Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MC468yiq78Wsla-EpRW9NacZ2SE.roa
File: MC468yiq78Wsla-EpRW9NacZ2SE.roa (raw, json)
Hash identifier: kQNQsqtyNmFk2ShxyDsmT4QaLKorqEIhBsHHAwpCTQY=
Subject key identifier: 30:2E:3A:F3:28:AA:EF:C5:AC:95:AF:84:A5:15:BD:35:A7:19:D9:21
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D68A7AB669BAC93767C919E086C6F850
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MC468yiq78Wsla-EpRW9NacZ2SE.roa
Signing time: Thu 07 Jul 2022 02:43:28 +0000
ROA not before: Thu 07 Jul 2022 02:43:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:8a:7a:b6:69:ba:c9:37:67:c9:19:e0:86:c6:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 7 02:43:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=302e3af328aaefc5ac95af84a515bd35a719d921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:e0:70:81:fd:42:4f:49:e3:f9:c4:eb:e6:
fb:82:d4:e3:80:46:2b:2a:83:11:15:5e:1a:03:cc:
8a:f4:2b:cc:5e:99:45:03:d6:1b:28:0c:ae:b6:5a:
b2:d6:26:02:a4:56:26:71:7e:bf:14:e2:73:99:70:
fe:f5:89:44:46:3c:69:46:bd:09:b3:f3:61:73:37:
e3:c1:11:94:ca:f6:37:d4:79:5e:46:92:de:af:be:
7e:b4:07:de:03:cb:3e:f0:39:e0:b6:d6:0a:0a:21:
df:63:99:0f:76:a2:4f:11:fe:db:4d:1b:14:1d:88:
ce:4e:25:dd:9e:9f:73:3d:df:1f:de:bc:a5:04:fc:
07:b9:63:a8:44:0d:6b:cd:9f:8b:6c:ef:53:c5:c8:
c7:d4:22:64:19:9e:95:06:6c:2b:97:9c:28:18:b7:
02:65:a4:e3:96:0f:01:61:6c:f7:26:e9:87:a9:ba:
68:14:de:a8:92:67:a9:54:0e:46:d0:0d:9b:17:8c:
02:4e:3e:ad:93:19:99:2f:42:0d:8d:f5:4b:f1:48:
68:6b:aa:86:c8:cb:3f:ce:c8:5a:8f:9b:48:51:7b:
60:35:1e:79:6e:83:a1:14:fe:b5:ff:37:51:d6:fa:
11:df:cd:c3:72:6f:87:a3:22:2a:8f:30:85:e3:bd:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:3A:F3:28:AA:EF:C5:AC:95:AF:84:A5:15:BD:35:A7:19:D9:21
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MC468yiq78Wsla-EpRW9NacZ2SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a8:47:7f:3c:b4:b9:11:c3:e5:ba:2b:28:5b:a4:24:6f:d9:
ae:cc:ed:62:36:66:69:0b:a9:60:08:59:f6:73:b4:01:52:7f:
71:2f:b0:ff:f7:34:91:fb:f5:ca:63:e7:a7:25:27:41:69:94:
08:82:72:2b:6f:e3:2d:cc:ab:04:7a:e3:72:89:56:bd:73:18:
47:b8:44:01:72:7d:15:c2:be:0d:42:b9:f6:3f:6f:80:d7:48:
b9:28:02:8f:d5:c1:9e:70:8b:34:af:8a:a8:41:e6:b1:86:39:
5a:f6:82:ff:e2:75:8b:8a:c7:e8:b2:b2:a8:23:dd:78:a8:bc:
2e:e3:11:df:69:3b:4a:2e:67:8e:ed:06:9e:a8:05:09:1a:c8:
bd:93:59:f0:4d:26:78:cf:17:19:bf:db:61:23:5f:1b:30:1d:
d8:14:e9:3e:90:bd:d4:b7:74:20:a5:63:d3:64:b6:98:38:80:
9d:bf:0e:30:c0:09:12:58:13:71:39:19:b9:d5:21:c2:2c:cd:
a9:e7:b9:4b:9b:11:9f:8a:9a:a5:7d:3d:0e:26:f8:ec:5d:3c:
4e:b4:60:68:e5:c4:0e:c5:89:6b:c5:06:83:d9:a6:b2:6a:cc:
15:84:34:bb:e2:25:77:5c:07:fb:ca:bb:5c:e8:c1:e8:d8:1f:
26:bc:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:27 2025 by rpki-client