Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SdO_hVhtHgZL-pll1ocGO_atOvg.roa
File: SdO_hVhtHgZL-pll1ocGO_atOvg.roa (raw, json)
Hash identifier: 4Y0PzmeaMyMlJiVd6xO/3qzlGVuqj5FkJ2A+KXsPOcs=
Subject key identifier: 49:D3:BF:85:58:6D:1E:06:4B:FA:99:65:D6:87:06:3B:F6:AD:3A:F8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 089DA5D0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SdO_hVhtHgZL-pll1ocGO_atOvg.roa
Signing time: Thu 16 Jun 2022 04:50:44 +0000
ROA not before: Thu 16 Jun 2022 04:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144549328 (0x89da5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 16 04:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d3bf85586d1e064bfa9965d687063bf6ad3af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:b5:1a:56:e3:5a:d1:9e:6a:65:7f:a7:bc:
33:43:6d:73:7b:bd:33:14:ab:85:f9:fa:e8:0b:0f:
5c:e1:fa:a7:ae:bc:2d:f0:76:38:64:c2:fe:63:fd:
82:b8:5c:fb:dd:d6:9a:9b:8e:59:0c:33:d7:c3:70:
81:67:9a:b2:a5:b1:da:7c:04:1d:00:e3:cc:d5:ff:
82:f2:73:cf:18:b7:95:9b:33:54:dd:aa:3b:38:a1:
30:a1:de:4d:c3:5f:8a:30:55:fa:09:10:f5:6d:89:
3a:96:9b:1e:e1:65:19:f2:b5:5e:11:8c:91:c1:cf:
27:40:d3:37:d7:f6:f5:ca:ce:1c:b5:68:03:c5:14:
ea:08:b7:36:75:6f:0c:1e:1f:40:3b:37:ae:8d:0d:
34:a2:15:c5:63:12:b6:4d:94:95:ab:ca:10:f9:21:
ee:5e:d3:56:67:fe:e6:a0:b1:f0:8a:3a:38:14:a5:
9d:fa:5a:e1:2c:19:b7:06:5f:77:c6:dc:37:86:92:
9c:c3:59:6f:22:f0:eb:1d:6a:db:4f:2f:06:6a:a4:
44:75:50:c9:c1:bc:3a:d5:7d:8b:10:37:9b:51:b0:
97:a4:8a:9c:27:51:9b:6c:d8:2e:c4:a4:07:ca:48:
55:9e:3b:7e:0e:d4:df:cf:46:c4:06:2e:18:98:93:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:BF:85:58:6D:1E:06:4B:FA:99:65:D6:87:06:3B:F6:AD:3A:F8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SdO_hVhtHgZL-pll1ocGO_atOvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:46:18:de:13:c3:94:3c:b1:6f:92:94:30:3e:62:8d:64:94:
a2:a7:25:c4:2a:2f:e1:2c:b0:3e:fc:dc:5e:af:8b:8d:76:09:
db:25:5b:e9:09:30:5c:ef:0e:fd:50:4e:ad:80:b7:ac:13:c4:
52:da:16:4f:47:28:54:44:5f:af:2a:6c:9e:b9:25:08:a8:30:
11:71:a1:b3:61:8c:15:c4:5b:4d:df:a6:17:c4:ef:76:a8:b3:
b6:af:a9:10:be:55:33:99:ef:42:55:52:2c:6c:8e:75:0d:ce:
aa:e9:d9:5b:d8:39:be:06:30:0c:21:30:6d:33:f5:c7:24:22:
70:b1:2c:e8:52:00:67:6a:27:de:9a:fb:0a:53:1f:f1:00:f6:
1d:a5:55:a5:ee:29:c1:69:cf:33:6b:d0:b7:d7:be:e6:5c:bc:
fa:56:c7:9c:bd:cf:f4:ed:87:5d:f0:a4:c2:e7:f2:f9:33:73:
8b:86:ca:bd:d2:f6:2d:70:4c:b1:3e:71:2b:f0:d0:ce:d9:f7:
52:16:9e:d3:eb:57:03:50:e3:6c:f1:90:d9:42:41:0b:14:90:
cc:4c:3b:16:a2:f0:09:eb:50:73:71:c5:63:03:7b:7a:75:d9:
92:32:6a:dd:28:a8:0b:df:48:1b:2b:7e:d7:91:45:bb:05:cb:
78:33:89:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECJ2l0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NjA0NTA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDlkM2JmODU1ODZk
MWUwNjRiZmE5OTY1ZDY4NzA2M2JmNmFkM2FmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOKktRpW41rRnmplf6e8M0Ntc3u9MxSrhfn66AsPXOH6p668
LfB2OGTC/mP9grhc+93WmpuOWQwz18NwgWeasqWx2nwEHQDjzNX/gvJzzxi3lZsz
VN2qOzihMKHeTcNfijBV+gkQ9W2JOpabHuFlGfK1XhGMkcHPJ0DTN9f29crOHLVo
A8UU6gi3NnVvDB4fQDs3ro0NNKIVxWMStk2UlavKEPkh7l7TVmf+5qCx8Io6OBSl
nfpa4SwZtwZfd8bcN4aSnMNZbyLw6x1q208vBmqkRHVQycG8OtV9ixA3m1Gwl6SK
nCdRm2zYLsSkB8pIVZ47fg7U389GxAYuGJiTmccCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJ07+FWG0eBkv6mWXWhwY79q06+DAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1NkT19oVmh0SGdaTC1wbGwxb2NHT19hdE92Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAKkYY3hPDlDyxb5KUMD5ijWSUoqclxCov4SywPvzcXq+LjXYJ2yVb6QkwXO8O
/VBOrYC3rBPEUtoWT0coVERfrypsnrklCKgwEXGhs2GMFcRbTd+mF8Tvdqiztq+p
EL5VM5nvQlVSLGyOdQ3OqunZW9g5vgYwDCEwbTP1xyQicLEs6FIAZ2on3pr7ClMf
8QD2HaVVpe4pwWnPM2vQt9e+5ly8+lbHnL3P9O2HXfCkwufy+TNzi4bKvdL2LXBM
sT5xK/DQztn3Uhae0+tXA1DjbPGQ2UJBCxSQzEw7FqLwCetQc3HFYwN7enXZkjJq
3SioC99IGyt+15FFuwXLeDOJtA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:27 2025 by rpki-client