Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa
File: Z1pthuS4af6lc6o2TGaEs0R6U4o.roa (raw, json)
Hash identifier: YxYJs12TMELoXJFMaTD/eyfAbGlNts2KbwD1pwAcPeo=
Subject key identifier: 67:5A:6D:86:E4:B8:69:FE:A5:73:AA:36:4C:66:84:B3:44:7A:53:8A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08888FFA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa
Signing time: Wed 15 Jun 2022 01:18:44 +0000
ROA not before: Wed 15 Jun 2022 01:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143167482 (0x8888ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 15 01:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=675a6d86e4b869fea573aa364c6684b3447a538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:c5:db:9c:2d:98:68:7e:06:1b:54:1c:bb:
4f:58:0c:2f:28:82:f2:8e:47:2a:32:c2:d7:6f:2b:
cb:34:18:bc:16:d7:80:01:13:cf:79:5e:00:f5:2a:
ce:bc:c8:3c:a6:99:00:8d:30:9b:0b:68:86:38:12:
2c:4f:39:b6:61:82:ae:a3:c7:df:02:bc:2e:1b:31:
b4:2f:1a:49:08:1d:2c:ee:53:66:12:af:ab:25:dc:
47:61:34:f1:57:86:58:32:b9:49:34:d7:2f:41:6f:
b8:ed:25:02:e5:70:86:c3:af:f2:9f:c1:99:42:38:
e4:cd:75:a3:08:54:95:43:ea:90:02:86:84:96:d1:
fd:bf:2e:f9:7e:73:9c:86:22:3b:61:bd:6c:e3:ea:
66:67:2d:87:d4:85:23:f3:69:e4:88:84:71:b4:ed:
e5:c8:ad:86:69:5a:de:ed:01:8e:c5:ab:8f:a4:92:
2e:d3:85:d0:c7:2f:f0:70:0b:c7:b1:e5:e7:03:f1:
8f:94:82:e4:98:ee:6c:80:9f:04:6d:82:97:64:b1:
ec:dd:28:94:4c:f6:d1:a7:9b:39:57:5b:39:48:1d:
cf:e8:a7:bc:62:56:a7:1b:9e:24:f9:00:86:4e:87:
6f:7b:0b:71:8f:84:ee:81:46:4a:29:a7:c3:6a:8b:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:6D:86:E4:B8:69:FE:A5:73:AA:36:4C:66:84:B3:44:7A:53:8A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fe:0f:d5:f2:0f:8d:8a:42:e5:70:31:a1:33:c3:11:db:61:
59:35:74:26:33:7a:ca:3f:58:be:91:30:d5:7f:ed:79:45:04:
a8:1c:5c:06:bd:90:bb:2f:99:2e:9b:f3:8e:9d:78:de:c5:4a:
05:a3:f7:aa:5b:7f:96:5a:54:31:99:15:15:17:e6:87:ab:ee:
5e:ac:28:cb:df:c3:a6:90:46:1b:a2:07:ce:15:03:82:cd:b9:
e8:90:7d:51:83:d5:cc:cb:4e:92:ab:06:80:1f:95:60:38:ac:
3b:8d:c1:e9:af:21:61:e4:58:0c:04:a1:51:97:ad:c3:1b:d6:
d4:05:5d:81:c4:b8:16:c9:99:66:ae:32:ef:5e:ba:20:22:9b:
76:04:06:38:44:09:61:f2:20:83:39:27:e6:0c:b8:1f:de:fc:
c0:67:b7:1b:c5:6a:4b:98:2f:4e:30:f7:69:6f:7f:11:9f:8c:
dc:47:c7:90:40:56:25:89:01:c7:95:55:36:64:f8:26:1e:75:
0e:ed:ff:e9:69:66:f4:42:46:52:45:8d:6b:58:ae:5d:5b:2d:
01:f3:b7:87:6d:47:89:05:cf:95:5c:df:69:11:ea:bf:65:c5:
e3:c1:30:13:57:f3:50:26:dc:f4:1d:74:11:5b:f9:49:af:f0:
b3:f8:89:c2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECIiP+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NTAxMTg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc1YTZkODZlNGI4
NjlmZWE1NzNhYTM2NGM2Njg0YjM0NDdhNTM4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKToxducLZhofgYbVBy7T1gMLyiC8o5HKjLC128ryzQYvBbX
gAETz3leAPUqzrzIPKaZAI0wmwtohjgSLE85tmGCrqPH3wK8LhsxtC8aSQgdLO5T
ZhKvqyXcR2E08VeGWDK5STTXL0FvuO0lAuVwhsOv8p/BmUI45M11owhUlUPqkAKG
hJbR/b8u+X5znIYiO2G9bOPqZmcth9SFI/Np5IiEcbTt5cithmla3u0BjsWrj6SS
LtOF0Mcv8HALx7Hl5wPxj5SC5JjubICfBG2Cl2Sx7N0olEz20aebOVdbOUgdz+in
vGJWpxueJPkAhk6Hb3sLcY+E7oFGSimnw2qLWSECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRnWm2G5Lhp/qVzqjZMZoSzRHpTijAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1oxcHRodVM0YWY2bGM2bzJUR2FFczBSNlU0by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAXP4P1fIPjYpC5XAxoTPDEdthWTV0JjN6yj9YvpEw1X/teUUEqBxcBr2Quy+Z
Lpvzjp143sVKBaP3qlt/llpUMZkVFRfmh6vuXqwoy9/DppBGG6IHzhUDgs256JB9
UYPVzMtOkqsGgB+VYDisO43B6a8hYeRYDAShUZetwxvW1AVdgcS4FsmZZq4y7166
ICKbdgQGOEQJYfIggzkn5gy4H978wGe3G8VqS5gvTjD3aW9/EZ+M3EfHkEBWJYkB
x5VVNmT4Jh51Du3/6Wlm9EJGUkWNa1iuXVstAfO3h21HiQXPlVzfaRHqv2XF48Ew
E1fzUCbc9B10EVv5Sa/ws/iJwg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:37 2025 by rpki-client