Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa
File: mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa (raw, json)
Hash identifier: N9naQp6A++eQ7Y388iZ5y/AAeqhjoKkAX8kYUM3IGKk=
Subject key identifier: 99:BC:DA:A4:80:0F:AA:53:55:FB:6C:EE:5F:D4:C9:CC:EF:06:59:E4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 078E5697
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa
Signing time: Fri 27 May 2022 01:35:15 +0000
ROA not before: Fri 27 May 2022 01:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126768791 (0x78e5697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 27 01:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99bcdaa4800faa5355fb6cee5fd4c9ccef0659e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:40:e2:24:e2:31:be:b9:47:d3:e8:38:0f:
1d:2f:04:c1:4f:f5:16:60:a9:93:8d:8b:28:00:15:
e9:21:e9:3b:79:b6:db:3e:1a:62:34:ab:f0:da:85:
87:f9:1d:10:f7:56:b0:2c:b6:f9:99:8f:8e:38:a2:
44:0f:99:93:cb:f3:f7:30:69:cf:7e:29:75:43:69:
46:ac:f4:23:b2:73:70:46:20:8a:fd:6b:0d:e6:e4:
6e:c6:4b:21:d7:25:f3:37:76:a5:64:08:22:1b:35:
e3:6f:7a:00:3f:ae:43:d2:e4:83:db:f3:b3:0f:d3:
b6:3d:3d:ff:a3:ad:bf:f6:96:fe:75:3a:4c:1e:3e:
6b:c2:69:98:34:a9:95:a2:11:92:fa:42:3d:0f:6e:
bf:8d:2a:6d:88:1c:1d:7b:de:79:40:5a:13:ab:b7:
03:d4:c8:9d:c0:67:31:96:43:e2:64:04:61:51:a3:
b4:23:6d:69:87:58:e8:9c:8d:f1:45:cd:7f:6b:2d:
d8:a7:de:7d:1e:f1:86:c6:5d:4c:e3:56:7f:8a:5d:
e2:5b:ad:51:eb:d7:66:e1:86:c7:cc:ec:fe:fa:12:
ee:85:de:52:93:d8:6a:13:96:ea:74:8e:44:4b:d5:
89:4b:99:ca:e5:e4:ad:a3:be:9d:52:94:57:ca:75:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:DA:A4:80:0F:AA:53:55:FB:6C:EE:5F:D4:C9:CC:EF:06:59:E4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
a9:50:1a:a2:5a:c6:4b:0f:c9:63:3f:48:54:90:13:8c:98:52:
ad:86:95:a5:90:3b:b2:e1:7c:bb:8c:3c:88:c8:98:b5:42:6a:
fe:e6:47:7f:11:4c:1f:16:4b:f6:0e:ae:9b:50:f7:a8:4e:6b:
c4:9d:af:34:0e:40:28:31:51:c8:80:f0:b2:31:b5:6e:16:a4:
02:d1:75:aa:a1:49:d2:4d:79:38:66:fd:33:70:95:5f:24:27:
cd:76:a6:c2:43:5d:bf:0d:b4:ae:bc:12:6c:c5:38:9c:53:e4:
6f:d3:11:a5:3e:cd:40:02:46:bb:d4:3b:ac:2b:5c:b3:fb:80:
51:d6:af:14:cb:be:6f:95:d3:a8:ac:86:59:ad:ef:65:b9:3f:
63:b8:ee:13:9d:05:9b:ec:b8:8e:17:35:18:95:2f:34:62:6b:
75:ca:a2:7a:29:01:c7:4f:1c:e9:55:71:fe:d4:91:e2:76:f8:
14:2a:fd:7a:28:6f:10:18:89:98:42:0e:8f:22:84:70:6c:fc:
b8:3d:e3:75:f7:4e:e2:9d:19:68:83:90:f8:9b:af:0e:90:48:
2a:45:5b:a2:e0:f5:d5:19:f8:ec:f6:4c:93:7c:cb:e6:b8:26:
69:53:71:b1:03:89:a4:fe:e3:35:c0:9e:86:b8:df:24:06:ac:
31:f3:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:10 2025 by rpki-client