Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/M3bb17gfv11O9RGE-j-H7RStFdk.roa
File: M3bb17gfv11O9RGE-j-H7RStFdk.roa (raw, json)
Hash identifier: Doj/e5Yi0LXh+3GCUtBcJ8eW+ibmYIZPHPTsio//QKU=
Subject key identifier: 33:76:DB:D7:B8:1F:BF:5D:4E:F5:11:84:FA:3F:87:ED:14:AD:15:D9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0900DEB6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/M3bb17gfv11O9RGE-j-H7RStFdk.roa
Signing time: Fri 24 Jun 2022 04:56:57 +0000
ROA not before: Fri 24 Jun 2022 04:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151051958 (0x900deb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 24 04:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3376dbd7b81fbf5d4ef51184fa3f87ed14ad15d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:9c:3f:47:85:83:8c:77:38:6d:cd:9a:ab:
1a:0d:cb:f9:fa:b7:f1:16:f5:a7:e6:f0:17:18:4c:
1f:ac:c5:4c:1b:7c:96:03:15:49:be:22:41:94:cd:
96:90:49:8b:df:44:ef:11:f0:7e:70:dc:ff:f9:02:
36:f1:08:82:98:8b:3e:94:43:8f:90:20:58:b1:68:
be:ef:82:49:90:00:61:9f:51:f2:ca:26:60:db:b9:
4a:68:de:c9:7c:e6:44:1c:e7:25:53:e3:55:a6:06:
79:7a:10:2b:31:0a:96:22:5f:f8:4d:db:3c:d0:24:
a7:5f:ab:94:34:a0:a8:61:4a:88:15:99:55:45:8a:
90:05:f6:42:f8:65:6a:94:2b:bc:a9:57:05:3b:92:
e5:56:d8:94:55:54:a6:de:21:70:51:05:e1:1c:e6:
48:ba:0a:1f:e0:07:3d:10:ec:34:18:8d:a9:99:7d:
be:40:e7:69:d9:a1:01:b4:2a:de:39:7c:a8:88:7f:
f4:bc:7f:80:36:81:20:c8:f6:21:99:0e:8b:db:3f:
9a:ff:1f:f7:2b:cc:b1:45:b3:df:90:0b:fc:ce:3e:
e7:84:6c:b4:62:6e:12:1f:38:b0:65:b6:28:09:f2:
65:3a:6b:d8:6e:ee:cb:71:74:ae:c7:04:69:36:0c:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:DB:D7:B8:1F:BF:5D:4E:F5:11:84:FA:3F:87:ED:14:AD:15:D9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/M3bb17gfv11O9RGE-j-H7RStFdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:eb:51:58:fa:2d:b3:8f:b2:3e:72:c5:27:d3:ff:3b:3a:
8d:13:13:a2:e8:d7:b5:6a:96:a5:63:1f:09:9f:9a:e8:01:7c:
90:b2:50:a6:9d:ab:ca:22:dc:9d:71:8d:67:e8:11:e3:66:dc:
d2:a6:91:4f:ac:bc:9d:37:86:34:a6:42:a0:44:8c:55:6e:ba:
52:a5:4d:bc:46:09:09:e6:c6:90:27:1d:ca:bd:45:4a:44:e9:
2a:ca:c8:4b:9e:59:82:8a:fd:12:ea:b3:08:70:55:e2:9f:23:
8f:f6:7d:ee:c7:85:12:70:af:6c:82:ba:c4:13:c4:76:1c:9e:
9b:ef:ea:44:b7:4e:74:9a:97:51:4c:9e:92:71:f2:b1:51:7c:
45:e0:73:69:98:82:53:cf:bf:34:3b:13:b1:b1:d9:6f:75:de:
de:cb:c4:fe:37:bf:01:f3:c3:cb:65:eb:72:ef:6e:b6:1a:3a:
05:3b:35:9a:fc:29:45:cd:3c:f8:29:a7:a1:cb:81:63:5f:7a:
be:c4:e0:ae:32:5a:51:33:1a:b8:8b:8d:00:bb:58:5c:95:49:
4d:fa:0e:41:cb:ad:9f:92:c7:d5:d9:f9:98:68:16:b5:ee:14:
f5:0e:e4:02:3f:c6:3e:3b:a4:a6:b6:66:42:65:99:c8:96:73:
9f:a3:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:40 2025 by rpki-client