Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QJSZZcn6pUbRG0wB0YlgJFLi_Lo.roa
File: QJSZZcn6pUbRG0wB0YlgJFLi_Lo.roa (raw, json)
Hash identifier: HgjrBzwKbpL0mI7KwQHxV+JHf7AMsMBUWQwOpGNqWmY=
Subject key identifier: 40:94:99:65:C9:FA:A5:46:D1:1B:4C:01:D1:89:60:24:52:E2:FC:BA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08270FC0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QJSZZcn6pUbRG0wB0YlgJFLi_Lo.roa
Signing time: Tue 07 Jun 2022 14:12:02 +0000
ROA not before: Tue 07 Jun 2022 14:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136777664 (0x8270fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 7 14:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40949965c9faa546d11b4c01d189602452e2fcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:ca:b3:ff:44:49:2b:11:00:83:f2:0d:d6:
07:51:33:33:bd:af:77:9e:ac:28:ae:aa:cc:35:c6:
5a:5e:51:67:03:0d:93:42:5e:a2:02:c6:09:82:d9:
4b:e5:0d:41:f8:d9:fd:14:89:c4:52:87:8e:9c:a1:
e7:12:26:dd:78:7f:05:42:27:5c:2d:dc:a0:c8:ae:
05:1c:28:1b:5e:13:4f:a0:aa:ec:00:e6:a8:5b:2c:
de:68:d2:57:b0:4e:18:13:ee:6a:21:c6:20:90:77:
03:f9:4b:f1:75:7b:5a:ca:11:d5:31:57:e7:a7:f7:
9f:ef:4d:63:b6:04:2c:f5:e6:e4:b7:e0:73:7c:9f:
c6:a4:31:1d:3b:ff:4d:42:a7:0b:e3:3b:00:10:8d:
0c:a3:1e:9d:36:ab:92:f4:a6:be:ef:ce:26:39:88:
ed:ed:c8:d5:3c:c7:bb:0a:d8:b1:42:9a:bb:49:2d:
de:7f:fe:61:b4:d6:e5:83:62:6f:be:71:7b:cc:37:
98:81:9e:d0:8d:94:44:03:5b:04:3a:f6:39:fd:b1:
be:73:1a:9b:7a:4f:9f:a5:02:6c:5b:35:c9:b9:f8:
98:51:1d:d9:74:48:8a:bf:2e:7e:b5:78:c9:80:b8:
95:35:1a:94:3a:f0:a6:57:8c:92:1b:39:a2:2f:4f:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:94:99:65:C9:FA:A5:46:D1:1B:4C:01:D1:89:60:24:52:E2:FC:BA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QJSZZcn6pUbRG0wB0YlgJFLi_Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6f:a7:b8:41:92:ee:f3:ff:e7:52:af:5c:96:c3:cf:71:e7:4e:
65:a7:6f:64:2c:be:bd:2a:7c:19:79:57:8f:2d:f2:b9:68:45:
b5:d5:69:fc:dc:b9:f7:28:2b:64:93:e2:e6:3c:da:ef:57:e3:
af:88:0f:ad:cb:39:01:1a:51:b3:35:e4:40:44:3c:14:3e:bb:
51:32:b0:72:04:fa:b0:97:70:58:07:d1:27:2e:f8:41:41:66:
79:30:f9:7c:c6:27:37:76:92:39:8b:4e:a0:7a:52:8c:98:ea:
7e:c2:d0:6e:e0:83:4f:49:dc:80:9d:e1:f3:da:0f:a6:13:d0:
e2:36:58:3e:e1:2b:99:b3:d6:96:e7:46:72:09:af:f8:95:0c:
44:26:15:8f:ed:c4:7a:98:a7:53:a8:1c:d4:68:0e:7c:50:29:
43:c1:f6:57:23:7c:01:7f:5a:fc:a1:c7:b8:dd:62:0b:c4:76:
d3:5e:2b:54:98:a0:1c:dd:99:f0:70:e2:2d:12:ed:42:5e:d5:
ff:2f:c6:b1:e1:92:ae:81:56:4e:7a:bd:13:a6:e4:22:2e:8b:
dd:d3:f7:c9:ba:01:e1:17:79:b5:2b:0f:2c:f2:a1:b3:0b:b6:
98:87:65:c5:e7:e4:f8:45:72:6c:48:52:2d:a7:ef:c4:29:ef:
39:5e:cd:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECCcPwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
NzE0MTIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDA5NDk5NjVjOWZh
YTU0NmQxMWI0YzAxZDE4OTYwMjQ1MmUyZmNiYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJRGyrP/REkrEQCD8g3WB1EzM72vd56sKK6qzDXGWl5RZwMN
k0JeogLGCYLZS+UNQfjZ/RSJxFKHjpyh5xIm3Xh/BUInXC3coMiuBRwoG14TT6Cq
7ADmqFss3mjSV7BOGBPuaiHGIJB3A/lL8XV7WsoR1TFX56f3n+9NY7YELPXm5Lfg
c3yfxqQxHTv/TUKnC+M7ABCNDKMenTarkvSmvu/OJjmI7e3I1TzHuwrYsUKau0kt
3n/+YbTW5YNib75xe8w3mIGe0I2URANbBDr2Of2xvnMam3pPn6UCbFs1ybn4mFEd
2XRIir8ufrV4yYC4lTUalDrwpleMkhs5oi9PvQcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRAlJllyfqlRtEbTAHRiWAkUuL8ujAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1FKU1paY242cFViUkcwd0IwWWxnSkZMaV9Mby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBvp7hBku7z/+dSr1yWw89x505lp29kLL69KnwZ
eVePLfK5aEW11Wn83Ln3KCtkk+LmPNrvV+OviA+tyzkBGlGzNeRARDwUPrtRMrBy
BPqwl3BYB9EnLvhBQWZ5MPl8xic3dpI5i06gelKMmOp+wtBu4INPSdyAneHz2g+m
E9DiNlg+4SuZs9aW50ZyCa/4lQxEJhWP7cR6mKdTqBzUaA58UClDwfZXI3wBf1r8
oce43WILxHbTXitUmKAc3ZnwcOItEu1CXtX/L8ax4ZKugVZOer0TpuQiLovd0/fJ
ugHhF3m1Kw8s8qGzC7aYh2XF5+T4RXJsSFItp+/EKe85Xs1u
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:36 2025 by rpki-client