Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ea_CIIMunHo-GvjS3LvrMJ0RS18.roa
File: ea_CIIMunHo-GvjS3LvrMJ0RS18.roa (raw, json)
Hash identifier: 14+AOBEWyXkrrG4IxiUlz+cD/7mEqiQxCwFfJyLRcVE=
Subject key identifier: 79:AF:C2:20:83:2E:9C:7A:3E:1A:F8:D2:DC:BB:EB:30:9D:11:4B:5F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08B39A2B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ea_CIIMunHo-GvjS3LvrMJ0RS18.roa
Signing time: Sat 18 Jun 2022 02:23:44 +0000
ROA not before: Sat 18 Jun 2022 02:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145988139 (0x8b39a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 18 02:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79afc220832e9c7a3e1af8d2dcbbeb309d114b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:9c:20:81:f7:f3:c3:21:53:f7:5d:fa:19:
01:53:b9:41:b0:d6:79:f7:74:59:a7:18:df:fa:00:
d1:5e:12:d1:0f:aa:7b:69:bd:84:58:5a:4b:e9:0c:
f6:e9:fe:56:63:14:a9:6a:a6:70:18:e0:8b:77:bd:
e4:9e:47:7e:b2:49:3d:75:92:ac:f5:ee:91:c4:e5:
50:4a:c3:cb:19:3a:7f:ae:6e:2d:23:1b:34:f6:ee:
7c:e5:df:cd:78:3b:ce:b1:92:ce:3b:cc:d1:59:8a:
d2:ae:cb:1d:9c:02:89:9b:25:77:fe:7e:2d:14:60:
92:af:45:d8:ea:f0:e4:a2:e0:3e:bf:fb:42:dd:8d:
cc:09:b6:a3:62:1a:74:c2:20:e3:06:74:da:25:55:
e3:52:e1:6d:df:70:80:86:bd:50:95:be:31:17:83:
fa:62:84:ca:6d:33:de:9f:40:31:83:4c:49:dd:e7:
a5:e8:cd:16:e8:71:ff:97:20:7c:29:70:18:4e:2c:
a5:f3:c9:c8:2d:fe:b5:14:a1:e8:34:bb:a1:53:d5:
75:d9:09:2c:8e:ea:ba:a9:4b:5b:cc:02:cd:d3:8c:
42:fe:37:d9:77:5f:a2:f9:0d:3c:73:35:9b:aa:4d:
60:cf:de:bc:6d:b4:67:78:b4:44:32:12:e9:66:28:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:C2:20:83:2E:9C:7A:3E:1A:F8:D2:DC:BB:EB:30:9D:11:4B:5F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ea_CIIMunHo-GvjS3LvrMJ0RS18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c2:ad:0c:6c:87:ad:b9:90:a4:ac:4d:87:9f:ad:9a:72:0e:
aa:ec:9b:f2:23:bc:4a:a4:ff:01:7d:14:e3:be:d6:e4:b0:d6:
83:32:5e:a5:63:53:ce:10:bf:b5:8f:f3:d3:19:ce:49:45:7e:
ae:b7:04:bc:b2:2d:75:70:62:d5:5f:ce:b4:52:5b:b3:0b:c7:
e0:2c:3d:19:53:86:c4:4f:96:a6:ab:c5:19:03:a5:61:d1:2b:
bb:86:a5:8b:42:36:22:a6:b3:e2:09:fb:fa:f8:d8:a5:ee:64:
7a:11:f6:a9:93:13:6a:03:59:04:44:46:da:b4:f4:57:31:db:
6d:fc:83:8b:bf:ff:b5:03:04:fb:bd:cf:bd:13:7a:2b:a8:71:
b7:fc:36:2b:0b:ad:92:13:22:8f:51:4d:33:06:e1:5c:9f:1b:
a2:c8:77:59:c4:9f:f9:5d:7f:15:56:21:c3:31:c7:9c:06:0f:
5b:b2:1d:e9:5b:44:08:ea:41:ac:28:15:ee:dd:3e:e0:85:31:
4b:e8:2c:42:b3:e0:a1:84:0a:4f:2d:f8:a8:a0:28:fa:cf:57:
67:7a:29:93:96:d9:98:e1:77:a6:15:91:42:f5:3c:f0:09:da:
17:e0:9d:fd:75:58:0c:f2:47:5f:54:66:f0:b3:d7:64:1a:dd:
96:23:a4:b6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECLOaKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
ODAyMjM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzlhZmMyMjA4MzJl
OWM3YTNlMWFmOGQyZGNiYmViMzA5ZDExNGI1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJV5nCCB9/PDIVP3XfoZAVO5QbDWefd0WacY3/oA0V4S0Q+q
e2m9hFhaS+kM9un+VmMUqWqmcBjgi3e95J5HfrJJPXWSrPXukcTlUErDyxk6f65u
LSMbNPbufOXfzXg7zrGSzjvM0VmK0q7LHZwCiZsld/5+LRRgkq9F2Orw5KLgPr/7
Qt2NzAm2o2IadMIg4wZ02iVV41Lhbd9wgIa9UJW+MReD+mKEym0z3p9AMYNMSd3n
pejNFuhx/5cgfClwGE4spfPJyC3+tRSh6DS7oVPVddkJLI7quqlLW8wCzdOMQv43
2XdfovkNPHM1m6pNYM/evG20Z3i0RDIS6WYouh0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5r8Iggy6cej4a+NLcu+swnRFLXzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2VhX0NJSU11bkhvLUd2alMzTHZyTUowUlMxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAcsKtDGyHrbmQpKxNh5+tmnIOquyb8iO8SqT/AX0U477W5LDWgzJepWNTzhC/
tY/z0xnOSUV+rrcEvLItdXBi1V/OtFJbswvH4Cw9GVOGxE+WpqvFGQOlYdEru4al
i0I2Iqaz4gn7+vjYpe5kehH2qZMTagNZBERG2rT0VzHbbfyDi7//tQME+73PvRN6
K6hxt/w2KwutkhMij1FNMwbhXJ8bosh3WcSf+V1/FVYhwzHHnAYPW7Id6VtECOpB
rCgV7t0+4IUxS+gsQrPgoYQKTy34qKAo+s9XZ3opk5bZmOF3phWRQvU88AnaF+Cd
/XVYDPJHX1Rm8LPXZBrdliOktg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:33 2025 by rpki-client