Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A3yI1bU3mHxv5NBbEIOWQyCPtRo.roa
File: A3yI1bU3mHxv5NBbEIOWQyCPtRo.roa (raw, json)
Hash identifier: HP6M7fSliJRJ+Jb6aFFL4+xtyVvgIpgMmDKtKRt+zjM=
Subject key identifier: 03:7C:88:D5:B5:37:98:7C:6F:E4:D0:5B:10:83:96:43:20:8F:B5:1A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0845D9D1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A3yI1bU3mHxv5NBbEIOWQyCPtRo.roa
Signing time: Fri 10 Jun 2022 01:29:05 +0000
ROA not before: Fri 10 Jun 2022 01:29:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138795473 (0x845d9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 10 01:29:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=037c88d5b537987c6fe4d05b10839643208fb51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:b3:83:a1:9b:b5:28:43:15:d9:df:a7:ab:
d0:ca:6f:02:4f:2b:d1:61:f6:b5:15:6e:71:6a:7a:
be:8c:17:c6:1b:96:ff:8e:05:6d:e5:5c:f7:bd:58:
40:67:a8:2c:39:a1:17:05:95:43:da:eb:34:bc:d9:
2a:ad:c9:e5:68:66:cb:19:88:f1:ac:7c:2a:0c:ee:
29:4b:eb:8d:28:c5:a6:5b:27:20:d9:a6:13:85:87:
26:33:2d:ec:93:6e:9e:08:29:17:c4:8a:52:db:eb:
ba:ea:18:81:62:a3:a3:e0:8c:d2:fc:38:23:b1:1b:
d8:ec:b2:a6:e4:ff:ad:03:e2:9e:01:13:60:4d:a8:
07:ad:7d:aa:f8:cf:c9:e8:47:2e:b0:87:a7:5e:32:
8a:f9:d6:f4:03:b8:28:2b:60:7d:a5:25:08:0a:3e:
cb:f2:f4:d1:55:95:0c:41:73:e7:36:b9:fa:76:df:
0c:8c:c0:3e:33:b7:75:4d:ac:8c:83:ca:b8:5a:04:
28:5a:e9:f8:08:86:e1:dd:d4:d7:64:56:bf:a1:41:
5a:48:59:de:19:ff:9e:ec:0e:6f:90:9b:20:e7:77:
2b:2c:7d:01:8e:a4:1c:4c:80:ff:08:df:17:d0:07:
85:6d:7d:d3:85:19:c1:0a:6a:07:d3:d3:83:af:ce:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:88:D5:B5:37:98:7C:6F:E4:D0:5B:10:83:96:43:20:8F:B5:1A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/A3yI1bU3mHxv5NBbEIOWQyCPtRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1c:c5:85:49:f6:6e:77:07:6d:d3:f0:ea:fa:91:bc:e7:44:
2b:57:49:7c:fa:aa:54:08:46:35:47:44:51:5b:87:1d:8c:54:
cd:67:c9:81:f4:e3:79:46:61:9d:ba:ab:e7:2e:c6:02:22:2e:
6f:63:da:d5:32:ff:aa:37:76:af:a9:a1:26:77:dd:2b:fd:82:
c1:0e:1d:52:87:77:36:2b:d7:8b:91:50:9e:0c:d0:62:de:59:
89:18:eb:86:85:63:0a:1d:04:fa:bb:f1:e4:5f:6d:71:6c:4b:
3d:6c:e1:ba:b7:06:80:0a:33:ab:c6:da:aa:b8:e0:cd:ab:a4:
62:78:9d:d7:c6:c8:a9:18:71:69:e4:e7:c4:d6:e0:46:a6:71:
d1:13:86:37:ce:c3:59:fc:14:3c:2a:18:c4:6b:1e:5e:75:2f:
a9:82:ec:65:f3:ad:e3:5b:51:e6:00:91:e4:7e:01:3a:da:61:
43:eb:1a:8d:bb:f8:68:32:2e:19:b9:fa:fe:5e:27:69:8d:6f:
02:53:a3:3b:46:77:d3:48:80:9c:4f:bd:84:3c:14:d7:c7:99:
56:0e:63:7a:76:32:e8:b5:a1:a8:9c:cd:be:29:0a:b4:a5:08:
af:16:ad:17:5f:22:49:ec:de:1f:3d:50:01:77:40:f0:08:15:
26:f2:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:43 2025 by rpki-client