Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WxMgr9lyW4n70WKAAIEbRqm-YnA.roa
File: WxMgr9lyW4n70WKAAIEbRqm-YnA.roa (raw, json)
Hash identifier: D2GOoufBDbvJgyanIJSeiWNixaKTCHsFN6oLY4z8g7s=
Subject key identifier: 5B:13:20:AF:D9:72:5B:89:FB:D1:62:80:00:81:1B:46:A9:BE:62:70
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08D9F5EB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WxMgr9lyW4n70WKAAIEbRqm-YnA.roa
Signing time: Tue 21 Jun 2022 02:30:44 +0000
ROA not before: Tue 21 Jun 2022 02:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148501995 (0x8d9f5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 21 02:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b1320afd9725b89fbd1628000811b46a9be6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:df:92:ae:db:25:9b:00:e2:ba:58:d6:11:
bc:e9:33:88:b1:b6:65:be:43:e7:1f:6c:12:4f:2e:
23:fa:79:ec:f7:a5:83:4e:a9:53:1f:af:19:ab:ee:
3e:6e:0a:9a:ff:df:e4:be:e5:11:05:d9:ba:74:2f:
e8:63:98:00:1c:c7:a4:be:77:05:d4:58:fe:01:1b:
b2:55:cf:42:b4:f3:d3:e0:1b:5f:13:94:5e:bb:d7:
ca:6c:de:70:69:4d:65:04:60:4c:7a:43:b8:d5:8d:
2f:07:dc:8a:2a:91:5c:3b:bc:29:42:2e:c6:be:d8:
a1:58:b5:a3:97:fa:ef:29:60:1e:eb:56:4b:55:88:
c3:a2:0b:3e:2a:24:b7:94:92:61:95:24:71:6f:f7:
f8:70:e4:95:57:e1:8e:4a:52:02:94:a3:1c:4f:6e:
ec:6d:3e:e1:d1:85:d6:b7:7a:52:9a:3e:c5:12:8d:
85:fa:19:4b:da:f9:ae:9a:35:9d:d2:a1:16:d2:64:
0c:d8:69:aa:34:cb:9b:2a:83:c2:10:c0:59:1b:90:
50:ee:84:db:af:7c:ae:9e:7b:76:7b:41:84:ac:f4:
3c:52:1f:d7:e9:46:bc:15:39:65:9f:fd:ce:d3:4f:
0a:22:62:e8:00:3e:91:1b:1c:52:27:1a:38:bb:c9:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:13:20:AF:D9:72:5B:89:FB:D1:62:80:00:81:1B:46:A9:BE:62:70
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WxMgr9lyW4n70WKAAIEbRqm-YnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
21:16:a9:0c:de:a5:f8:4a:07:63:13:c7:4b:b4:41:d5:08:2c:
73:a5:db:7e:bd:ef:4b:88:ca:ec:c5:f1:eb:7f:98:6b:22:c8:
82:39:80:ad:65:f4:ce:24:d0:41:3d:aa:c8:d2:e7:4b:6d:58:
79:cc:e6:b0:b5:ff:38:95:ab:3c:9b:ae:e5:b3:4b:cd:0d:71:
e5:cd:bd:41:82:c0:6b:a0:81:24:42:ff:4c:d2:c4:74:3f:21:
f7:75:4d:2f:6d:29:10:4a:1e:12:0b:d3:36:82:08:20:ba:e2:
31:55:d4:f4:e3:2f:8b:97:57:38:6f:07:77:67:a4:0a:fc:27:
0a:dc:79:f5:5a:dc:db:dc:22:d5:cb:76:2b:b3:ed:4e:8c:25:
b6:33:e2:7b:de:78:50:d8:64:33:8a:07:59:bc:c7:01:39:65:
77:94:0a:fa:77:75:78:73:8b:e8:f4:65:22:13:6e:b2:f4:67:
1f:4a:ac:95:d9:eb:7d:f5:30:85:e5:aa:f0:ea:a4:22:aa:45:
98:4d:07:ad:95:db:39:01:75:49:f4:b7:52:dc:cd:64:ca:51:
1f:a3:9c:63:e5:7d:44:ab:99:89:3c:d9:ba:e4:21:3f:c8:3b:
25:a9:ff:07:66:f0:de:61:a5:f2:9b:f5:ed:1c:bb:ac:17:d2:
c0:91:cc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:31:07 2025 by rpki-client