Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J3y9C43NkvgqfceCp8J1Ucqjx0A.roa
File: J3y9C43NkvgqfceCp8J1Ucqjx0A.roa (raw, json)
Hash identifier: 9y0jDuWPuj0o+nb2DyxhjIJvPmNOFD1vPozVCAQPd/0=
Subject key identifier: 27:7C:BD:0B:8D:CD:92:F8:2A:7D:C7:82:A7:C2:75:51:CA:A3:C7:40
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03BF5983
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J3y9C43NkvgqfceCp8J1Ucqjx0A.roa
Signing time: Mon 31 Jan 2022 05:25:37 +0000
ROA not before: Mon 31 Jan 2022 05:25:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62871939 (0x3bf5983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 31 05:25:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=277cbd0b8dcd92f82a7dc782a7c27551caa3c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:a4:4c:22:52:e1:fb:0a:f5:67:95:7f:97:
b1:7e:2e:c6:5a:34:83:ea:71:85:b9:85:b2:a2:ef:
65:f4:fb:5a:8f:69:0f:0f:0c:7d:9b:4b:80:66:86:
1c:dd:ca:98:17:07:a0:e5:47:89:e7:72:ca:5b:cb:
80:1c:25:54:26:df:5f:97:56:05:e8:69:1c:cc:c5:
d4:ce:d1:ea:fe:05:b0:53:0f:10:bd:13:42:ff:4e:
25:9c:67:6b:00:c4:a1:6e:09:32:34:4e:cb:a0:03:
4a:fa:4d:22:0b:3d:f2:7d:5c:f4:0c:ff:0f:b2:9d:
cd:c1:c2:28:aa:0d:22:64:17:24:af:3e:01:60:21:
2a:a2:5d:88:6b:ca:65:29:48:06:c5:a0:06:ee:12:
fe:86:18:c2:da:24:c9:6e:ce:32:1f:5f:c2:c0:16:
59:3d:04:f9:04:0c:74:17:09:85:00:34:ab:67:0e:
75:bc:8f:86:88:ef:2e:01:b1:5c:21:a6:4b:31:a3:
b3:c6:73:d1:02:1f:1e:89:bd:1e:61:ac:b6:3f:32:
15:db:f0:a2:58:1e:27:38:50:95:52:35:f7:f6:6d:
2f:9b:ee:e9:f3:d8:20:73:99:e4:4b:22:73:0b:b4:
32:dd:c8:3a:53:b8:ff:5f:51:88:fd:45:15:95:74:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:BD:0B:8D:CD:92:F8:2A:7D:C7:82:A7:C2:75:51:CA:A3:C7:40
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J3y9C43NkvgqfceCp8J1Ucqjx0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
87:2d:d0:20:24:8c:47:25:47:26:7f:41:ef:35:5a:18:b9:bd:
15:9d:37:86:3e:51:d5:30:10:f6:5a:75:30:41:3a:93:1d:ff:
e0:5a:48:99:c5:38:ea:c1:28:14:a1:bd:9b:ee:18:50:50:46:
ed:10:3b:25:6b:d1:f0:1e:0d:2b:2b:f6:02:63:94:1c:7c:fd:
fa:9d:cf:a5:5c:4f:7c:fb:31:bf:3e:76:df:25:79:f0:58:92:
23:8f:47:5a:e7:dc:65:b9:de:26:4f:88:59:3f:74:45:d5:93:
75:fb:e1:06:d6:00:03:e8:29:e1:7e:69:15:62:57:e8:51:3e:
47:59:ed:06:49:47:3e:99:28:d4:46:a5:d1:3f:81:0b:ff:cf:
d3:11:67:5c:78:3f:97:ca:47:0c:97:29:d2:41:b2:f2:43:97:
31:49:f1:62:2c:61:6b:ad:3f:c4:76:b6:30:98:56:a8:86:2c:
59:28:8e:78:98:d8:22:89:94:4e:26:62:83:12:b6:90:48:7e:
36:e6:2d:29:14:aa:29:c1:cf:97:e2:e5:0c:4b:93:ec:20:5e:
2d:22:29:7b:97:e5:b0:d3:e8:90:d9:d3:8a:fb:59:01:72:8d:
12:7a:20:66:26:0e:49:ce:93:45:b4:0a:30:7a:64:02:47:4d:
30:fb:55:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA79ZgzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDEz
MTA1MjUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjc3Y2JkMGI4ZGNk
OTJmODJhN2RjNzgyYTdjMjc1NTFjYWEzYzc0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJw1pEwiUuH7CvVnlX+XsX4uxlo0g+pxhbmFsqLvZfT7Wo9p
Dw8MfZtLgGaGHN3KmBcHoOVHiedyylvLgBwlVCbfX5dWBehpHMzF1M7R6v4FsFMP
EL0TQv9OJZxnawDEoW4JMjROy6ADSvpNIgs98n1c9Az/D7KdzcHCKKoNImQXJK8+
AWAhKqJdiGvKZSlIBsWgBu4S/oYYwtokyW7OMh9fwsAWWT0E+QQMdBcJhQA0q2cO
dbyPhojvLgGxXCGmSzGjs8Zz0QIfHom9HmGstj8yFdvwolgeJzhQlVI19/ZtL5vu
6fPYIHOZ5Esicwu0Mt3IOlO4/19RiP1FFZV0LOcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQnfL0Ljc2S+Cp9x4KnwnVRyqPHQDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0ozeTlDNDNOa3ZncWZjZUNwOEoxVWNxangwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCHLdAgJIxHJUcmf0HvNVoYub0VnTeGPlHVMBD2
WnUwQTqTHf/gWkiZxTjqwSgUob2b7hhQUEbtEDsla9HwHg0rK/YCY5QcfP36nc+l
XE98+zG/PnbfJXnwWJIjj0da59xlud4mT4hZP3RF1ZN1++EG1gAD6CnhfmkVYlfo
UT5HWe0GSUc+mSjURqXRP4EL/8/TEWdceD+XykcMlynSQbLyQ5cxSfFiLGFrrT/E
drYwmFaohixZKI54mNgiiZROJmKDEraQSH425i0pFKopwc+X4uUMS5PsIF4tIil7
l+Ww0+iQ2dOK+1kBco0SeiBmJg5JzpNFtAowemQCR00w+1XH
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:51 2025 by rpki-client