Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N82aFhnjv7Dobl5O5QL5kM7K3qk.roa
File: N82aFhnjv7Dobl5O5QL5kM7K3qk.roa (raw, json)
Hash identifier: 0Gxnsjv8d7UjAsCPq1H4DXRRRiIHoBbeSrIHLBOOIsQ=
Subject key identifier: 37:CD:9A:16:19:E3:BF:B0:E8:6E:5E:4E:E5:02:F9:90:CE:CA:DE:A9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08139056
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N82aFhnjv7Dobl5O5QL5kM7K3qk.roa
Signing time: Mon 06 Jun 2022 00:48:40 +0000
ROA not before: Mon 06 Jun 2022 00:48:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135499862 (0x8139056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 6 00:48:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37cd9a1619e3bfb0e86e5e4ee502f990cecadea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:1c:42:76:0f:ee:1f:6f:92:37:75:da:d1:
18:ce:a4:e9:d5:59:bb:77:27:5b:be:5f:32:7e:ea:
40:8e:cb:c5:fa:d7:fd:e9:3e:f2:d1:16:82:81:81:
89:2b:64:8d:22:9e:8b:ac:d1:06:cd:66:ca:4d:c7:
fc:d2:db:bf:b4:38:e9:e6:8e:c9:60:c1:26:bb:41:
b1:70:82:1a:4a:65:26:52:09:1d:cf:2e:09:d9:a2:
30:35:4d:a5:3d:35:56:1c:00:b2:1b:6c:47:d8:62:
67:6d:28:2c:94:a0:91:1f:63:e1:b5:05:a3:05:1b:
93:4d:d5:2d:d5:f0:74:7f:10:c2:65:16:30:2b:7e:
dd:21:01:39:d1:2c:37:b2:7e:48:fe:0a:55:59:26:
8f:27:b4:a6:db:ac:99:b4:32:ca:2b:1a:d8:cd:38:
36:f8:2a:c9:42:63:dc:4f:8b:da:d4:e7:00:eb:2a:
bb:8d:73:00:c0:f7:c5:1c:9d:f9:c1:f7:59:1e:55:
1a:50:e3:aa:be:9f:a6:04:3a:9d:67:83:06:ba:61:
12:35:ef:8e:07:54:6b:85:8e:ef:37:a2:f6:26:ab:
c7:49:78:a2:50:24:fe:97:cd:b5:6e:b8:fa:06:a0:
c2:ef:45:ad:dc:f1:cf:61:c3:ea:53:bd:08:0b:28:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:9A:16:19:E3:BF:B0:E8:6E:5E:4E:E5:02:F9:90:CE:CA:DE:A9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/N82aFhnjv7Dobl5O5QL5kM7K3qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4a:17:ee:09:0f:20:80:5f:30:0b:e6:93:b3:b8:ea:ad:29:
58:c3:bd:72:10:44:05:50:c0:81:53:4a:f6:70:ca:4b:ad:c1:
f6:19:b9:47:ff:74:ee:b3:d1:03:f0:34:da:64:3c:5b:b1:04:
f4:fe:b1:af:1a:34:7c:1b:25:e7:18:cf:ba:59:43:33:8a:eb:
45:28:3a:8c:7a:8e:11:30:d7:19:a1:69:87:5b:e7:8b:11:bc:
4d:93:05:0f:45:be:ab:d6:c0:fd:1c:db:4f:a4:d3:c8:1e:27:
bb:cc:db:30:43:cb:56:04:2a:83:54:e4:72:8a:01:4d:51:90:
ac:5f:b3:1a:0c:b6:08:b1:a2:24:16:9b:4b:61:d1:5b:43:9b:
45:1d:f2:f0:cb:8e:c3:d0:76:95:39:97:82:21:89:33:04:17:
4e:92:94:d9:57:ec:ad:e4:f7:87:9a:eb:9b:40:d1:e0:0a:2f:
77:00:af:dd:ec:cd:b8:b4:76:70:94:88:c6:12:41:fc:e2:92:
45:1a:b3:63:99:4d:29:f4:54:d4:14:e0:64:ad:72:b1:2d:06:
27:15:6c:c8:68:f3:8a:10:a7:38:cf:c9:7a:db:5a:68:49:48:
36:a3:70:de:7b:d2:26:e7:0f:53:ef:10:33:91:12:27:c2:b7:
87:93:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:36 2025 by rpki-client