Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/azJijYEj6b0vsyjPiiyYdQ2InsU.roa
File: azJijYEj6b0vsyjPiiyYdQ2InsU.roa (raw, json)
Hash identifier: EVQNInsliDKeEDz8w07DWMZSAY71hfvAAwZLJKmnieY=
Subject key identifier: 6B:32:62:8D:81:23:E9:BD:2F:B3:28:CF:8A:2C:98:75:0D:88:9E:C5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08F36C8B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/azJijYEj6b0vsyjPiiyYdQ2InsU.roa
Signing time: Thu 23 Jun 2022 02:28:32 +0000
ROA not before: Thu 23 Jun 2022 02:28:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150170763 (0x8f36c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 23 02:28:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b32628d8123e9bd2fb328cf8a2c98750d889ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:ae:1c:37:27:db:bf:c3:56:fd:f9:f3:b7:
16:46:e6:b3:a3:91:4a:b3:20:d7:8f:aa:ce:b0:15:
ef:07:cf:d5:a0:64:93:4a:a2:c3:cb:95:dd:06:e4:
bd:3d:de:64:80:37:d8:d3:22:c8:eb:11:10:a0:74:
3c:ba:22:79:75:9c:d4:37:0b:7e:4a:b4:cd:be:e5:
27:f4:a6:6e:dd:4f:24:80:04:7e:41:0b:70:3c:c2:
09:cc:0c:e8:08:29:77:5a:0f:2d:81:9e:5d:59:ad:
50:98:14:16:4d:50:6e:04:c1:cf:87:94:c9:6e:1e:
5a:02:c1:c5:3e:86:75:68:f3:c0:be:00:fc:0e:82:
98:15:8f:36:30:5c:18:c8:71:37:09:0b:59:78:cf:
ec:49:ac:23:3a:26:63:7c:9f:d4:0b:8b:8c:2e:b0:
9a:60:b2:8e:97:7a:9e:ee:90:80:f9:74:a5:41:c5:
bf:d2:af:ed:ed:d2:0d:0a:e7:46:9b:75:41:68:5c:
ee:23:0e:50:73:36:6c:c9:89:64:ea:f3:19:e1:de:
d6:c5:b8:0d:c3:59:0a:b9:da:37:b3:76:0f:ab:6c:
06:02:55:bc:8f:0d:16:a9:7d:b8:48:d3:ac:e8:08:
ab:7c:21:3b:fa:b8:f9:a6:97:6f:ca:08:18:0e:bf:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:32:62:8D:81:23:E9:BD:2F:B3:28:CF:8A:2C:98:75:0D:88:9E:C5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/azJijYEj6b0vsyjPiiyYdQ2InsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
56:f2:bd:05:17:9f:f3:a3:27:f0:06:79:18:95:c7:de:0f:d3:
f5:19:f7:9c:a6:91:e1:6e:60:80:8f:b0:18:2c:7a:4f:75:c1:
a5:ad:f7:99:21:87:b5:c9:8a:9c:06:c5:06:6b:81:33:76:ff:
1b:7a:c3:ef:11:d1:94:39:9a:e0:16:fb:fb:4e:e8:68:fe:a1:
b5:8f:2b:d2:05:90:f7:fa:ae:86:8b:c6:41:8a:88:f9:20:66:
ee:6d:f2:8b:94:10:8a:9f:13:07:f0:2e:fd:a2:e2:dc:7a:e3:
7a:5a:ae:ac:4c:e7:be:46:d1:b5:29:c8:4f:ba:1d:02:d5:82:
f0:47:95:b1:54:30:cb:b0:5c:76:2b:fc:13:49:3d:16:2e:42:
c8:6e:2b:86:3c:db:62:3a:5b:9e:b0:56:47:ff:cf:23:97:2a:
2b:ac:4e:b4:b8:34:30:4f:f0:3a:f7:89:b1:c0:a5:1b:71:07:
0b:a8:66:4e:15:e6:f8:5a:db:d7:f7:13:2d:4c:7b:75:4c:29:
5f:f9:69:df:d5:dd:59:ca:87:51:24:42:b3:58:cc:7b:2a:ff:
72:64:cb:86:2f:9a:28:c9:6b:cb:83:c4:91:7c:9d:dc:4a:09:
46:b2:54:c0:45:ef:e4:98:32:57:f7:00:ea:44:fd:df:b6:f7:
de:9e:20:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECPNsizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYy
MzAyMjgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmIzMjYyOGQ4MTIz
ZTliZDJmYjMyOGNmOGEyYzk4NzUwZDg4OWVjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtdrhw3J9u/w1b9+fO3Fkbms6ORSrMg14+qzrAV7wfP1aBk
k0qiw8uV3QbkvT3eZIA32NMiyOsREKB0PLoieXWc1DcLfkq0zb7lJ/Smbt1PJIAE
fkELcDzCCcwM6Agpd1oPLYGeXVmtUJgUFk1QbgTBz4eUyW4eWgLBxT6GdWjzwL4A
/A6CmBWPNjBcGMhxNwkLWXjP7EmsIzomY3yf1AuLjC6wmmCyjpd6nu6QgPl0pUHF
v9Kv7e3SDQrnRpt1QWhc7iMOUHM2bMmJZOrzGeHe1sW4DcNZCrnaN7N2D6tsBgJV
vI8NFql9uEjTrOgIq3whO/q4+aaXb8oIGA6/ea0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRrMmKNgSPpvS+zKM+KLJh1DYiexTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2F6SmlqWUVqNmIwdnN5alBpaXlZZFEySW5zVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBW8r0FF5/zoyfwBnkYlcfeD9P1GfecppHhbmCA
j7AYLHpPdcGlrfeZIYe1yYqcBsUGa4Ezdv8besPvEdGUOZrgFvv7Tuho/qG1jyvS
BZD3+q6Gi8ZBioj5IGbubfKLlBCKnxMH8C79ouLceuN6Wq6sTOe+RtG1KchPuh0C
1YLwR5WxVDDLsFx2K/wTST0WLkLIbiuGPNtiOluesFZH/88jlyorrE60uDQwT/A6
94mxwKUbcQcLqGZOFeb4WtvX9xMtTHt1TClf+Wnf1d1ZyodRJEKzWMx7Kv9yZMuG
L5ooyWvLg8SRfJ3cSglGslTARe/kmDJX9wDqRP3ftvfeniDN
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:25 2025 by rpki-client