Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cp-FrwpFBvAWrLaDgDa12Rfa8Nw.roa
File: Cp-FrwpFBvAWrLaDgDa12Rfa8Nw.roa (raw, json)
Hash identifier: sMN5T1o4u+DN1sRPtZCc6Mb+amI3vKG9eogWKJZb/k4=
Subject key identifier: 0A:9F:85:AF:0A:45:06:F0:16:AC:B6:83:80:36:B5:D9:17:DA:F0:DC
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0857B4F4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cp-FrwpFBvAWrLaDgDa12Rfa8Nw.roa
Signing time: Sat 11 Jun 2022 05:05:02 +0000
ROA not before: Sat 11 Jun 2022 05:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139965684 (0x857b4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 11 05:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a9f85af0a4506f016acb6838036b5d917daf0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:b3:0c:99:8e:39:ee:2b:76:bd:04:9b:57:
10:70:15:55:28:72:3f:55:41:bc:e6:15:0b:d9:c7:
21:77:33:b9:b2:f2:ac:53:ae:21:6b:e3:b1:3c:d4:
b8:33:f8:5a:3f:11:22:d6:07:71:46:5b:74:5e:d3:
02:ae:34:7c:95:6e:bc:07:23:43:06:f9:83:a6:4c:
be:23:9a:2f:00:f4:c3:d5:9f:86:ac:79:e0:be:f9:
43:3e:be:d2:c0:2e:ce:51:15:51:4d:5f:8d:f1:5d:
97:22:3c:18:c4:42:5b:cc:41:be:82:ef:b1:5d:30:
6a:ba:64:51:b4:a4:32:ad:66:23:27:7c:19:a7:d2:
fc:a6:25:6b:27:c4:f1:f4:ed:36:9c:22:ad:9f:9d:
94:49:b7:9e:d0:17:27:52:9e:84:35:ef:89:77:4b:
71:9a:8d:cc:f8:17:1e:38:97:27:db:53:1e:e8:00:
9e:86:af:ac:93:bd:ea:76:19:94:e0:69:27:15:08:
3e:35:af:0c:4e:b0:d7:73:de:c6:45:7f:23:31:cb:
b9:07:71:03:30:80:42:e0:2a:31:bb:4d:7d:71:52:
70:a0:eb:0c:85:ae:0f:f7:f0:a2:a0:68:bc:1c:3b:
30:d7:af:54:d4:c3:f2:83:f5:88:fe:e1:d2:cb:d3:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9F:85:AF:0A:45:06:F0:16:AC:B6:83:80:36:B5:D9:17:DA:F0:DC
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cp-FrwpFBvAWrLaDgDa12Rfa8Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:95:38:05:61:62:27:65:28:a6:b8:d8:59:36:1d:4f:ab:3a:
cb:32:00:81:50:22:5b:e4:26:a7:89:40:7b:28:4d:07:fd:ea:
5e:83:bc:05:74:3d:fe:c5:14:c3:ba:54:db:8f:d5:57:5d:61:
36:b1:86:c3:c8:84:6c:a7:3e:24:e4:ac:1d:a6:1a:54:c7:d2:
1b:74:ec:c7:c3:78:93:b7:60:18:f0:76:04:70:fd:f6:9f:eb:
31:2d:5f:c1:ff:1b:ca:e1:69:00:fe:d5:1f:ec:c8:f6:b0:7a:
bb:98:39:b9:88:27:da:fe:5c:30:e7:cf:ce:4f:02:9f:81:75:
2c:94:31:70:7e:94:64:b6:1e:b7:8c:df:0a:40:47:5f:7a:96:
43:6e:c6:f0:cc:dc:be:16:b4:85:9a:03:b9:23:04:d4:d2:fc:
50:82:70:0c:48:ee:82:92:73:ea:82:d7:eb:65:ca:92:35:04:
20:a2:10:66:55:ff:d8:b0:13:d6:df:48:c8:9d:35:fa:ed:13:
95:39:75:41:97:15:28:57:50:45:68:66:b6:ed:09:62:56:c1:
b9:fd:a6:0f:f3:cf:f3:44:52:a6:9b:87:39:ca:90:9d:7b:cb:
a9:8b:0c:1f:54:34:a0:40:8e:c8:2c:dc:2b:7b:2c:17:6f:fd:
3f:e6:42:6f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECFe09DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MTA1MDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE5Zjg1YWYwYTQ1
MDZmMDE2YWNiNjgzODAzNmI1ZDkxN2RhZjBkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZzswyZjjnuK3a9BJtXEHAVVShyP1VBvOYVC9nHIXczubLy
rFOuIWvjsTzUuDP4Wj8RItYHcUZbdF7TAq40fJVuvAcjQwb5g6ZMviOaLwD0w9Wf
hqx54L75Qz6+0sAuzlEVUU1fjfFdlyI8GMRCW8xBvoLvsV0warpkUbSkMq1mIyd8
GafS/KYlayfE8fTtNpwirZ+dlEm3ntAXJ1KehDXviXdLcZqNzPgXHjiXJ9tTHugA
noavrJO96nYZlOBpJxUIPjWvDE6w13PexkV/IzHLuQdxAzCAQuAqMbtNfXFScKDr
DIWuD/fwoqBovBw7MNevVNTD8oP1iP7h0svT3RMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKn4WvCkUG8BastoOANrXZF9rw3DAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0NwLUZyd3BGQnZBV3JMYURnRGExMlJmYThOdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAn5U4BWFiJ2UoprjYWTYdT6s6yzIAgVAiW+Qmp4lAeyhNB/3qXoO8BXQ9/sUU
w7pU24/VV11hNrGGw8iEbKc+JOSsHaYaVMfSG3Tsx8N4k7dgGPB2BHD99p/rMS1f
wf8byuFpAP7VH+zI9rB6u5g5uYgn2v5cMOfPzk8Cn4F1LJQxcH6UZLYet4zfCkBH
X3qWQ27G8Mzcvha0hZoDuSME1NL8UIJwDEjugpJz6oLX62XKkjUEIKIQZlX/2LAT
1t9IyJ01+u0TlTl1QZcVKFdQRWhmtu0JYlbBuf2mD/PP80RSppuHOcqQnXvLqYsM
H1Q0oECOyCzcK3ssF2/9P+ZCbw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:31 2025 by rpki-client