Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EOP7wdhhtLXjtLL7JLpK9lQ3u2c.roa
File: EOP7wdhhtLXjtLL7JLpK9lQ3u2c.roa (raw, json)
Hash identifier: M5RkTv9wuXAIbtC8JkJxegIJcMR1CCuPDhOUxtE15Mk=
Subject key identifier: 10:E3:FB:C1:D8:61:B4:B5:E3:B4:B2:FB:24:BA:4A:F6:54:37:BB:67
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04093621
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EOP7wdhhtLXjtLL7JLpK9lQ3u2c.roa
Signing time: Thu 10 Feb 2022 04:04:35 +0000
ROA not before: Thu 10 Feb 2022 04:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67712545 (0x4093621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 10 04:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10e3fbc1d861b4b5e3b4b2fb24ba4af65437bb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:97:5e:11:9b:f8:b5:a2:21:0b:ea:5e:24:
f4:ab:f7:e7:94:79:56:ed:2a:fa:81:ee:14:fa:05:
c0:0f:89:d6:97:ba:db:5a:a2:16:41:3b:2b:5d:61:
45:5f:3c:56:3d:94:4e:8b:89:dd:50:97:b2:60:c3:
09:44:51:f8:fe:9b:6b:e9:75:bd:06:15:77:6c:c0:
13:f9:90:c7:c6:2f:ba:81:ce:9b:49:63:f4:40:66:
45:94:fa:a2:0b:d4:3a:84:94:7e:4d:60:40:70:03:
ba:f6:c1:f1:3c:e7:c0:74:0b:3e:23:0d:47:be:a3:
59:e2:58:02:f4:56:48:3a:00:ae:33:80:21:75:60:
72:b3:60:43:38:6b:d5:d8:7c:8f:8b:ed:74:91:07:
05:2a:8d:b8:d8:19:43:a7:14:c4:53:ad:c4:bd:76:
6c:40:25:62:4b:4b:8c:ff:fb:a3:89:da:7c:86:a3:
49:33:87:00:cc:86:39:09:b5:34:01:a7:70:c7:15:
a5:6a:b5:50:72:15:88:25:67:09:0a:1d:dd:6c:4d:
ce:59:26:46:68:b6:a3:07:1f:d5:0b:b7:d8:fa:49:
7c:17:bf:fe:ad:b2:c0:0e:26:a4:a7:23:f9:26:10:
35:46:65:4c:f9:80:2b:50:58:05:f2:a4:5b:d2:fc:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:FB:C1:D8:61:B4:B5:E3:B4:B2:FB:24:BA:4A:F6:54:37:BB:67
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EOP7wdhhtLXjtLL7JLpK9lQ3u2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
76:67:c6:27:63:8c:a0:79:7b:26:74:81:ef:10:b9:af:2d:b0:
28:38:03:14:18:17:ea:13:f0:6a:7d:3d:58:20:cf:ea:4f:ed:
6e:c8:87:e2:fe:dd:18:97:30:0a:e9:b6:be:4c:ca:87:fb:e3:
4e:4f:9a:15:8f:6e:e4:5b:67:ef:40:25:22:0e:54:ec:8a:c7:
91:72:47:71:6a:af:61:39:dc:ce:0a:dc:50:bd:49:43:09:70:
1a:75:39:c0:44:35:2c:20:04:60:a1:27:85:7c:1c:24:49:eb:
b1:2c:39:29:a8:51:c2:53:64:e4:97:35:fb:be:dc:8a:4e:cc:
5f:9a:20:6f:a0:fd:26:0f:01:1c:ec:2c:4c:5c:ca:d3:14:fd:
1a:b6:e5:04:53:bf:03:bf:cf:0d:67:e2:89:5b:d8:07:67:db:
20:9e:fb:dc:7a:46:62:4a:c1:87:7e:4f:31:d8:de:33:d4:24:
26:f3:82:08:e0:47:8b:5d:4c:8f:fe:6d:29:20:cf:b3:62:42:
32:16:15:b8:b3:73:9f:a4:99:cc:00:42:d3:41:d7:ae:58:49:
c3:09:f9:f6:c0:32:ce:b6:72:b6:22:41:b2:f6:16:d9:47:f1:
19:91:76:5c:d7:8c:d0:a6:2f:b1:e4:f5:2c:a7:c9:65:86:94:
a3:37:f8:e5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBAk2ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIx
MDA0MDQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTBlM2ZiYzFkODYx
YjRiNWUzYjRiMmZiMjRiYTRhZjY1NDM3YmI2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTVl14Rm/i1oiEL6l4k9Kv355R5Vu0q+oHuFPoFwA+J1pe6
21qiFkE7K11hRV88Vj2UTouJ3VCXsmDDCURR+P6ba+l1vQYVd2zAE/mQx8YvuoHO
m0lj9EBmRZT6ogvUOoSUfk1gQHADuvbB8TznwHQLPiMNR76jWeJYAvRWSDoArjOA
IXVgcrNgQzhr1dh8j4vtdJEHBSqNuNgZQ6cUxFOtxL12bEAlYktLjP/7o4nafIaj
STOHAMyGOQm1NAGncMcVpWq1UHIViCVnCQod3WxNzlkmRmi2owcf1Qu32PpJfBe/
/q2ywA4mpKcj+SYQNUZlTPmAK1BYBfKkW9L8HWUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQQ4/vB2GG0teO0svskukr2VDe7ZzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0VPUDd3ZGhodExYanRMTDdKTHBLOWxRM3UyYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB2Z8YnY4ygeXsmdIHvELmvLbAoOAMUGBfqE/Bq
fT1YIM/qT+1uyIfi/t0YlzAK6ba+TMqH++NOT5oVj27kW2fvQCUiDlTsiseRckdx
aq9hOdzOCtxQvUlDCXAadTnARDUsIARgoSeFfBwkSeuxLDkpqFHCU2TklzX7vtyK
TsxfmiBvoP0mDwEc7CxMXMrTFP0atuUEU78Dv88NZ+KJW9gHZ9sgnvvcekZiSsGH
fk8x2N4z1CQm84II4EeLXUyP/m0pIM+zYkIyFhW4s3OfpJnMAELTQdeuWEnDCfn2
wDLOtnK2IkGy9hbZR/EZkXZc14zQpi+x5PUsp8llhpSjN/jl
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:51 2025 by rpki-client