78:08:ed:
da:d8:da:42:c3:64:36:c1:3c:21:b1:b0:c2:4c:2c:e8:6a:94:
ad:4d:11:8b:ac:aa:c3:19:17:25:ab:3b:6e:9b:b0:3a:3b:cb:
cf:33:d7:41:96:25:b9:e6:ef:bc:a5:f3:a1:95:be:45:dd:1f:
3f:c2:b1:12:1b:5c:db:9e:43:23:01:ac:9c:9b:4d:6f:38:43:
1f:87:ec:c4:5e:72:99:82:6e:ec:49:e4:41:cc:b8:16:34:fd:
80:8d:69:bd:e2:63:6a:d9:0a:62:3e:b3:0c:ee:1f:24:f5:61:
b4:7b:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:59 2025 by rpki-client