Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/caJp2_AM8C1dpJCCuU8S7BbR7qQ.roa
File: caJp2_AM8C1dpJCCuU8S7BbR7qQ.roa (raw, json)
Hash identifier: jYaXI/kRwseXDDrKp0FhgCOcpPOJFYw4h7XMP88bbbQ=
Subject key identifier: 71:A2:69:DB:F0:0C:F0:2D:5D:A4:90:82:B9:4F:12:EC:16:D1:EE:A4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05D1D6E2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/caJp2_AM8C1dpJCCuU8S7BbR7qQ.roa
Signing time: Mon 11 Apr 2022 23:33:17 +0000
ROA not before: Mon 11 Apr 2022 23:33:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97638114 (0x5d1d6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 11 23:33:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71a269dbf00cf02d5da49082b94f12ec16d1eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:bd:6b:d4:51:97:ae:6f:28:0a:f4:4c:c9:
16:5c:6b:fb:93:21:4a:71:ed:83:99:d3:5a:08:9c:
9c:67:1a:2d:a8:8b:4d:6f:73:de:8b:1d:5b:e7:19:
ca:3b:fd:96:0b:2a:1f:04:17:fb:d6:46:75:ac:24:
dd:76:26:10:c4:c9:06:3e:ed:5a:27:3d:55:1c:f1:
cd:ca:3e:81:7c:4d:e9:53:50:e2:26:46:8d:6b:45:
1e:79:4e:d3:59:ff:07:39:fb:12:17:56:0d:d7:d4:
0d:49:34:aa:fb:77:77:52:95:7b:93:8b:bf:84:4d:
cb:dd:11:97:38:b0:13:95:17:eb:7f:a5:cb:aa:2b:
b0:d7:5b:74:d5:eb:28:2a:eb:b4:1a:4b:72:48:17:
95:9f:8a:16:e0:c3:35:d0:d2:2f:18:4f:46:8c:14:
88:3d:c7:12:40:a8:01:8a:16:82:fe:ef:db:e0:d4:
42:ac:d4:b7:0a:3c:5c:03:db:12:1e:09:b7:39:3d:
2f:c9:e0:a0:06:24:99:81:c1:64:64:7b:89:a7:a8:
2c:a7:67:8b:7a:18:1a:9e:83:d9:11:c6:c6:22:63:
7c:65:7c:12:ce:f0:20:28:d1:0d:70:11:b7:cd:05:
5d:8a:91:bd:a2:2c:cb:fd:6f:ff:b4:09:6f:af:fd:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:69:DB:F0:0C:F0:2D:5D:A4:90:82:B9:4F:12:EC:16:D1:EE:A4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/caJp2_AM8C1dpJCCuU8S7BbR7qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
7b:1c:0f:0e:f8:88:8d:d0:ff:5a:99:50:36:69:49:0e:e1:16:
9a:ac:90:fe:c5:e5:e3:58:53:3a:ae:b8:7e:7a:1d:16:48:f5:
13:8a:17:67:6b:b3:b0:7a:a5:3e:75:5f:e8:34:e8:49:2f:03:
78:33:3b:a4:b8:d8:00:f7:c2:f5:02:8d:8c:9e:16:44:61:b0:
8b:61:10:cb:33:8b:fd:41:f1:fa:91:cb:ab:55:a3:60:15:b0:
0c:7f:7a:49:9d:0a:90:2c:4c:4c:7c:d6:97:0a:e8:b3:d7:33:
a9:da:ac:49:4d:22:aa:06:1e:18:c2:9e:76:10:76:0d:eb:38:
f9:6a:c3:95:f4:4a:f7:e3:22:54:bb:6f:59:25:a5:dc:5f:36:
22:f3:55:e0:aa:dd:64:50:4a:15:00:45:a3:69:bc:75:3d:b7:
6e:21:f7:b1:3a:71:90:1b:06:97:56:12:07:86:b3:4e:59:d6:
b4:f9:13:fc:53:97:3b:c7:ee:23:80:1e:dd:9a:f8:f9:73:ea:
22:11:1d:01:bb:96:46:8e:1f:7e:4b:02:44:a5:9f:fd:59:4e:
36:d7:66:44:a1:b6:c5:b9:cb:86:9b:49:37:45:11:13:3e:b6:
60:7e:08:06:af:27:88:84:e0:81:45:80:41:46:61:f5:13:46:
3a:04:e4:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBdHW4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQx
MTIzMzMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzFhMjY5ZGJmMDBj
ZjAyZDVkYTQ5MDgyYjk0ZjEyZWMxNmQxZWVhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr6vWvUUZeubygK9EzJFlxr+5MhSnHtg5nTWgicnGcaLaiL
TW9z3osdW+cZyjv9lgsqHwQX+9ZGdawk3XYmEMTJBj7tWic9VRzxzco+gXxN6VNQ
4iZGjWtFHnlO01n/Bzn7EhdWDdfUDUk0qvt3d1KVe5OLv4RNy90RlziwE5UX63+l
y6orsNdbdNXrKCrrtBpLckgXlZ+KFuDDNdDSLxhPRowUiD3HEkCoAYoWgv7v2+DU
QqzUtwo8XAPbEh4Jtzk9L8ngoAYkmYHBZGR7iaeoLKdni3oYGp6D2RHGxiJjfGV8
Es7wICjRDXARt80FXYqRvaIsy/1v/7QJb6/9QxMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRxomnb8AzwLV2kkIK5TxLsFtHupDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2NhSnAyX0FNOEMxZHBKQ0N1VThTN0JiUjdxUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB7HA8O+IiN0P9amVA2aUkO4RaarJD+xeXjWFM6
rrh+eh0WSPUTihdna7OweqU+dV/oNOhJLwN4MzukuNgA98L1Ao2MnhZEYbCLYRDL
M4v9QfH6kcurVaNgFbAMf3pJnQqQLExMfNaXCuiz1zOp2qxJTSKqBh4Ywp52EHYN
6zj5asOV9Er34yJUu29ZJaXcXzYi81Xgqt1kUEoVAEWjabx1PbduIfexOnGQGwaX
VhIHhrNOWda0+RP8U5c7x+4jgB7dmvj5c+oiER0Bu5ZGjh9+SwJEpZ/9WU4212ZE
obbFucuGm0k3RRETPrZgfggGryeIhOCBRYBBRmH1E0Y6BOTd
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:18 2025 by rpki-client