Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZeAhiuB9RY3dYICNu7peHjCRMpc.roa
File: ZeAhiuB9RY3dYICNu7peHjCRMpc.roa (raw, json)
Hash identifier: xhkjzqWo/M6MSIz6APAQf9eGyXIOFOYHkYJOyRHb63Q=
Subject key identifier: 65:E0:21:8A:E0:7D:45:8D:DD:60:80:8D:BB:BA:5E:1E:30:91:32:97
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06BBAB67
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZeAhiuB9RY3dYICNu7peHjCRMpc.roa
Signing time: Tue 10 May 2022 15:32:02 +0000
ROA not before: Tue 10 May 2022 15:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112962407 (0x6bbab67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 10 15:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65e0218ae07d458ddd60808dbbba5e1e30913297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:ae:69:22:4b:e7:66:9b:0b:92:3b:81:9d:
66:07:a4:3b:2f:1b:57:a9:d6:a0:68:ba:f0:c2:b2:
6a:23:cb:c4:1d:98:ed:84:98:4a:58:98:cd:b1:e8:
9b:c8:45:e6:52:18:9d:91:e1:0e:88:e6:ca:cc:d2:
fc:3a:19:72:e5:e5:49:25:26:36:f6:33:57:32:4d:
8a:27:4a:ab:24:c5:81:1e:a4:2b:f5:38:ad:3f:bc:
a0:e3:24:47:c4:17:97:b5:c9:97:08:25:c1:5d:ff:
b8:2d:df:4e:3b:39:04:97:62:90:9b:14:ec:02:b2:
4d:55:a4:32:7e:a4:46:89:38:f7:7c:21:cb:7e:d0:
65:22:83:81:c9:15:05:65:ce:21:ad:c6:69:f0:d4:
94:a4:b3:d4:67:35:4b:bb:c4:da:f9:fb:c1:80:87:
62:29:9d:f4:36:b3:e3:e0:95:f7:90:51:ef:c2:9c:
46:54:24:cd:10:59:2d:39:84:09:ff:a7:59:58:c5:
c8:d3:e5:60:00:75:d5:24:7b:68:53:1d:b1:38:c1:
a7:27:ad:2f:f6:16:89:1c:9d:c3:de:52:e9:ac:e1:
1a:3e:ad:1a:93:11:85:9e:06:6e:85:72:51:b2:e6:
d5:ff:e9:65:bf:8e:7f:60:4b:9a:0b:67:76:02:6b:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:21:8A:E0:7D:45:8D:DD:60:80:8D:BB:BA:5E:1E:30:91:32:97
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ZeAhiuB9RY3dYICNu7peHjCRMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
61:85:17:9a:0a:46:33:9e:bf:84:9b:23:f0:b2:5e:0f:24:41:
6b:68:bf:44:5b:83:93:f6:1c:67:1a:f9:44:a5:bf:a9:14:98:
32:0b:24:8f:f0:06:3a:5e:4f:9f:4f:b2:79:cd:d3:fb:72:e9:
f7:7c:94:49:bd:ea:bc:48:d8:98:4f:92:2d:33:f4:a6:eb:76:
8f:d9:f0:93:98:53:d6:e8:38:08:58:76:8e:40:ef:60:8b:fc:
ef:90:e5:bd:96:7f:47:b5:7e:51:97:da:87:df:63:9d:6c:b5:
77:a6:aa:97:dd:ef:a9:33:00:2b:a0:59:15:35:77:b3:f9:35:
90:bf:38:2d:14:f2:20:40:69:2f:55:a8:eb:92:7a:fc:c9:5b:
81:88:7c:0a:b1:e9:b6:5e:b8:68:51:77:0e:61:25:9f:b8:5b:
1f:30:9b:96:f7:a7:ad:ab:65:4c:1d:e9:31:08:16:35:67:9c:
33:5c:40:04:13:17:aa:e8:f7:91:9e:c9:ea:10:6b:d5:0d:12:
e7:b3:c6:ab:94:a0:24:52:e7:a2:a4:84:dd:75:dc:b2:89:e8:
e6:53:52:e2:35:54:b5:81:1e:96:33:d2:b3:6a:ff:21:ef:41:
d0:a9:8a:76:b2:ec:c8:0b:fd:cf:73:2e:81:f4:47:36:ce:80:
2f:1b:fb:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBrurZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
MDE1MzIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjVlMDIxOGFlMDdk
NDU4ZGRkNjA4MDhkYmJiYTVlMWUzMDkxMzI5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrhrmkiS+dmmwuSO4GdZgekOy8bV6nWoGi68MKyaiPLxB2Y
7YSYSliYzbHom8hF5lIYnZHhDojmyszS/DoZcuXlSSUmNvYzVzJNiidKqyTFgR6k
K/U4rT+8oOMkR8QXl7XJlwglwV3/uC3fTjs5BJdikJsU7AKyTVWkMn6kRok493wh
y37QZSKDgckVBWXOIa3GafDUlKSz1Gc1S7vE2vn7wYCHYimd9Daz4+CV95BR78Kc
RlQkzRBZLTmECf+nWVjFyNPlYAB11SR7aFMdsTjBpyetL/YWiRydw95S6azhGj6t
GpMRhZ4GboVyUbLm1f/pZb+Of2BLmgtndgJr/AUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRl4CGK4H1Fjd1ggI27ul4eMJEylzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1plQWhpdUI5UlkzZFlJQ051N3BlSGpDUk1wYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBhhReaCkYznr+EmyPwsl4PJEFraL9EW4OT9hxn
GvlEpb+pFJgyCySP8AY6Xk+fT7J5zdP7cun3fJRJveq8SNiYT5ItM/Sm63aP2fCT
mFPW6DgIWHaOQO9gi/zvkOW9ln9HtX5Rl9qH32OdbLV3pqqX3e+pMwAroFkVNXez
+TWQvzgtFPIgQGkvVajrknr8yVuBiHwKsem2XrhoUXcOYSWfuFsfMJuW96etq2VM
HekxCBY1Z5wzXEAEExeq6PeRnsnqEGvVDRLns8arlKAkUueipITdddyyiejmU1Li
NVS1gR6WM9Kzav8h70HQqYp2suzIC/3Pcy6B9Ec2zoAvG/sG
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:29 2025 by rpki-client