Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/anSCTNLBJzTpQpeRlA1u9ogpOAg.roa
File: anSCTNLBJzTpQpeRlA1u9ogpOAg.roa (raw, json)
Hash identifier: MyijLoN918AB3R7/g3uVi464CEk32ev9FSKrk18m3VA=
Subject key identifier: 6A:74:82:4C:D2:C1:27:34:E9:42:97:91:94:0D:6E:F6:88:29:38:08
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04EE2CDF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/anSCTNLBJzTpQpeRlA1u9ogpOAg.roa
Signing time: Fri 11 Mar 2022 05:18:47 +0000
ROA not before: Fri 11 Mar 2022 05:18:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82717919 (0x4ee2cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 11 05:18:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a74824cd2c12734e9429791940d6ef688293808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:0b:04:32:a4:55:8f:98:bc:d0:05:be:26:
1e:8e:8f:e2:61:12:66:69:c8:c9:b4:20:d2:91:7c:
3b:80:80:83:e4:99:9d:a2:bf:46:76:6c:7a:01:91:
91:24:18:0c:11:61:18:18:b0:85:3d:66:da:c5:12:
a0:20:f3:b9:3d:3c:3e:6b:6a:8a:d9:4a:70:78:7f:
40:8c:f8:fb:cb:c9:37:09:5b:5c:4c:a8:3f:59:8b:
5e:c3:54:49:e2:30:23:b2:4b:da:d7:da:0b:cb:b7:
9d:83:36:aa:bb:46:5c:e6:39:e9:51:09:b7:29:23:
ac:41:75:c1:59:21:e4:37:d8:dd:c2:d0:5c:ca:b6:
a7:61:26:a6:97:ac:53:25:fe:18:3c:70:5a:81:91:
6e:4a:55:3c:92:46:13:79:ec:76:a8:b3:7c:af:ec:
7d:b2:6d:27:42:04:80:05:c0:60:d9:51:22:99:2f:
1a:4a:24:93:46:1a:fb:0b:cd:26:cc:6b:6c:e1:78:
b3:57:38:04:3d:70:d1:9e:e0:1d:76:1f:99:50:12:
a2:d9:56:5c:d7:23:d2:dd:04:58:44:15:22:aa:c5:
29:f1:dd:3e:2c:df:43:3b:d2:0e:32:db:fe:10:df:
ef:dd:7e:93:2d:f6:b7:3c:70:c6:81:37:5d:64:d8:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:82:4C:D2:C1:27:34:E9:42:97:91:94:0D:6E:F6:88:29:38:08
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/anSCTNLBJzTpQpeRlA1u9ogpOAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
83:7d:6b:97:01:da:d3:fc:b8:79:64:e9:e5:76:d9:d3:39:39:
92:6e:d1:0d:41:13:4c:4b:89:72:94:e3:64:2f:86:1e:67:69:
4d:41:3c:f1:36:f8:ee:2b:4f:ff:96:aa:4e:14:4a:fb:3f:a9:
cb:4a:91:18:f8:c2:d8:6d:53:ec:74:1d:3e:1f:fa:49:58:e0:
4a:79:8e:07:b3:d6:68:c5:97:17:74:51:1b:05:70:2c:56:f8:
b1:67:d9:6c:e4:53:ad:b7:99:b8:1c:57:dd:fa:b3:1b:88:42:
6a:f8:a9:46:a5:17:7e:25:d0:cf:27:e1:cc:2f:8b:0a:45:df:
40:50:65:a4:21:0e:e3:d9:fe:d1:22:a1:20:a3:70:16:80:12:
3a:54:19:b9:54:c4:9b:96:9b:0c:5d:c8:2c:b3:f4:11:e5:a9:
d8:d5:9c:05:ed:ad:b3:12:bc:d5:e1:77:7b:1c:a0:d0:10:7e:
90:aa:67:58:d7:23:81:0b:ee:ad:83:3a:15:bc:27:b7:1d:6b:
50:c1:f4:fd:c3:91:d4:2c:80:cd:3c:a1:8d:be:19:ae:29:da:
f6:c4:54:b3:0d:0e:5a:32:88:0c:a6:47:85:a7:03:55:53:56:
09:7b:a7:4a:19:75:85:91:ce:d7:9f:8a:c3:b7:c7:78:78:e9:
a6:f2:a8:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBO4s3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMx
MTA1MTg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE3NDgyNGNkMmMx
MjczNGU5NDI5NzkxOTQwZDZlZjY4ODI5MzgwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFOCwQypFWPmLzQBb4mHo6P4mESZmnIybQg0pF8O4CAg+SZ
naK/RnZsegGRkSQYDBFhGBiwhT1m2sUSoCDzuT08PmtqitlKcHh/QIz4+8vJNwlb
XEyoP1mLXsNUSeIwI7JL2tfaC8u3nYM2qrtGXOY56VEJtykjrEF1wVkh5DfY3cLQ
XMq2p2EmppesUyX+GDxwWoGRbkpVPJJGE3nsdqizfK/sfbJtJ0IEgAXAYNlRIpkv
Gkokk0Ya+wvNJsxrbOF4s1c4BD1w0Z7gHXYfmVASotlWXNcj0t0EWEQVIqrFKfHd
PizfQzvSDjLb/hDf791+ky32tzxwxoE3XWTYLeECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRqdIJM0sEnNOlCl5GUDW72iCk4CDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2FuU0NUTkxCSnpUcFFwZVJsQTF1OW9ncE9BZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCDfWuXAdrT/Lh5ZOnldtnTOTmSbtENQRNMS4ly
lONkL4YeZ2lNQTzxNvjuK0//lqpOFEr7P6nLSpEY+MLYbVPsdB0+H/pJWOBKeY4H
s9ZoxZcXdFEbBXAsVvixZ9ls5FOtt5m4HFfd+rMbiEJq+KlGpRd+JdDPJ+HML4sK
Rd9AUGWkIQ7j2f7RIqEgo3AWgBI6VBm5VMSblpsMXcgss/QR5anY1ZwF7a2zErzV
4Xd7HKDQEH6QqmdY1yOBC+6tgzoVvCe3HWtQwfT9w5HULIDNPKGNvhmuKdr2xFSz
DQ5aMogMpkeFpwNVU1YJe6dKGXWFkc7Xn4rDt8d4eOmm8qgh
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:25 2025 by rpki-client