Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wsi3UgZoI5UtQSTDcJRxQ921vWQ.roa
File: wsi3UgZoI5UtQSTDcJRxQ921vWQ.roa (raw, json)
Hash identifier: GMmZ2dPKr+9nc42QDyDVWA2RBHnjZhJjWT2vHr8dQ+s=
Subject key identifier: C2:C8:B7:52:06:68:23:95:2D:41:24:C3:70:94:71:43:DD:B5:BD:64
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06F37B11
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wsi3UgZoI5UtQSTDcJRxQ921vWQ.roa
Signing time: Sun 15 May 2022 04:37:39 +0000
ROA not before: Sun 15 May 2022 04:37:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116620049 (0x6f37b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 15 04:37:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c8b752066823952d4124c370947143ddb5bd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:89:05:c7:55:de:79:21:ba:2f:df:bd:f9:
17:40:8e:b1:37:9d:f5:da:48:b3:78:55:de:3c:04:
42:11:41:c9:bc:25:7f:6c:f3:e7:82:07:d6:d6:39:
ad:f3:de:f8:c6:20:2e:63:fc:b2:38:7c:54:f6:87:
bd:3d:e3:b1:83:8e:ca:85:1f:7f:48:2f:4e:95:dc:
b2:c9:25:6c:0e:03:8e:8d:54:e3:c2:de:3a:50:39:
41:05:c4:db:79:e8:83:57:4e:25:09:d6:d9:b7:12:
c4:8a:1a:02:95:12:14:72:2d:0f:8f:1e:fe:68:76:
3d:56:0b:13:b2:05:a1:ae:94:77:b9:01:b2:53:6d:
33:d8:79:6e:9b:75:6c:91:a8:6b:d9:0b:fc:c6:6f:
9e:af:49:6e:0b:60:ab:27:c1:09:a4:1a:8b:90:dc:
8e:34:ed:cb:0f:e2:c0:e9:ec:30:3a:85:48:c8:53:
f7:76:6c:a2:63:76:39:15:44:ca:14:4f:88:25:ab:
8e:5b:c6:b5:e8:fb:a6:16:93:93:03:24:6f:0f:b9:
9d:ae:dc:39:38:82:16:9f:25:f9:f9:77:db:a8:e1:
53:73:b4:8b:01:1f:0a:96:9c:ba:54:28:8a:df:dd:
97:c9:83:b7:b2:64:34:b9:c4:06:ca:cb:86:c5:9e:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C8:B7:52:06:68:23:95:2D:41:24:C3:70:94:71:43:DD:B5:BD:64
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wsi3UgZoI5UtQSTDcJRxQ921vWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c3:a1:33:86:86:df:96:03:1a:c9:7a:e5:d0:d5:a9:4f:0b:
40:55:54:92:99:d1:38:b9:4f:79:5d:ee:56:3a:7b:31:08:0a:
83:96:5d:a3:c6:f4:0e:9b:35:15:87:69:de:26:51:84:6c:6c:
81:23:d6:1e:d0:34:81:c3:f5:2c:22:5c:e9:72:7a:95:46:fe:
72:93:6c:04:79:21:73:ee:6e:e0:a2:eb:49:17:d1:c5:80:c8:
e9:d6:5c:5d:90:81:c6:4a:c8:9d:98:a1:19:52:e8:37:79:1c:
b8:aa:7d:0f:0c:75:43:b4:e6:c5:71:73:31:8c:ba:f6:88:82:
ee:27:6a:cb:66:ae:f3:5b:81:9d:20:81:f2:9e:d1:12:d7:ea:
84:10:d1:a6:29:3b:48:07:fb:4f:dc:7d:cc:76:9f:7b:a2:9d:
0f:d1:bd:7b:8a:06:5d:d0:56:90:04:ad:1b:91:a2:e2:16:0d:
b6:7a:56:7b:67:d8:03:08:31:4d:40:63:21:47:6c:7c:48:ac:
55:c1:33:be:f5:14:ba:d8:f2:49:8c:4e:0a:f2:12:be:b0:b5:
44:05:c9:4b:c2:e9:72:bf:55:55:ea:c5:0a:4e:67:75:f7:2f:
56:4a:7d:44:1e:73:57:97:56:0c:a0:ba:c2:6f:df:28:93:65:
14:0a:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:36 2025 by rpki-client