Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kPs0-RG20V_LaXl64Gg6U_dFaKo.roa
File: kPs0-RG20V_LaXl64Gg6U_dFaKo.roa (raw, json)
Hash identifier: A3TtdJwX5KrUdqPKOQf2uLDQ3WlU3B6YXqhiSo38WGQ=
Subject key identifier: 90:FB:34:F9:11:B6:D1:5F:CB:69:79:7A:E0:68:3A:53:F7:45:68:AA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 077BFB9A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kPs0-RG20V_LaXl64Gg6U_dFaKo.roa
Signing time: Wed 25 May 2022 12:47:13 +0000
ROA not before: Wed 25 May 2022 12:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125565850 (0x77bfb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 25 12:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90fb34f911b6d15fcb69797ae0683a53f74568aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:e6:72:01:fc:72:ac:51:65:ee:8a:35:80:
e9:44:93:9e:33:0d:07:e8:00:1e:fa:dd:0a:8b:9b:
58:44:88:30:60:5e:23:71:6c:1c:fa:07:03:53:11:
59:9f:07:85:e8:90:9a:ec:b3:29:99:2d:09:4e:76:
81:75:9f:1d:a3:4c:45:ee:b8:22:a5:05:f0:e2:49:
50:93:38:df:63:94:37:7b:68:75:ce:54:de:7f:40:
b6:dc:c2:e8:c5:6c:fc:96:53:5a:3a:67:2f:6e:27:
30:fe:8e:fd:61:32:93:e9:e2:fb:ce:c3:ca:a6:76:
05:40:6f:2a:6c:ab:76:b6:a5:e4:ed:cd:a0:0c:08:
a9:8d:98:da:31:26:3a:81:3d:4f:4a:99:c8:e4:94:
8e:99:c9:45:57:5e:38:48:47:fb:71:15:60:bf:e7:
1e:9e:e6:52:d3:3b:80:19:df:55:1c:54:fb:c3:f9:
b4:45:ff:42:ef:27:0f:03:c3:21:5e:a3:05:7b:d0:
5b:b3:00:37:68:18:69:be:73:1d:1c:90:df:3c:ea:
18:3c:3c:2a:2a:15:3a:2e:81:be:76:56:4e:3e:64:
3b:0d:77:85:9d:25:e2:7b:fa:a5:39:69:9f:0e:e5:
69:4a:12:77:27:0e:57:f9:fa:51:e3:be:70:e5:1b:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:34:F9:11:B6:D1:5F:CB:69:79:7A:E0:68:3A:53:F7:45:68:AA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kPs0-RG20V_LaXl64Gg6U_dFaKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
27:22:6b:d9:0d:d6:bf:5d:24:83:8f:79:75:db:29:53:61:96:
ba:b1:d8:a9:ee:85:9f:d5:d2:7f:0a:47:9c:d3:60:fd:1f:47:
dd:a4:3c:b7:f4:6e:79:ef:bc:06:33:d0:7a:1f:0d:b0:5e:e9:
f8:00:5f:ea:49:7d:93:cb:d4:61:d0:c3:63:e5:45:94:c5:fd:
8e:2f:2c:ee:e9:98:8b:2d:bf:3e:a1:df:3b:a5:21:1d:2a:15:
0c:1b:c0:9c:04:2e:fc:2a:6f:83:a1:1f:db:6c:a4:6e:d3:26:
c6:96:08:1f:0f:51:61:c5:c6:44:5f:72:a6:8c:f4:da:5d:f8:
47:c9:14:bb:23:32:77:25:ab:fc:75:3f:33:bf:fe:3b:19:30:
5a:ad:1a:eb:36:5a:da:fc:c7:28:ed:fa:18:eb:1b:26:aa:24:
55:38:12:61:66:83:19:d9:0b:ab:eb:78:aa:44:17:04:ad:61:
7d:b2:82:1b:7f:0a:8a:b4:dd:44:21:84:5b:ba:e9:b7:da:2c:
b8:40:66:48:60:3a:19:58:36:57:19:52:5f:fb:e6:4c:65:91:
e0:8f:05:c8:4c:3a:f3:5d:05:e4:97:df:3b:33:8b:24:f1:cf:
e6:3f:92:53:37:3e:85:74:50:75:a1:e0:ec:8e:a9:36:bb:c3:
d3:bb:7a:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEB3v7mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
NTEyNDcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTBmYjM0ZjkxMWI2
ZDE1ZmNiNjk3OTdhZTA2ODNhNTNmNzQ1NjhhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQY5nIB/HKsUWXuijWA6USTnjMNB+gAHvrdCoubWESIMGBe
I3FsHPoHA1MRWZ8HheiQmuyzKZktCU52gXWfHaNMRe64IqUF8OJJUJM432OUN3to
dc5U3n9AttzC6MVs/JZTWjpnL24nMP6O/WEyk+ni+87DyqZ2BUBvKmyrdral5O3N
oAwIqY2Y2jEmOoE9T0qZyOSUjpnJRVdeOEhH+3EVYL/nHp7mUtM7gBnfVRxU+8P5
tEX/Qu8nDwPDIV6jBXvQW7MAN2gYab5zHRyQ3zzqGDw8KioVOi6BvnZWTj5kOw13
hZ0l4nv6pTlpnw7laUoSdycOV/n6UeO+cOUbk+UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSQ+zT5EbbRX8tpeXrgaDpT90VoqjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2tQczAtUkcyMFZfTGFYbDY0R2c2VV9kRmFLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAnImvZDda/XSSDj3l12ylTYZa6sdip7oWf1dJ/
Ckec02D9H0fdpDy39G5577wGM9B6Hw2wXun4AF/qSX2Ty9Rh0MNj5UWUxf2OLyzu
6ZiLLb8+od87pSEdKhUMG8CcBC78Km+DoR/bbKRu0ybGlggfD1FhxcZEX3KmjPTa
XfhHyRS7IzJ3Jav8dT8zv/47GTBarRrrNlra/Mco7foY6xsmqiRVOBJhZoMZ2Qur
63iqRBcErWF9soIbfwqKtN1EIYRbuum32iy4QGZIYDoZWDZXGVJf++ZMZZHgjwXI
TDrzXQXkl987M4sk8c/mP5JTNz6FdFB1oeDsjqk2u8PTu3qc
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:52 2025 by rpki-client