Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OOGjGLnw4G5ro6dGMSodYw4Q2KE.roa
File: OOGjGLnw4G5ro6dGMSodYw4Q2KE.roa (raw, json)
Hash identifier: tnCvaUvmymhGe6vvc2Gq0/WUc8C2z7OaSILEKEVDrMw=
Subject key identifier: 38:E1:A3:18:B9:F0:E0:6E:6B:A3:A7:46:31:2A:1D:63:0E:10:D8:A1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0862D01E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OOGjGLnw4G5ro6dGMSodYw4Q2KE.roa
Signing time: Sun 12 Jun 2022 04:55:02 +0000
ROA not before: Sun 12 Jun 2022 04:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140693534 (0x862d01e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 12 04:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38e1a318b9f0e06e6ba3a746312a1d630e10d8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:0c:0c:1f:3b:1f:31:a6:e1:ae:51:d3:cc:
e6:7c:ff:d3:43:d1:9d:47:b0:9d:42:f3:7c:5f:53:
88:45:ec:d7:bf:4c:1c:e5:db:91:c0:c3:db:3b:76:
89:a3:d1:41:c0:a8:69:fb:81:d4:e0:e3:ca:39:a4:
77:84:f0:8f:3b:5c:08:c3:c7:c9:9a:b0:bc:31:b9:
10:8b:9a:54:db:7c:6e:fa:5b:c0:8a:db:85:9e:e2:
3d:1c:4b:51:5b:9c:0c:6c:e5:cf:83:10:1b:0d:ef:
77:7a:08:da:65:33:57:1d:68:b5:bd:eb:bd:e5:86:
58:c8:2a:8f:b5:45:55:8e:a0:37:85:2c:18:60:9f:
8c:ff:72:dd:50:b8:81:fb:77:a6:3c:ca:63:7e:70:
e4:57:96:a3:2d:c0:57:89:d7:d7:73:07:a4:2f:cd:
2f:a0:b2:16:e1:3b:b1:2c:44:f2:35:dc:09:70:ec:
a0:0f:4d:22:40:e4:ec:0a:24:26:d7:65:4d:9c:5f:
db:e4:78:08:3d:41:99:85:ad:b4:d0:c4:36:3a:de:
5b:fa:8c:64:7a:d1:ae:f6:a5:ee:04:e0:57:85:50:
d6:66:a9:07:63:8a:47:0c:82:94:ee:a7:ed:11:67:
4a:4f:c2:c0:61:09:67:7c:b7:a7:97:66:fa:76:73:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:A3:18:B9:F0:E0:6E:6B:A3:A7:46:31:2A:1D:63:0E:10:D8:A1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OOGjGLnw4G5ro6dGMSodYw4Q2KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:19:be:74:78:2d:4d:08:f7:34:58:78:8b:ee:01:af:e8:ce:
78:58:b1:e4:92:35:47:59:6c:e7:63:09:fc:b3:fa:b6:51:c8:
b6:d3:91:48:cd:62:54:e7:25:bb:07:cb:dd:53:8e:c3:51:e4:
98:ea:48:ef:03:cf:5f:d5:3c:49:34:46:67:e1:4f:64:49:12:
4e:60:91:ba:f0:9a:4e:e5:b9:c6:03:47:b8:81:5b:86:a0:84:
56:aa:e7:e6:18:13:e5:ac:8c:46:d3:7a:62:b4:a1:6e:65:28:
69:3a:2c:74:33:a3:0a:49:9e:32:35:41:04:69:8b:5f:97:57:
db:1a:bb:1c:aa:b5:21:03:a0:08:89:46:3c:81:eb:a9:a9:87:
53:7d:19:e7:06:ed:43:29:6d:e5:23:a5:e6:6a:87:8f:59:2e:
a2:11:71:9e:15:23:9b:55:aa:7c:21:11:67:d8:59:7d:ab:f0:
d5:83:a1:72:f2:4b:a8:c2:d9:65:3c:09:c0:91:9e:a7:35:bd:
1e:e7:4e:ed:95:78:bc:43:a1:cb:34:b7:6b:08:90:bd:fe:24:
3e:8e:1a:9a:9d:5a:72:ea:fe:b9:2a:14:65:86:8d:e4:78:f3:
7f:25:cd:d1:6e:fa:5b:0b:9a:a2:16:b1:ee:6d:bf:be:c1:c2:
65:45:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:06 2025 by rpki-client