Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa
File: u8-PkHmEq_f6-8nRbpaM68JOh4c.roa (raw, json)
Hash identifier: /fXVh3Gqrvxaedf16L78kbVI4fXpzyIUUHfL8mBI6z0=
Subject key identifier: BB:CF:8F:90:79:84:AB:F7:FA:FB:C9:D1:6E:96:8C:EB:C2:4E:87:87
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 080903E5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa
Signing time: Sun 05 Jun 2022 03:41:27 +0000
ROA not before: Sun 05 Jun 2022 03:41:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134808549 (0x80903e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 5 03:41:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbcf8f907984abf7fafbc9d16e968cebc24e8787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:e7:2b:e4:70:d4:57:62:30:e2:b4:55:92:
ff:e2:47:62:ba:18:7c:1f:d5:b1:4b:0f:dd:35:8a:
78:7b:89:74:f1:f3:b7:65:66:58:14:83:6e:6a:21:
91:17:c0:cd:32:53:b6:0c:4a:95:bd:e6:f3:af:7e:
61:49:32:f7:33:76:41:ee:96:3e:66:19:b2:9e:94:
6f:45:02:d3:6e:10:b5:41:5d:e2:0b:b7:5b:f0:b0:
43:e1:f0:22:f8:05:2e:e4:68:e5:52:8d:54:8f:92:
cf:d7:63:ea:80:49:e9:bf:f0:3f:46:ad:4f:0c:47:
b9:26:60:6d:15:8a:12:d4:fc:30:54:e2:bc:b8:d4:
9a:98:c0:69:e4:87:1a:f9:21:fc:57:91:36:db:dc:
53:0d:64:0e:21:e7:69:0f:67:02:b2:83:2b:54:e7:
06:70:dd:e9:04:4a:ad:06:19:99:11:96:6b:c5:27:
8e:51:62:6d:3c:7f:ed:91:cb:d9:c2:19:f2:76:6f:
37:8b:31:59:de:0b:61:3f:1c:2e:50:03:eb:9c:3d:
14:28:7d:dd:ee:dd:6a:35:46:49:1c:57:58:88:61:
d2:ab:99:d1:09:5b:9d:7a:2d:b3:47:04:1e:a9:a5:
ea:6a:4e:37:bb:5c:73:3a:1d:29:24:17:eb:40:70:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:8F:90:79:84:AB:F7:FA:FB:C9:D1:6E:96:8C:EB:C2:4E:87:87
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8-PkHmEq_f6-8nRbpaM68JOh4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:5c:cd:50:c2:65:78:c1:d9:d6:ee:37:e3:44:9f:f5:16:
6f:05:20:d2:04:3c:76:4a:a1:16:3f:a7:23:0f:b4:1e:5f:da:
9c:17:33:2e:5a:81:3f:ff:3a:39:67:f1:ba:49:d0:06:c4:59:
15:b9:55:ff:46:ec:c3:70:44:1d:ae:75:2b:82:e5:4e:36:f8:
20:7b:54:31:c3:7a:8e:4e:f2:19:2d:1a:2e:f5:ca:c4:f3:a0:
11:c5:c0:2f:09:b4:5b:cf:6d:6e:1c:6e:36:de:dd:13:3b:1d:
9f:8b:fd:d2:1c:8e:03:c7:b4:78:56:c1:8e:e4:d7:b7:53:bd:
98:6f:66:74:85:03:85:f3:17:0b:e2:2a:77:85:77:7a:ae:6a:
c6:69:fe:29:d5:62:dc:4d:4f:8d:1d:1f:b6:eb:93:1f:98:a7:
e0:b5:26:06:40:71:73:e5:f1:11:29:67:bf:ee:13:88:00:aa:
aa:f6:d2:51:29:9a:ea:19:7c:3a:a1:61:67:f3:46:2e:3e:31:
3f:d3:c3:d6:5a:17:23:c3:a7:68:3f:e6:18:57:b9:3c:b8:eb:
64:77:c7:71:ee:b2:54:5b:27:05:51:72:ff:4d:3d:e4:ec:33:
da:c2:37:59:99:81:91:03:9b:79:b3:09:50:12:7b:01:35:d3:
c6:7b:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:56 2025 by rpki-client