Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/S9rSmAS7Bbr7Kc-zSIfitg4kjrU.roa
File: S9rSmAS7Bbr7Kc-zSIfitg4kjrU.roa (raw, json)
Hash identifier: SPTi7kH+1UJtVjVYlEx51lDIlKHGALHOz23DGA2Qu+8=
Subject key identifier: 4B:DA:D2:98:04:BB:05:BA:FB:29:CF:B3:48:87:E2:B6:0E:24:8E:B5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03CC6ABC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/S9rSmAS7Bbr7Kc-zSIfitg4kjrU.roa
Signing time: Wed 02 Feb 2022 02:14:05 +0000
ROA not before: Wed 02 Feb 2022 02:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63728316 (0x3cc6abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 2 02:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bdad29804bb05bafb29cfb34887e2b60e248eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:32:cc:95:fa:53:44:1a:2e:07:68:a3:80:
36:07:ab:72:0a:cf:04:30:82:22:64:86:56:4f:18:
46:1c:5b:26:30:a7:b2:82:7c:ee:0d:9d:0e:3c:90:
b8:0c:0c:13:c1:b5:34:4b:ec:10:f9:45:96:4d:1e:
8a:64:09:3a:45:8e:e6:82:72:07:97:b9:0a:00:fd:
a6:d9:b5:0b:8b:16:e5:9b:e3:75:02:0a:f9:2d:d9:
f9:bf:48:65:fe:59:4c:63:4a:e8:27:d5:5a:ff:1d:
b9:7d:4f:8d:ea:d8:c2:a7:c1:30:37:90:96:f3:2b:
80:7d:73:e7:5c:e4:bb:01:c4:a1:fb:c1:34:7b:69:
bf:69:1c:4d:83:0a:ac:2d:e9:f6:14:a3:34:a6:d0:
6e:69:ea:b6:32:87:41:bd:30:4b:a1:08:7e:78:f4:
3c:e2:c4:6c:43:6e:e4:3e:55:a0:86:52:7c:ee:ef:
ee:c5:88:13:7b:3b:77:4c:14:be:4e:25:73:2d:3f:
85:05:90:84:da:f9:c1:df:db:42:0b:f6:72:77:ba:
60:eb:01:27:67:46:39:f0:62:bc:c4:c4:28:06:a2:
8a:5d:17:7b:ff:f8:e2:e5:d5:b6:a0:c9:51:5e:b1:
91:75:eb:27:e6:95:c9:a6:f0:b5:f2:9c:2b:90:42:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DA:D2:98:04:BB:05:BA:FB:29:CF:B3:48:87:E2:B6:0E:24:8E:B5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/S9rSmAS7Bbr7Kc-zSIfitg4kjrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c0:e9:72:54:f1:99:9b:95:b8:b9:17:b2:22:d9:1a:af:46:
c7:ba:6e:04:40:87:63:9d:3a:95:47:43:70:d0:b2:fd:0b:6b:
88:99:ca:cc:d4:8f:d0:47:c0:b7:77:27:01:73:6c:f4:ec:26:
94:3c:88:7a:0f:0e:80:e5:60:c4:65:40:3c:3d:53:f5:99:18:
52:29:d7:c5:2d:0a:d0:87:5d:c2:61:91:45:63:70:26:26:1e:
9c:19:29:a3:ab:b3:2c:d3:df:32:31:50:11:44:4e:ad:b9:7c:
18:c3:34:c3:e3:1d:4c:e3:bc:d5:9f:bf:7d:4b:cc:1c:9d:3f:
89:7a:79:5e:21:47:05:fd:74:e9:e2:31:ee:22:3c:4a:8a:f4:
6f:1a:ac:3f:45:d1:f2:36:32:e4:e7:0e:f6:bb:61:d0:87:03:
86:68:f8:46:bc:df:43:2b:16:0a:55:11:c4:f1:12:0b:0e:05:
1c:82:d6:f6:34:1d:a7:bf:af:d3:cf:6f:b1:6a:ac:66:a8:54:
b6:fd:c5:18:d2:20:15:e7:e9:ef:5a:e8:19:9e:07:c9:3c:09:
1a:28:d7:ab:aa:4b:67:97:b0:09:3c:93:14:d1:70:a0:c0:b0:
42:48:06:82:82:b0:b1:4d:cd:81:80:c5:d9:4a:27:84:b0:aa:
4c:be:74:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA8xqvDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIw
MjAyMTQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGJkYWQyOTgwNGJi
MDViYWZiMjljZmIzNDg4N2UyYjYwZTI0OGViNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgCMsyV+lNEGi4HaKOANgercgrPBDCCImSGVk8YRhxbJjCn
soJ87g2dDjyQuAwME8G1NEvsEPlFlk0eimQJOkWO5oJyB5e5CgD9ptm1C4sW5Zvj
dQIK+S3Z+b9IZf5ZTGNK6CfVWv8duX1PjerYwqfBMDeQlvMrgH1z51zkuwHEofvB
NHtpv2kcTYMKrC3p9hSjNKbQbmnqtjKHQb0wS6EIfnj0POLEbENu5D5VoIZSfO7v
7sWIE3s7d0wUvk4lcy0/hQWQhNr5wd/bQgv2cne6YOsBJ2dGOfBivMTEKAaiil0X
e//44uXVtqDJUV6xkXXrJ+aVyabwtfKcK5BCTtUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRL2tKYBLsFuvspz7NIh+K2DiSOtTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1M5clNtQVM3QmJyN0tjLXpTSWZpdGc0a2pyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBvwOlyVPGZm5W4uReyItkar0bHum4EQIdjnTqV
R0Nw0LL9C2uImcrM1I/QR8C3dycBc2z07CaUPIh6Dw6A5WDEZUA8PVP1mRhSKdfF
LQrQh13CYZFFY3AmJh6cGSmjq7Ms098yMVARRE6tuXwYwzTD4x1M47zVn799S8wc
nT+JenleIUcF/XTp4jHuIjxKivRvGqw/RdHyNjLk5w72u2HQhwOGaPhGvN9DKxYK
VRHE8RILDgUcgtb2NB2nv6/Tz2+xaqxmqFS2/cUY0iAV5+nvWugZngfJPAkaKNer
qktnl7AJPJMU0XCgwLBCSAaCgrCxTc2BgMXZSieEsKpMvnTK
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:27 2025 by rpki-client