Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oN1uebrpMPnz2jmquVImyHYJ2Dg.roa
File: oN1uebrpMPnz2jmquVImyHYJ2Dg.roa (raw, json)
Hash identifier: 2OneUj1Ey/LIuhFfDwMX1C/II7E2N7acsmW7fqQj7AA=
Subject key identifier: A0:DD:6E:79:BA:E9:30:F9:F3:DA:39:AA:B9:52:26:C8:76:09:D8:38
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0185700B89BADB6F345B42D0EDC405E53623
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oN1uebrpMPnz2jmquVImyHYJ2Dg.roa
Signing time: Mon 02 Jan 2023 01:14:42 +0000
ROA not before: Mon 02 Jan 2023 01:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:89:ba:db:6f:34:5b:42:d0:ed:c4:05:e5:36:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 2 01:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0dd6e79bae930f9f3da39aab95226c87609d838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:47:7b:e4:a9:03:70:29:ff:d8:4c:fb:23:
42:28:c3:a5:42:0e:5b:5e:84:15:19:59:67:b6:61:
b0:84:76:eb:b9:36:8c:24:e0:12:f2:3b:7a:99:b8:
8f:76:15:bf:8b:cf:b7:4a:46:4e:8d:ef:ba:0c:7c:
bb:4b:15:d2:85:0e:07:6f:5f:26:f9:59:ec:76:f0:
b4:25:f8:a4:a2:53:fc:50:55:90:4a:8e:7a:97:83:
c3:7d:e1:3c:c0:6c:a8:21:ec:df:73:ba:b9:6e:f9:
76:85:d2:dc:c5:d9:35:76:41:97:c9:2c:1f:1b:ff:
d1:a2:a5:8f:4b:1c:01:d3:7a:cd:19:60:85:16:d8:
92:09:bb:8f:12:0a:1d:91:12:19:20:b9:65:4c:0d:
c6:7c:2b:ff:64:cd:5e:f5:d5:b5:49:1c:cc:96:61:
44:09:a0:b4:d8:40:60:72:88:6a:21:24:dc:90:d8:
9e:70:c9:12:5a:5b:fc:34:ff:b1:a9:d8:69:1b:3c:
ed:11:ae:62:1a:01:c6:54:f4:81:bd:9b:1e:71:ac:
e4:80:3b:be:83:61:01:f3:cd:64:3a:d4:01:bf:8a:
96:73:a4:a0:08:3c:d3:6a:b4:8a:16:af:48:93:ed:
f0:62:ed:ad:ef:63:21:12:47:16:6e:cf:77:a0:6c:
08:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:6E:79:BA:E9:30:F9:F3:DA:39:AA:B9:52:26:C8:76:09:D8:38
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oN1uebrpMPnz2jmquVImyHYJ2Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
27:df:64:05:48:55:04:62:c3:8e:bd:c6:78:b6:a7:77:0c:a0:
f5:72:9a:83:31:0e:b1:22:13:d3:eb:2c:f9:2f:3f:c3:b6:96:
32:82:75:e2:76:18:56:4b:f4:bd:42:57:b7:cc:7a:52:ef:d1:
75:4f:23:b3:90:17:96:d0:f5:07:13:61:e0:25:e0:84:5b:e2:
7c:95:22:6e:7f:27:64:a1:e0:d1:25:96:3f:dc:17:b9:92:b5:
b3:2a:9e:8f:68:cd:99:bd:b1:da:fb:c9:b2:d8:7b:7e:59:35:
0c:27:76:7c:40:3d:48:43:00:99:01:4f:a2:ae:81:f1:c2:d3:
48:b0:5c:52:50:0e:02:5d:d1:28:0f:43:f8:a2:ce:92:3e:52:
a0:27:ca:a7:42:4f:42:11:99:64:0c:69:d6:22:b4:a9:09:26:
03:5d:2d:49:cb:36:17:3d:ce:35:e9:d3:ab:00:36:31:9c:63:
98:fb:34:8e:6a:98:a1:cb:16:a5:07:fb:f2:7e:77:4a:f4:38:
6f:be:86:10:d8:2b:21:45:f1:cc:72:73:4e:9d:2a:84:f4:27:
bf:dd:f4:13:bf:95:e1:6a:8a:b8:b1:b2:57:7a:d8:90:e3:3a:
e6:63:5b:db:27:da:10:83:39:7c:99:e9:e1:6a:8e:e0:69:3f:
bf:da:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:28 2025 by rpki-client