Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wnLIsfFdvLLZ6LYjhPdvv8WAIbc.roa
File: wnLIsfFdvLLZ6LYjhPdvv8WAIbc.roa (raw, json)
Hash identifier: 1rOlq+FZcQ6Mp1JrslwQosVJcaQBejyT6rZIEgVMCZQ=
Subject key identifier: C2:72:C8:B1:F1:5D:BC:B2:D9:E8:B6:23:84:F7:6F:BF:C5:80:21:B7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04357728
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wnLIsfFdvLLZ6LYjhPdvv8WAIbc.roa
Signing time: Tue 15 Feb 2022 14:12:10 +0000
ROA not before: Tue 15 Feb 2022 14:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70612776 (0x4357728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 15 14:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c272c8b1f15dbcb2d9e8b62384f76fbfc58021b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:f3:bb:a9:82:be:f8:c5:48:0b:e2:ce:d3:
1d:4e:91:1d:75:64:c2:32:c1:64:56:c2:ec:09:f7:
bf:04:5b:e2:95:fe:02:a7:a8:c3:46:06:da:e5:77:
92:e1:86:40:43:f5:a6:73:1f:1d:c3:55:0c:d5:04:
36:aa:ba:d8:06:51:4b:e2:89:2b:c6:69:ec:b0:28:
b2:e2:8f:ad:e1:c6:9a:b1:57:9f:99:18:e5:19:63:
eb:d4:9c:ca:cc:2f:e8:97:9d:d9:07:62:ad:cf:e6:
dd:47:1e:17:0c:4d:02:95:2c:12:ef:47:3f:65:e5:
9f:48:71:9e:75:94:1d:2b:4a:4e:ff:c4:9f:45:d9:
9e:ff:2a:37:c8:ea:27:12:38:0c:98:fb:54:a6:bd:
bf:a7:ac:a0:e8:df:9e:be:c2:b3:cc:26:c4:b0:7f:
4e:c2:fd:03:ab:c5:3a:ef:da:22:09:83:a4:d8:99:
0a:3d:2e:f4:3c:99:b8:bc:5f:04:03:62:fd:88:55:
15:bb:2c:d8:fe:36:c4:e9:39:6f:70:d2:38:8f:b4:
b8:5f:11:86:1f:60:3a:7b:3e:fa:67:8a:7e:30:2c:
5b:de:cb:8a:52:5f:90:ca:05:65:b9:b0:66:28:51:
66:0a:eb:52:b1:73:bd:60:62:12:67:c2:68:37:29:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:C8:B1:F1:5D:BC:B2:D9:E8:B6:23:84:F7:6F:BF:C5:80:21:B7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wnLIsfFdvLLZ6LYjhPdvv8WAIbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
73:76:29:fd:22:f3:b6:d4:b0:34:84:03:26:07:10:f3:88:a9:
9c:cc:57:4a:8a:74:90:a6:cd:08:b3:83:79:16:bb:72:4d:7f:
78:7e:a9:98:20:65:ff:13:c9:2c:b6:03:0c:ed:0b:0e:c5:49:
1a:1a:56:79:89:43:9c:21:d0:d0:9a:b3:f2:ed:52:8e:bb:b1:
55:7b:24:e8:bc:ce:10:2c:18:e0:90:79:b3:c1:49:22:e5:07:
c6:97:67:f5:65:06:91:4b:3f:0c:3e:a8:4d:ea:44:41:60:aa:
8d:92:17:83:28:6c:75:13:0f:4d:23:a8:84:b4:1d:3c:32:ee:
20:a1:8d:4e:c4:9c:f8:68:d4:a1:b1:e5:4d:4e:68:18:5f:06:
b4:e1:c1:9c:6f:83:41:bb:c3:50:74:b4:e3:d8:15:a0:0e:a3:
7c:db:db:61:4a:cf:9d:94:d5:93:38:95:13:45:d8:3c:ac:b0:
d6:6e:cf:eb:e3:81:f8:44:77:60:c9:3c:a7:e4:74:2e:34:55:
21:86:93:9f:ef:db:03:d8:d3:da:94:48:f1:ce:30:26:6e:bb:
3c:66:5f:27:96:19:0d:36:64:12:4e:8b:9d:af:88:79:8e:f8:
82:ef:82:6e:53:d2:b9:6a:65:c1:35:39:c6:da:0a:bc:b7:84:
37:96:b1:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBDV3KDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIx
NTE0MTIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI3MmM4YjFmMTVk
YmNiMmQ5ZThiNjIzODRmNzZmYmZjNTgwMjFiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpw87upgr74xUgL4s7THU6RHXVkwjLBZFbC7An3vwRb4pX+
Aqeow0YG2uV3kuGGQEP1pnMfHcNVDNUENqq62AZRS+KJK8Zp7LAosuKPreHGmrFX
n5kY5Rlj69Scyswv6Jed2Qdirc/m3UceFwxNApUsEu9HP2Xln0hxnnWUHStKTv/E
n0XZnv8qN8jqJxI4DJj7VKa9v6esoOjfnr7Cs8wmxLB/TsL9A6vFOu/aIgmDpNiZ
Cj0u9DyZuLxfBANi/YhVFbss2P42xOk5b3DSOI+0uF8Rhh9gOns++meKfjAsW97L
ilJfkMoFZbmwZihRZgrrUrFzvWBiEmfCaDcpbCECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTCcsix8V28stnotiOE92+/xYAhtzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3duTElzZkZkdkxMWjZMWWpoUGR2djhXQUliYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBzdin9IvO21LA0hAMmBxDziKmczFdKinSQps0I
s4N5FrtyTX94fqmYIGX/E8kstgMM7QsOxUkaGlZ5iUOcIdDQmrPy7VKOu7FVeyTo
vM4QLBjgkHmzwUki5QfGl2f1ZQaRSz8MPqhN6kRBYKqNkheDKGx1Ew9NI6iEtB08
Mu4goY1OxJz4aNShseVNTmgYXwa04cGcb4NBu8NQdLTj2BWgDqN829thSs+dlNWT
OJUTRdg8rLDWbs/r44H4RHdgyTyn5HQuNFUhhpOf79sD2NPalEjxzjAmbrs8Zl8n
lhkNNmQSToudr4h5jviC74JuU9K5amXBNTnG2gq8t4Q3lrHi
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:09 2025 by rpki-client