Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/txCVNzv0cNbZeyvR7T_NiiyNa0s.roa
File: txCVNzv0cNbZeyvR7T_NiiyNa0s.roa (raw, json)
Hash identifier: 2neVvdEFzy9elXSu7L1b2C2+DxM2UN1IaxL11Uum3o4=
Subject key identifier: B7:10:95:37:3B:F4:70:D6:D9:7B:2B:D1:ED:3F:CD:8A:2C:8D:6B:4B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 096B8285
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/txCVNzv0cNbZeyvR7T_NiiyNa0s.roa
Signing time: Sat 02 Jul 2022 02:13:25 +0000
ROA not before: Sat 02 Jul 2022 02:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158040709 (0x96b8285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 2 02:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71095373bf470d6d97b2bd1ed3fcd8a2c8d6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:45:ea:26:d5:16:d1:5c:02:db:ff:f4:26:
1f:4f:d9:ce:58:e3:b3:5c:71:b0:1f:1e:7f:a0:b8:
de:ac:a6:42:23:df:88:57:0b:01:46:c9:7d:80:fa:
78:40:e5:c8:62:22:55:7b:b9:86:03:20:80:c2:13:
02:6f:54:a0:d6:9e:6a:bc:5f:7a:c3:7a:e3:da:91:
48:a6:16:2d:3e:e7:e7:a9:86:8a:f7:a8:f4:c7:04:
b0:22:e0:a9:1e:c8:2a:6e:7e:08:8f:87:2c:3c:7e:
eb:fa:49:e5:ff:05:ca:d1:86:68:eb:69:aa:49:99:
c3:70:9e:20:76:02:55:7e:63:79:08:23:ad:ea:1f:
d0:fd:d6:ad:ec:08:9b:67:d4:0e:52:0c:d3:02:34:
95:66:3d:58:d3:16:15:04:b0:19:b2:d5:d0:e7:a0:
3a:de:0e:dc:e1:d9:d9:09:56:1e:c2:2f:d1:a7:65:
cd:1f:c5:48:2e:02:47:72:75:d1:1e:ce:6d:f9:42:
e9:ca:d1:0e:56:09:88:d6:b6:1d:2f:ef:66:ca:f3:
fd:91:80:a2:7a:ce:75:61:c2:ea:44:c2:3d:56:8b:
32:1b:42:62:8f:f5:82:e7:d3:bb:71:aa:23:10:1e:
69:bb:f0:ef:68:8e:c3:3c:ed:99:1a:38:55:61:15:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:95:37:3B:F4:70:D6:D9:7B:2B:D1:ED:3F:CD:8A:2C:8D:6B:4B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/txCVNzv0cNbZeyvR7T_NiiyNa0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
96:05:35:ce:43:6b:83:61:44:94:b7:3f:c5:ae:fd:b7:fe:0d:
81:08:57:e7:30:21:b8:f8:e7:63:5b:5a:91:60:17:87:8b:25:
ff:98:65:8e:2d:54:ad:25:8a:15:3d:70:43:51:50:6a:76:50:
9b:11:50:59:68:be:60:56:3d:0a:8d:2f:5a:7c:cf:d1:c5:8c:
8a:a8:d1:93:a4:e0:03:3a:5c:12:6a:fc:28:4c:20:a1:be:00:
25:6b:df:87:4b:99:ed:4f:78:03:1e:b9:58:7b:03:e2:f0:f1:
c0:a2:36:43:cf:c4:a1:4b:48:92:3a:a4:8c:fd:69:57:8e:bd:
5a:ae:79:c8:3d:2e:0c:da:ac:d8:1c:97:e0:f3:c6:80:28:1e:
8f:e3:8a:d6:04:87:53:09:20:03:84:d0:5d:79:4a:a6:47:c3:
eb:4e:d2:d7:3d:ba:1b:2e:10:75:82:1d:8c:66:1e:97:1b:d2:
7b:52:f5:97:d5:0f:70:a6:2d:55:ac:1f:45:15:01:58:13:39:
e6:19:99:5d:bb:b1:72:01:ff:92:be:be:b7:b0:28:3e:70:6a:
e0:10:ff:bc:14:e0:23:91:a2:5c:c3:ed:66:70:61:d1:cb:c6:
29:99:e1:d4:95:55:a0:89:89:45:fc:d4:39:ef:4e:27:78:01:
8f:72:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:31 2025 by rpki-client