Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sh1k6Rzik-ZXX0kmU1lxdlWSTW8.roa
File: Sh1k6Rzik-ZXX0kmU1lxdlWSTW8.roa (raw, json)
Hash identifier: ILwcIifXNTqeUpI36A2ZS2RK8vR1lcrJBijbgaGpxjE=
Subject key identifier: 4A:1D:64:E9:1C:E2:93:E6:57:5F:49:26:53:59:71:76:55:92:4D:6F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07902E52
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sh1k6Rzik-ZXX0kmU1lxdlWSTW8.roa
Signing time: Fri 27 May 2022 01:53:13 +0000
ROA not before: Fri 27 May 2022 01:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126889554 (0x7902e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 27 01:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a1d64e91ce293e6575f49265359717655924d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:15:44:30:df:ca:f3:2a:5d:90:6d:00:58:
61:e2:7b:ea:ad:69:52:0e:3a:ac:62:1c:c9:44:d6:
bd:48:41:b1:d3:a8:f8:7f:3a:4b:2d:01:de:e9:8e:
f3:be:46:d9:fb:d2:29:ac:bf:99:1a:76:6c:0b:d2:
dc:7d:e5:01:6c:9b:9a:ff:ab:7d:56:29:f8:fc:71:
35:b8:b4:55:78:f1:fc:b6:7f:64:90:ff:d1:94:98:
d5:fa:fb:18:58:d0:5e:c3:75:7e:ad:62:6d:e0:f1:
4f:e9:d0:7b:12:38:8b:b3:eb:70:6d:04:af:15:57:
6e:fa:46:18:b3:fc:02:37:1c:47:07:c6:03:3a:05:
98:a5:7d:58:95:f2:13:7d:69:70:ce:b8:85:05:7c:
54:7d:6a:72:51:ac:d5:66:70:96:b2:0f:f7:1f:bd:
3f:1b:43:6e:c6:ea:81:cb:8d:a8:88:0a:92:57:b2:
0a:9b:44:ed:4c:6e:86:e9:1f:67:d0:de:63:be:2c:
22:90:8d:76:5b:52:39:70:21:89:60:31:40:6e:66:
25:c9:c9:77:95:85:e3:e8:d5:9b:cf:70:7d:a6:68:
51:e0:5e:61:b9:9b:e5:37:ee:a1:de:4a:4f:a7:23:
d7:11:b7:1d:f8:19:09:18:73:c2:ef:d1:b6:b8:35:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:64:E9:1C:E2:93:E6:57:5F:49:26:53:59:71:76:55:92:4D:6F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sh1k6Rzik-ZXX0kmU1lxdlWSTW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
12:48:0f:97:e0:4c:3a:1e:a5:04:0d:24:e3:d5:ad:d1:ef:c1:
a2:d5:7f:cf:43:71:23:3a:8e:11:8f:dc:af:6e:d7:cd:ec:9a:
2d:75:4e:4a:95:a9:4b:c5:5a:b6:1c:a2:49:b3:14:8c:e1:b6:
84:8c:07:79:4c:e5:ce:3d:70:0c:b9:88:12:e7:0f:66:6e:41:
ea:f6:4b:2c:a6:b6:10:8b:a9:c4:4a:e9:67:05:7d:9e:b7:40:
41:54:35:26:5a:98:22:b5:54:79:ae:e0:2d:49:81:b1:af:bd:
f6:95:91:fe:c5:32:6b:b7:a9:e5:5b:95:14:3b:81:12:68:a3:
76:c6:43:c7:18:f2:3e:7a:61:53:6c:f5:ba:f4:b5:c4:52:73:
c3:64:4d:30:be:a4:54:09:19:68:10:aa:23:46:a2:bb:20:e5:
9f:23:6f:03:f6:ff:b7:ad:5b:a8:89:97:15:94:d9:8e:ec:a7:
c3:7c:06:37:69:12:32:f3:53:bf:a1:ce:6b:bb:61:a6:5e:97:
02:b8:6d:17:60:1f:d7:6b:7e:17:8e:b6:81:c3:a9:27:41:43:
d2:03:9d:1f:2a:03:6f:51:3f:29:4a:63:a8:6e:ec:b7:62:0d:
fb:13:b9:00:09:ed:49:7f:91:74:f7:48:2f:53:e3:32:2a:3a:
8a:01:79:a5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB5AuUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
NzAxNTMxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGExZDY0ZTkxY2Uy
OTNlNjU3NWY0OTI2NTM1OTcxNzY1NTkyNGQ2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJnFUQw38rzKl2QbQBYYeJ76q1pUg46rGIcyUTWvUhBsdOo
+H86Sy0B3umO875G2fvSKay/mRp2bAvS3H3lAWybmv+rfVYp+PxxNbi0VXjx/LZ/
ZJD/0ZSY1fr7GFjQXsN1fq1ibeDxT+nQexI4i7PrcG0ErxVXbvpGGLP8AjccRwfG
AzoFmKV9WJXyE31pcM64hQV8VH1qclGs1WZwlrIP9x+9PxtDbsbqgcuNqIgKkley
CptE7UxuhukfZ9DeY74sIpCNdltSOXAhiWAxQG5mJcnJd5WF4+jVm89wfaZoUeBe
Ybmb5Tfuod5KT6cj1xG3HfgZCRhzwu/Rtrg17zcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRKHWTpHOKT5ldfSSZTWXF2VZJNbzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1NoMWs2Unppay1aWFgwa21VMWx4ZGxXU1RXOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAEkgPl+BMOh6lBA0k49Wt0e/BotV/z0NxIzqOEY/cr27XzeyaLXVOSpWpS8Va
thyiSbMUjOG2hIwHeUzlzj1wDLmIEucPZm5B6vZLLKa2EIupxErpZwV9nrdAQVQ1
JlqYIrVUea7gLUmBsa+99pWR/sUya7ep5VuVFDuBEmijdsZDxxjyPnphU2z1uvS1
xFJzw2RNML6kVAkZaBCqI0aiuyDlnyNvA/b/t61bqImXFZTZjuynw3wGN2kSMvNT
v6HOa7thpl6XArhtF2Af12t+F462gcOpJ0FD0gOdHyoDb1E/KUpjqG7st2IN+xO5
AAntSX+RdPdIL1PjMio6igF5pQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org