Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iebeKGOA4vUBSmDVN4CIXXe-w5o.roa
File: iebeKGOA4vUBSmDVN4CIXXe-w5o.roa (raw, json)
Hash identifier: 8MeF6Ykm0SMFBYsMJsCdzNVfDhg/q5SubicIAoVy/j4=
Subject key identifier: 89:E6:DE:28:63:80:E2:F5:01:4A:60:D5:37:80:88:5D:77:BE:C3:9A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 087E2C48
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iebeKGOA4vUBSmDVN4CIXXe-w5o.roa
Signing time: Tue 14 Jun 2022 04:28:44 +0000
ROA not before: Tue 14 Jun 2022 04:28:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142486600 (0x87e2c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 14 04:28:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e6de286380e2f5014a60d53780885d77bec39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:cc:bc:86:af:d3:de:cb:1e:fa:2a:e7:a2:
9e:8b:c0:3d:98:54:06:04:e0:bd:37:65:4a:53:71:
a8:0a:8f:cc:e6:cd:ab:6f:fa:c6:1d:53:f5:e3:d6:
99:ce:bf:9f:79:96:86:dd:a6:32:c7:3d:c6:fe:40:
60:02:9a:3a:62:47:08:93:08:e5:1c:ac:90:6c:00:
d2:60:d5:e5:c9:03:29:fd:04:46:50:85:3d:7b:5f:
bf:5e:d4:42:a8:4f:e8:7f:7e:3b:70:6e:c9:f7:91:
7c:62:7e:1a:57:cd:37:4b:e6:69:61:e0:f4:d4:1f:
2f:81:b0:b9:25:c1:2a:33:d5:52:5f:76:68:3f:df:
41:53:eb:8c:bd:e3:11:4c:bd:c2:9a:91:d6:9b:dc:
27:ca:ee:69:17:ea:b6:fc:ed:3b:d5:3d:3e:4c:b9:
81:dc:aa:78:de:00:b2:fb:e4:32:bd:a5:b3:d4:88:
a5:fa:56:47:22:bd:7b:66:6d:da:ae:21:68:38:0b:
6b:37:fd:19:aa:0c:7f:ce:bf:45:8a:4e:3b:4c:cf:
4f:5a:8e:1c:59:de:43:23:59:14:a6:e8:11:67:91:
c9:8c:51:54:7f:34:10:33:43:e0:f0:17:62:e3:e6:
9d:68:a3:1a:c2:bb:57:01:57:e8:e0:36:8f:bd:6d:
f3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:DE:28:63:80:E2:F5:01:4A:60:D5:37:80:88:5D:77:BE:C3:9A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iebeKGOA4vUBSmDVN4CIXXe-w5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5e:58:fe:8c:5b:e4:d5:b1:ad:44:b4:eb:00:2c:51:05:13:4a:
a1:6b:6c:24:01:51:63:09:98:cd:fa:e1:e3:4a:5d:62:4f:9e:
ff:fa:96:bd:08:3e:92:29:db:52:e0:a1:cc:10:45:9e:47:52:
30:4e:0c:00:9e:05:65:3e:e9:96:da:f8:6b:cf:34:9e:42:eb:
32:cc:ba:1e:4e:60:3f:b6:cc:78:90:42:a1:0b:c2:e8:35:93:
da:19:3a:05:29:f7:62:2a:13:13:5d:b5:09:8e:78:d0:2f:d3:
b8:a5:ed:c0:ba:ed:78:e5:54:86:f6:7d:31:06:fa:31:2c:7b:
af:67:97:a8:87:d2:56:fd:4b:f2:c4:91:44:80:c2:86:49:5c:
63:3c:b1:31:ae:50:24:b2:3c:f5:24:dd:1c:ee:54:84:31:28:
0d:59:ef:7f:91:98:d0:51:2b:10:51:ed:15:a2:7d:9e:be:a4:
19:0d:7b:6d:a5:a9:50:bb:3c:fd:1a:f2:40:56:c9:ae:a0:0b:
96:35:45:29:38:e0:90:af:05:fc:65:9e:60:a3:24:8c:17:cf:
57:8c:9c:d5:d7:53:12:91:11:c2:48:9f:20:a2:17:dc:b8:f4:
32:e7:d2:ed:d5:cf:68:aa:9d:df:69:c1:15:e7:a1:91:b2:a9:
35:60:8f:86
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECH4sSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NDA0Mjg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODllNmRlMjg2Mzgw
ZTJmNTAxNGE2MGQ1Mzc4MDg4NWQ3N2JlYzM5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZdzLyGr9Peyx76KueinovAPZhUBgTgvTdlSlNxqAqPzObN
q2/6xh1T9ePWmc6/n3mWht2mMsc9xv5AYAKaOmJHCJMI5RyskGwA0mDV5ckDKf0E
RlCFPXtfv17UQqhP6H9+O3BuyfeRfGJ+GlfNN0vmaWHg9NQfL4GwuSXBKjPVUl92
aD/fQVPrjL3jEUy9wpqR1pvcJ8ruaRfqtvztO9U9Pky5gdyqeN4AsvvkMr2ls9SI
pfpWRyK9e2Zt2q4haDgLazf9GaoMf86/RYpOO0zPT1qOHFneQyNZFKboEWeRyYxR
VH80EDND4PAXYuPmnWijGsK7VwFX6OA2j71t838CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSJ5t4oY4Di9QFKYNU3gIhdd77DmjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2llYmVLR09BNHZVQlNtRFZONENJWFhlLXc1by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBeWP6MW+TVsa1EtOsALFEFE0qha2wkAVFjCZjN
+uHjSl1iT57/+pa9CD6SKdtS4KHMEEWeR1IwTgwAngVlPumW2vhrzzSeQusyzLoe
TmA/tsx4kEKhC8LoNZPaGToFKfdiKhMTXbUJjnjQL9O4pe3Auu145VSG9n0xBvox
LHuvZ5eoh9JW/UvyxJFEgMKGSVxjPLExrlAksjz1JN0c7lSEMSgNWe9/kZjQUSsQ
Ue0Von2evqQZDXttpalQuzz9GvJAVsmuoAuWNUUpOOCQrwX8ZZ5goySMF89XjJzV
11MSkRHCSJ8gohfcuPQy59Lt1c9oqp3facEV56GRsqk1YI+G
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:59 2025 by rpki-client