Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KQUAZVMQtQ10qlsYK4b1rT2fEMg.roa
File: KQUAZVMQtQ10qlsYK4b1rT2fEMg.roa (raw, json)
Hash identifier: OHPmVfmZjXE6UhxW0zRvmiLK4u/3TKFZtG2ngMd21Kw=
Subject key identifier: 29:05:00:65:53:10:B5:0D:74:AA:5B:18:2B:86:F5:AD:3D:9F:10:C8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 092FDD75
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KQUAZVMQtQ10qlsYK4b1rT2fEMg.roa
Signing time: Tue 28 Jun 2022 02:51:20 +0000
ROA not before: Tue 28 Jun 2022 02:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154131829 (0x92fdd75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 28 02:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=290500655310b50d74aa5b182b86f5ad3d9f10c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:9f:22:c9:31:33:5d:57:0c:3a:34:f8:18:
8a:0a:1f:a7:4b:53:09:1d:88:7c:ad:8f:9c:76:97:
3c:c8:ba:18:1f:c5:f3:0a:aa:92:07:f1:61:ce:40:
1e:a8:a3:4f:24:da:97:fc:16:89:34:12:cf:48:ac:
78:01:46:8d:c9:3e:6e:01:c7:54:57:8f:e7:b2:14:
6e:9d:9f:f5:a5:00:3d:65:91:61:6a:09:88:eb:65:
12:f8:0c:d1:93:fb:76:7b:d7:9e:23:aa:43:d4:4a:
b1:88:a8:f9:f4:7e:b5:f3:d4:87:d3:4e:3a:99:2a:
75:1f:06:ca:4d:21:5a:bb:25:6e:ca:f0:76:6d:29:
f2:e0:c4:20:07:83:3d:7e:60:39:44:8c:ec:cd:45:
b3:bf:55:4e:2e:c5:53:c9:fa:ac:94:b2:de:19:d3:
51:96:7b:2b:24:fb:f9:97:98:b0:ee:0b:ef:28:05:
d7:75:e7:d8:0e:b1:ac:e6:bf:da:00:8f:60:d8:06:
f3:0c:8e:13:24:be:80:74:89:27:97:e5:47:34:be:
a7:30:94:fd:c6:2e:b9:9c:4a:56:6a:a6:42:85:99:
72:9b:36:7a:c0:46:0a:71:79:53:98:48:b4:0f:f8:
21:f9:b0:27:25:0c:28:b8:75:ae:47:9b:ed:b1:f0:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:00:65:53:10:B5:0D:74:AA:5B:18:2B:86:F5:AD:3D:9F:10:C8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KQUAZVMQtQ10qlsYK4b1rT2fEMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:31:73:bc:3a:86:a3:06:01:3a:e6:e9:f1:a4:9c:b1:6f:e7:
a0:54:45:79:af:26:c4:40:8c:a2:9c:46:a5:1a:26:a6:02:37:
d5:ca:6b:d3:37:15:29:0b:df:aa:82:35:39:d1:d8:b5:e2:61:
1f:81:70:77:b3:29:35:ca:65:a5:57:df:a0:dd:32:cc:cc:39:
c8:ac:14:a1:05:e8:83:36:c2:3c:97:ab:c0:f6:ac:39:d7:57:
34:8a:dc:44:2f:0d:dd:9f:4b:32:79:e5:c4:80:98:6b:6c:c8:
76:6a:19:92:4b:88:91:ca:f0:76:72:07:4c:07:2c:ae:d9:9d:
84:db:8a:a8:bb:1f:c1:c6:09:4a:84:4a:bd:12:76:5a:0c:8c:
f7:fd:49:b6:5c:db:5e:dd:b3:8a:3b:de:b0:43:fb:61:65:4f:
54:c5:00:c4:d6:25:cc:e9:84:b6:e6:7d:81:4a:87:d1:ae:23:
ff:c1:58:16:26:8f:b1:ba:ee:f5:bf:52:16:06:0f:a6:c7:5c:
72:38:78:15:34:37:e3:73:c9:48:2a:fc:d0:33:f4:3b:6b:21:
6c:68:66:23:b1:4a:c7:e2:9f:89:10:a9:9b:c6:2f:2b:86:ba:
bf:eb:c9:19:6a:e2:f2:c2:79:7c:66:87:89:d2:d7:31:77:fe:
4d:7a:ec:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECS/ddTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYy
ODAyNTEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjkwNTAwNjU1MzEw
YjUwZDc0YWE1YjE4MmI4NmY1YWQzZDlmMTBjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgUnyLJMTNdVww6NPgYigofp0tTCR2IfK2PnHaXPMi6GB/F
8wqqkgfxYc5AHqijTyTal/wWiTQSz0iseAFGjck+bgHHVFeP57IUbp2f9aUAPWWR
YWoJiOtlEvgM0ZP7dnvXniOqQ9RKsYio+fR+tfPUh9NOOpkqdR8Gyk0hWrslbsrw
dm0p8uDEIAeDPX5gOUSM7M1Fs79VTi7FU8n6rJSy3hnTUZZ7KyT7+ZeYsO4L7ygF
13Xn2A6xrOa/2gCPYNgG8wyOEyS+gHSJJ5flRzS+pzCU/cYuuZxKVmqmQoWZcps2
esBGCnF5U5hItA/4IfmwJyUMKLh1rkeb7bHwcdUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQpBQBlUxC1DXSqWxgrhvWtPZ8QyDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0tRVUFaVk1RdFExMHFsc1lLNGIxclQyZkVNZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEAijFzvDqGowYBOubp8aScsW/noFRFea8mxECMopxGpRompgI31cpr0zcVKQvf
qoI1OdHYteJhH4Fwd7MpNcplpVffoN0yzMw5yKwUoQXogzbCPJerwPasOddXNIrc
RC8N3Z9LMnnlxICYa2zIdmoZkkuIkcrwdnIHTAcsrtmdhNuKqLsfwcYJSoRKvRJ2
WgyM9/1JtlzbXt2zijvesEP7YWVPVMUAxNYlzOmEtuZ9gUqH0a4j/8FYFiaPsbru
9b9SFgYPpsdccjh4FTQ343PJSCr80DP0O2shbGhmI7FKx+KfiRCpm8YvK4a6v+vJ
GWri8sJ5fGaHidLXMXf+TXrspw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:53 2025 by rpki-client