Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GkEC2h2AvtnOKUTmNua8Fop5o_Q.roa
File: GkEC2h2AvtnOKUTmNua8Fop5o_Q.roa (raw, json)
Hash identifier: Hc7xJ9F7OxI5uBGnLK7dTluLsJ13P5Oz7U2blLxrtLw=
Subject key identifier: 1A:41:02:DA:1D:80:BE:D9:CE:29:44:E6:36:E6:BC:16:8A:79:A3:F4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06DAB39A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GkEC2h2AvtnOKUTmNua8Fop5o_Q.roa
Signing time: Fri 13 May 2022 01:04:02 +0000
ROA not before: Fri 13 May 2022 01:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114996122 (0x6dab39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 13 01:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a4102da1d80bed9ce2944e636e6bc168a79a3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:8a:58:f7:cd:d9:9b:10:e4:f7:c9:3a:44:
5a:33:c1:9a:8a:52:85:0a:18:90:f2:b5:0c:9f:7e:
82:a6:eb:13:ad:f6:81:75:3a:75:6e:a5:7d:0d:e5:
24:58:fd:24:4d:87:79:f1:47:5a:35:9e:a3:a8:5d:
bc:2d:54:f0:80:7b:97:69:7e:2e:b9:55:80:3f:9b:
23:fb:c6:e9:97:c5:10:71:ec:5a:4f:1e:6f:ea:91:
02:5e:31:d1:12:37:7a:74:f6:0a:be:4a:70:69:d4:
7c:cf:90:8b:36:08:07:ba:60:d9:b1:b8:78:2a:f3:
2c:0a:3f:00:a0:e5:64:f6:0e:83:16:97:61:ea:91:
1e:f6:c6:66:4c:2d:92:1a:19:98:7e:e6:92:87:11:
d8:d0:5d:f0:f8:3c:32:2b:3a:f7:db:89:7f:84:27:
17:1c:05:78:5f:63:c5:d4:72:51:7c:34:d5:8d:db:
df:1c:ee:a3:57:e3:13:82:26:03:96:46:a2:4e:b0:
3e:ad:42:92:7d:f2:a8:91:a3:7b:a8:7e:22:a1:9a:
ad:a7:ba:15:1f:2a:5f:63:8e:01:89:06:47:2f:b0:
08:f3:9d:61:09:14:36:d8:bf:6a:95:f3:c8:61:ee:
56:36:24:66:82:61:9c:b9:fe:d6:ee:9f:d1:cb:52:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:02:DA:1D:80:BE:D9:CE:29:44:E6:36:E6:BC:16:8A:79:A3:F4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GkEC2h2AvtnOKUTmNua8Fop5o_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2b:c5:74:01:cb:10:13:a1:b0:68:a7:3e:bf:d5:1e:00:a5:
ca:72:c1:c2:46:62:7f:ce:00:7f:49:95:4a:4e:3c:9e:39:57:
45:a0:7d:85:56:37:0d:9d:4b:6e:7f:77:08:48:a8:a5:21:84:
df:58:90:eb:71:50:13:b5:4c:5d:0b:07:81:cb:ef:be:82:58:
25:e1:58:c4:b1:e9:22:0c:d6:bb:67:a7:28:5c:db:af:21:2e:
be:30:4c:8b:b5:58:4c:22:f1:ee:ac:76:80:12:8f:e8:d1:43:
df:68:4c:7b:c2:27:10:49:80:8a:66:a7:21:b2:d9:bb:d1:b3:
48:93:01:46:56:09:81:2a:bb:51:42:07:92:c1:fe:c4:fc:25:
90:39:58:82:78:b8:d0:76:3c:cc:01:ba:b4:65:7e:95:d0:4c:
9d:a7:e3:9c:e5:ba:e7:c7:81:e3:ac:50:fb:16:65:60:8a:08:
a0:fc:93:cc:85:e7:66:79:99:66:c3:55:15:f6:c0:18:21:6a:
cb:0e:62:f5:52:d1:82:97:39:a7:1f:a7:93:c4:13:c1:f8:b2:
46:d9:94:3b:ca:3e:f1:48:60:2f:4d:72:87:2b:c0:64:3e:b3:
a2:54:0f:7e:46:4c:eb:9e:d0:44:ec:d0:93:b3:7c:26:1d:b1:
65:98:ca:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBtqzmjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
MzAxMDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWE0MTAyZGExZDgw
YmVkOWNlMjk0NGU2MzZlNmJjMTY4YTc5YTNmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANO1ilj3zdmbEOT3yTpEWjPBmopShQoYkPK1DJ9+gqbrE632
gXU6dW6lfQ3lJFj9JE2HefFHWjWeo6hdvC1U8IB7l2l+LrlVgD+bI/vG6ZfFEHHs
Wk8eb+qRAl4x0RI3enT2Cr5KcGnUfM+QizYIB7pg2bG4eCrzLAo/AKDlZPYOgxaX
YeqRHvbGZkwtkhoZmH7mkocR2NBd8Pg8Mis699uJf4QnFxwFeF9jxdRyUXw01Y3b
3xzuo1fjE4ImA5ZGok6wPq1Ckn3yqJGje6h+IqGarae6FR8qX2OOAYkGRy+wCPOd
YQkUNti/apXzyGHuVjYkZoJhnLn+1u6f0ctSlJkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQaQQLaHYC+2c4pROY25rwWinmj9DAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0drRUMyaDJBdnRuT0tVVG1OdWE4Rm9wNW9fUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAjivFdAHLEBOhsGinPr/VHgClynLBwkZif84Af0mVSk48njlXRaB9hVY3DZ1L
bn93CEiopSGE31iQ63FQE7VMXQsHgcvvvoJYJeFYxLHpIgzWu2enKFzbryEuvjBM
i7VYTCLx7qx2gBKP6NFD32hMe8InEEmAimanIbLZu9GzSJMBRlYJgSq7UUIHksH+
xPwlkDlYgni40HY8zAG6tGV+ldBMnafjnOW658eB46xQ+xZlYIoIoPyTzIXnZnmZ
ZsNVFfbAGCFqyw5i9VLRgpc5px+nk8QTwfiyRtmUO8o+8UhgL01yhyvAZD6zolQP
fkZM657QROzQk7N8Jh2xZZjKkg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:54 2025 by rpki-client