Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa
File: d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa (raw, json)
Hash identifier: 2KUX//YBEVY7X66Gl1s1JC4BBN+sB7mAhhGoIJkkCTA=
Subject key identifier: 77:C3:CA:C1:B1:65:E6:3C:DF:CB:46:B2:89:9F:55:28:23:6E:54:6A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 068D6179
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa
Signing time: Sat 07 May 2022 01:32:19 +0000
ROA not before: Sat 07 May 2022 01:32:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109928825 (0x68d6179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 7 01:32:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77c3cac1b165e63cdfcb46b2899f5528236e546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:c8:2d:e9:87:a4:20:f5:06:ea:76:e7:33:
99:91:b6:7c:b8:1e:ac:dd:d0:b9:4e:ef:a4:8d:8f:
65:df:32:6a:71:d9:c0:b3:ea:10:c3:3f:ba:68:1d:
87:e4:d9:2a:80:0f:eb:a8:c3:72:4a:fa:d7:fc:7c:
9c:44:af:f6:3c:67:a9:07:7e:97:a8:7e:ab:7b:3e:
c1:65:a8:5c:b2:8f:dd:6e:a1:d7:b4:43:20:5d:43:
00:fb:67:a0:b2:75:4f:98:07:15:23:99:54:e4:84:
18:44:0a:23:df:43:6f:b6:96:f4:3e:81:5f:b8:62:
90:04:05:dd:25:dc:71:09:7f:6a:1b:ae:a1:0a:f8:
c1:88:1b:73:16:34:1c:aa:bf:d6:1f:39:aa:19:f3:
2a:0f:60:f6:9a:80:bf:14:f1:04:f0:e9:fb:69:23:
b0:b4:7d:e4:19:45:44:da:91:49:1f:55:f8:c0:2d:
88:3b:54:5b:26:7c:b4:fa:9b:f6:d2:57:85:3a:06:
70:fb:2c:53:64:99:52:c4:61:30:a7:68:dc:1c:f6:
be:9e:d9:84:d7:bb:b2:ec:7b:e2:f5:64:9a:cf:fc:
ad:9b:56:ae:15:6f:fc:43:2a:c9:0d:d1:06:21:78:
b6:f5:69:1e:0c:85:59:1d:19:be:41:d8:24:2e:b3:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C3:CA:C1:B1:65:E6:3C:DF:CB:46:B2:89:9F:55:28:23:6E:54:6A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d8PKwbFl5jzfy0ayiZ9VKCNuVGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e0:8e:a7:4b:1b:6d:e5:b2:c3:7a:6c:ed:92:b0:5e:11:44:
2b:09:15:48:66:e8:2d:41:e1:21:c9:bb:65:ca:3c:2c:06:69:
d5:5c:8c:75:8b:67:c0:f6:2c:b1:4a:15:02:d9:a1:82:4a:4d:
7c:da:3b:8b:49:b6:f2:94:47:64:70:da:6f:cc:e5:33:ae:f8:
e2:cf:3a:86:3d:79:5d:01:97:3d:79:48:20:e4:e0:84:64:d7:
52:78:c6:7e:92:af:58:97:1d:5a:e9:2a:df:c2:50:c0:95:8f:
9e:f7:0d:91:17:aa:2f:5f:f5:40:77:04:3c:55:d7:73:7a:2f:
27:a7:ad:58:89:88:eb:cf:9f:4d:4c:b7:95:d3:02:8f:e2:38:
77:4b:07:ce:a9:4f:33:53:82:bc:ba:20:a7:cd:9b:18:06:8c:
05:65:22:3f:9b:67:ee:f6:72:1f:e2:02:09:67:ba:90:f9:9b:
f2:c7:9b:d0:05:f2:58:d9:a5:3d:1b:ce:73:ab:ad:9e:c9:4e:
a4:4e:76:2c:fd:4c:99:fc:80:8b:7e:55:9c:bc:a4:b5:db:48:
53:37:38:0f:14:ce:c9:46:a3:1c:97:fa:8c:92:40:45:f5:64:
29:03:10:99:6c:c5:e0:23:9f:c9:5b:54:e3:9f:a2:9b:15:a8:
0d:1c:b9:27
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBo1heTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUw
NzAxMzIxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdjM2NhYzFiMTY1
ZTYzY2RmY2I0NmIyODk5ZjU1MjgyMzZlNTQ2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANvKyC3ph6Qg9QbqduczmZG2fLgerN3QuU7vpI2PZd8yanHZ
wLPqEMM/umgdh+TZKoAP66jDckr61/x8nESv9jxnqQd+l6h+q3s+wWWoXLKP3W6h
17RDIF1DAPtnoLJ1T5gHFSOZVOSEGEQKI99Db7aW9D6BX7hikAQF3SXccQl/ahuu
oQr4wYgbcxY0HKq/1h85qhnzKg9g9pqAvxTxBPDp+2kjsLR95BlFRNqRSR9V+MAt
iDtUWyZ8tPqb9tJXhToGcPssU2SZUsRhMKdo3Bz2vp7ZhNe7sux74vVkms/8rZtW
rhVv/EMqyQ3RBiF4tvVpHgyFWR0ZvkHYJC6z8GECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR3w8rBsWXmPN/LRrKJn1UoI25UajAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2Q4UEt3YkZsNWp6ZnkwYXlpWjlWS0NOdVZHby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEAGuCOp0sbbeWyw3ps7ZKwXhFEKwkVSGboLUHhIcm7Zco8LAZp1VyMdYtnwPYs
sUoVAtmhgkpNfNo7i0m28pRHZHDab8zlM6744s86hj15XQGXPXlIIOTghGTXUnjG
fpKvWJcdWukq38JQwJWPnvcNkReqL1/1QHcEPFXXc3ovJ6etWImI68+fTUy3ldMC
j+I4d0sHzqlPM1OCvLogp82bGAaMBWUiP5tn7vZyH+ICCWe6kPmb8seb0AXyWNml
PRvOc6utnslOpE52LP1MmfyAi35VnLyktdtIUzc4DxTOyUajHJf6jJJARfVkKQMQ
mWzF4COfyVtU45+imxWoDRy5Jw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:13 2025 by rpki-client