Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GEG6MqSnWNHyRlonahiHYQv0B6c.roa
File: GEG6MqSnWNHyRlonahiHYQv0B6c.roa (raw, json)
Hash identifier: ydF+4sOowYyiCTNdFAEMaoecFP5/cS0NVpciwOyVi8E=
Subject key identifier: 18:41:BA:32:A4:A7:58:D1:F2:46:5A:27:6A:18:87:61:0B:F4:07:A7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E100FEB7D7E6041082298406422CC1DC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GEG6MqSnWNHyRlonahiHYQv0B6c.roa
Signing time: Sat 09 Jul 2022 03:29:07 +0000
ROA not before: Sat 09 Jul 2022 03:29:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e1:00:fe:b7:d7:e6:04:10:82:29:84:06:42:2c:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 9 03:29:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1841ba32a4a758d1f2465a276a1887610bf407a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:a6:0b:75:a2:92:21:d4:36:01:a8:83:a9:
7d:de:8d:12:c2:7e:32:43:fc:78:4f:b2:a4:54:6b:
0f:c9:f3:4b:3c:3a:d5:ae:35:11:2c:62:d6:21:09:
44:94:cb:ae:81:ea:8c:50:16:03:a3:76:cd:22:25:
3a:99:5a:40:23:80:60:c7:be:e8:d3:35:21:17:e7:
b4:0b:d4:39:e0:7e:b0:50:71:a5:59:6f:13:13:bc:
83:34:f8:d9:be:b6:d2:5d:25:62:fd:a6:22:c9:4c:
28:c2:ce:65:e7:d4:ee:27:fb:c5:3c:a3:d6:13:6e:
57:1a:a9:2a:51:64:42:70:13:0a:42:6a:c0:29:7b:
c3:cf:90:2f:5e:61:fe:bd:42:20:cc:e9:4f:d9:b5:
f2:ae:08:68:87:04:4c:35:36:0f:5c:ed:5b:c4:d0:
86:b1:8b:a3:53:f0:97:78:86:cb:b7:cb:ff:91:84:
3e:9c:11:0c:07:83:f3:5f:76:84:0e:51:89:3e:b9:
e1:99:18:f1:f0:09:4b:60:b7:c4:0d:21:d4:01:38:
19:8e:42:a0:f0:4a:26:94:7d:30:39:85:c4:03:95:
d4:0e:7f:3b:1c:0d:af:95:a7:5f:63:f9:02:2f:11:
53:56:aa:4f:fd:62:40:4e:17:8b:1c:2a:4a:b3:19:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:BA:32:A4:A7:58:D1:F2:46:5A:27:6A:18:87:61:0B:F4:07:A7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GEG6MqSnWNHyRlonahiHYQv0B6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:26:9d:e7:de:ca:d4:d3:2e:b4:fd:74:05:74:12:68:b5:24:
c3:84:73:c6:13:7e:22:21:1f:43:c4:9b:bf:c3:01:1a:f8:08:
94:65:da:09:57:31:e1:c9:54:b1:d8:a6:42:94:b8:df:7c:27:
40:a4:5e:95:4c:28:79:ac:d4:33:3e:a0:5c:82:b4:fe:45:60:
c9:52:fd:ce:e5:c7:ac:fa:4d:60:1b:fe:76:c3:23:a4:9e:75:
bf:cc:76:ca:03:71:a5:4e:4d:6d:06:2d:00:d2:fc:4a:78:33:
2e:16:03:ab:d2:17:4e:a8:9f:54:af:f5:9b:dd:30:d8:3e:6f:
44:69:93:f1:3c:df:a0:01:38:22:8b:ea:7e:ae:14:cd:0a:13:
29:12:17:78:b4:3a:7e:01:8f:4e:10:ad:2e:0b:53:2c:64:92:
d9:ef:b6:34:cf:e9:1e:37:ac:a5:b7:25:3a:7f:ef:cf:8a:27:
4e:18:eb:c4:00:13:31:dc:f6:e6:1c:ab:4a:07:4c:1e:8d:f5:
af:6a:30:0b:6d:b1:32:02:c9:36:87:32:95:f7:cf:28:54:a1:
f0:a4:77:e7:40:a7:17:2b:21:e1:03:9d:0c:36:4c:a4:f9:97:
8e:63:56:fa:65:c1:64:8a:ec:ca:2f:f2:f4:b6:0c:c6:b4:c4:
e1:c7:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:47 2025 by rpki-client