Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cto7DVAANerUUOxWQQ_r-LQigkU.roa
File: Cto7DVAANerUUOxWQQ_r-LQigkU.roa (raw, json)
Hash identifier: qnemxUVCoUpEKd6nYhq4ToIBW3oE/wGGcfiGsV2zDos=
Subject key identifier: 0A:DA:3B:0D:50:00:35:EA:D4:50:EC:56:41:0F:EB:F8:B4:22:82:45
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07A9FE2C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cto7DVAANerUUOxWQQ_r-LQigkU.roa
Signing time: Sun 29 May 2022 01:27:57 +0000
ROA not before: Sun 29 May 2022 01:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128581164 (0x7a9fe2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 29 01:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ada3b0d500035ead450ec56410febf8b4228245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:a7:25:e4:d0:c0:cd:03:4d:c0:d7:9c:20:
be:3c:26:87:f4:24:e1:2b:cb:e3:aa:9b:fe:10:6a:
53:6f:19:a4:80:28:ea:74:87:ca:38:7b:bc:10:00:
39:b4:2f:3f:c8:ac:e0:38:c1:65:ef:f7:29:c8:f0:
82:16:f3:01:b4:e8:14:d2:da:92:01:0e:61:bd:63:
11:5b:38:ee:dd:eb:73:23:ce:39:af:c9:07:d8:ba:
d4:f7:56:14:00:41:07:7a:40:5a:4a:c0:d0:ad:3c:
ff:d7:5d:30:2c:89:c5:a8:a9:c7:78:90:05:42:69:
0e:c8:fe:b6:38:75:b4:14:be:cc:f2:f0:d3:d7:a0:
67:bb:63:95:11:a7:3f:1f:43:1e:e8:61:6c:58:37:
01:17:94:f6:11:06:e1:3e:c5:fc:ef:eb:f1:72:be:
15:c4:5a:23:e5:ad:ea:1d:29:76:32:b5:4c:09:a7:
c7:bf:a2:a2:b5:c6:fc:5e:09:df:fc:ba:fe:ad:0d:
ca:d6:7f:9e:78:ee:c4:2d:0b:93:af:3b:6d:0f:4e:
07:e8:78:74:df:c5:d4:80:89:aa:fe:38:15:6f:7c:
fb:72:0f:8c:aa:18:cd:0e:3b:c9:14:0d:93:82:71:
e4:6d:93:72:dc:9d:12:2d:e3:34:31:d4:18:0d:d3:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:3B:0D:50:00:35:EA:D4:50:EC:56:41:0F:EB:F8:B4:22:82:45
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cto7DVAANerUUOxWQQ_r-LQigkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d9:6f:5c:5c:89:ae:e7:14:3b:dc:08:4a:ae:70:1c:22:6c:
6b:ee:30:6d:e9:ec:36:c6:0f:98:1a:32:25:1f:1a:62:8f:41:
ce:cd:94:1d:3b:56:71:68:4b:88:ef:c0:a3:6f:9c:2a:e5:6a:
80:a3:5c:d3:15:ec:13:92:81:c0:38:1b:19:4c:9d:6d:99:d5:
07:b0:ad:ca:8d:b8:39:02:cd:01:68:88:f4:16:34:58:c8:91:
a8:e2:10:96:92:34:c3:79:0f:44:14:9f:d4:9a:ee:59:7e:f7:
89:ed:dc:8a:63:5b:ad:6e:d7:20:d8:20:30:fd:9f:80:e9:f7:
63:c7:d1:e7:bb:84:0b:56:f0:43:35:92:e2:f0:bf:c3:fd:c4:
63:dd:bc:dd:f1:53:23:f9:59:44:4e:aa:8f:23:5c:21:58:77:
a5:99:26:d2:06:f6:90:a5:d1:d8:f3:a9:82:18:59:00:47:6d:
36:ca:81:8d:19:50:bc:87:3f:e5:49:62:0f:31:7c:4d:28:fd:
62:1f:39:9c:ce:c8:ce:3b:f4:1e:e5:ec:7b:ec:c6:79:54:b9:
40:4e:2d:ac:98:32:42:6e:a6:79:37:4e:f7:8d:ec:27:12:c1:
84:55:85:72:f0:a3:62:ad:c5:cd:4d:7d:94:d4:55:ef:c8:fc:
46:da:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:28:36 2025 by rpki-client