Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IrJPTe2v69ErIOfIv8IA2uMRsrw.roa
File: IrJPTe2v69ErIOfIv8IA2uMRsrw.roa (raw, json)
Hash identifier: DQlUgkXJwi5BwD+kht9nTKaNAAGAPcU4UaPE1BrNEKw=
Subject key identifier: 22:B2:4F:4D:ED:AF:EB:D1:2B:20:E7:C8:BF:C2:00:DA:E3:11:B2:BC
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0806C1B3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IrJPTe2v69ErIOfIv8IA2uMRsrw.roa
Signing time: Sun 05 Jun 2022 03:30:20 +0000
ROA not before: Sun 05 Jun 2022 03:30:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134660531 (0x806c1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 5 03:30:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22b24f4dedafebd12b20e7c8bfc200dae311b2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:7c:31:39:36:7a:41:da:f3:70:c3:c4:1f:
ed:c4:9b:b6:8e:20:db:0c:f9:44:1f:14:38:8c:4a:
68:e5:5e:25:63:f7:4f:ac:f1:7b:10:42:b3:43:76:
c7:bc:46:52:0c:1e:65:2f:54:08:1c:ea:71:ca:0b:
d8:ba:53:83:c4:b4:cd:3c:91:53:3d:83:42:e4:aa:
d6:bb:56:18:68:3e:19:29:dc:35:27:0e:76:83:98:
bc:ce:c5:50:35:7c:d1:bd:70:25:82:6e:3a:dc:2c:
fc:46:5a:b3:c0:07:e3:62:5c:e1:62:33:3c:b4:93:
32:d0:6e:23:3b:d0:ba:cf:ca:d9:73:72:9e:41:75:
b7:0f:db:39:b0:c2:01:68:f5:12:eb:fb:a4:8a:40:
9b:6c:89:f5:ee:c5:27:9e:21:24:83:86:7a:f4:53:
10:25:fd:4b:0e:00:08:c8:8e:5e:a6:97:79:b3:95:
7d:64:6b:63:7f:73:25:16:a6:c9:76:06:4f:95:f6:
c4:d5:00:06:af:93:16:8a:91:5b:c0:bc:7b:28:cb:
1c:60:88:b4:7b:7b:93:e0:f9:36:46:20:1d:1e:27:
74:00:38:02:07:cf:36:0b:d3:c4:60:ec:83:07:99:
a7:71:b6:9d:47:a9:b1:38:30:ab:c6:01:37:b3:00:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:4F:4D:ED:AF:EB:D1:2B:20:E7:C8:BF:C2:00:DA:E3:11:B2:BC
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IrJPTe2v69ErIOfIv8IA2uMRsrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a8:51:d2:ea:9d:8c:54:65:91:f4:e5:18:c1:e5:fc:f6:af:
8b:5a:8a:4a:91:bb:35:9c:ae:28:6c:e4:8f:a2:fb:a9:57:46:
9d:ac:aa:44:00:df:a1:d2:c3:a6:61:f4:9e:99:3a:f0:f4:af:
44:a8:ca:a4:03:18:29:a2:d5:94:2c:50:9b:26:5d:8a:bc:06:
99:fa:8e:b6:96:52:03:13:da:08:39:cd:90:73:9d:08:a2:34:
b4:20:7f:43:57:05:4d:9a:6f:fc:a8:d4:33:2e:8b:27:59:b2:
f7:59:18:56:1e:ee:f3:0a:cc:5d:1f:e4:65:22:a2:db:98:73:
d6:70:03:3e:ec:a8:89:8b:f0:a5:f7:17:b5:9d:28:78:cf:bc:
a8:8a:bf:c8:21:d6:5d:3c:ba:05:a6:3a:58:83:71:dc:fc:fb:
ce:22:a7:76:4e:0e:07:07:93:de:83:8c:95:6f:dd:52:8f:de:
c7:5b:e1:42:63:27:67:d0:53:35:ac:8a:1f:f4:09:51:c4:50:
6e:d3:82:f3:1f:b5:25:27:2a:ab:ce:15:73:bb:0e:5a:7e:dd:
37:0d:7a:ec:87:26:5f:30:e4:73:9f:e8:1d:ec:c8:c1:d1:80:
88:cb:1b:8a:fb:5e:e1:c4:5e:27:c2:10:4c:71:83:18:10:0c:
76:87:50:9a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECAbBszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
NTAzMzAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJiMjRmNGRlZGFm
ZWJkMTJiMjBlN2M4YmZjMjAwZGFlMzExYjJiYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkgfDE5NnpB2vNww8Qf7cSbto4g2wz5RB8UOIxKaOVeJWP3
T6zxexBCs0N2x7xGUgweZS9UCBzqccoL2LpTg8S0zTyRUz2DQuSq1rtWGGg+GSnc
NScOdoOYvM7FUDV80b1wJYJuOtws/EZas8AH42Jc4WIzPLSTMtBuIzvQus/K2XNy
nkF1tw/bObDCAWj1Euv7pIpAm2yJ9e7FJ54hJIOGevRTECX9Sw4ACMiOXqaXebOV
fWRrY39zJRamyXYGT5X2xNUABq+TFoqRW8C8eyjLHGCItHt7k+D5NkYgHR4ndAA4
AgfPNgvTxGDsgweZp3G2nUepsTgwq8YBN7MAW+ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQisk9N7a/r0Ssg58i/wgDa4xGyvDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0lySlBUZTJ2NjlFcklPZkl2OElBMnVNUnNydy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAPKhR0uqdjFRlkfTlGMHl/Pavi1qKSpG7NZyuKGzkj6L7qVdGnayqRADfodLD
pmH0npk68PSvRKjKpAMYKaLVlCxQmyZdirwGmfqOtpZSAxPaCDnNkHOdCKI0tCB/
Q1cFTZpv/KjUMy6LJ1my91kYVh7u8wrMXR/kZSKi25hz1nADPuyoiYvwpfcXtZ0o
eM+8qIq/yCHWXTy6BaY6WINx3Pz7ziKndk4OBweT3oOMlW/dUo/ex1vhQmMnZ9BT
NayKH/QJUcRQbtOC8x+1JScqq84Vc7sOWn7dNw167IcmXzDkc5/oHezIwdGAiMsb
ivte4cReJ8IQTHGDGBAMdodQmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:04 2025 by rpki-client