Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa
File: xhN1c-aMkviSplwM5FBkANzfZOs.roa (raw, json)
Hash identifier: FWqWQ3UsfN0kiNDqedir0L0Y5Va5p56MteFqRu1xDuA=
Subject key identifier: C6:13:75:73:E6:8C:92:F8:92:A6:5C:0C:E4:50:64:00:DC:DF:64:EB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0996C270
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa
Signing time: Tue 05 Jul 2022 00:29:25 +0000
ROA not before: Tue 05 Jul 2022 00:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160875120 (0x996c270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 5 00:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6137573e68c92f892a65c0ce4506400dcdf64eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:c3:eb:a1:82:6a:63:93:84:cb:60:67:e3:
b3:33:72:8f:07:77:9c:cb:14:b2:44:2d:7a:2f:c7:
c0:80:8d:38:fc:a7:18:5c:13:fa:f4:73:ac:7c:88:
81:f9:e2:84:2f:1d:6e:d1:90:10:1c:e5:4f:d8:95:
68:69:dc:b7:39:f9:3a:a0:61:3f:ff:27:96:71:1a:
c0:96:41:86:25:d5:71:73:2b:29:2a:33:f9:59:bc:
66:29:d2:77:dc:43:bd:66:77:75:b9:46:34:5e:3d:
99:3e:95:5b:0d:87:78:6b:d9:62:f1:8d:44:70:28:
7b:0f:f8:2a:bd:0b:db:29:42:4c:4c:c2:73:3a:bf:
5f:c6:42:e4:13:ef:2e:0c:e3:5f:b3:13:01:b0:40:
02:dd:d3:bd:9d:d2:cc:86:80:b7:c0:a6:a5:d6:69:
4c:40:a6:8a:be:7d:ad:24:c9:a3:b8:40:ad:c6:7d:
aa:bc:2b:23:b8:5a:a4:07:da:2e:1b:1e:74:b0:5e:
8d:fb:29:d3:f3:94:e8:7a:92:18:88:25:36:c5:ef:
9f:c0:97:3b:3c:5a:50:46:4c:80:47:1b:a5:e1:a1:
9b:4b:3b:e4:43:53:41:20:8e:e5:e5:01:57:17:62:
23:5c:55:e7:c8:9c:1e:17:42:17:41:29:a2:2c:4a:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:13:75:73:E6:8C:92:F8:92:A6:5C:0C:E4:50:64:00:DC:DF:64:EB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8f:ce:3f:50:db:7e:31:c2:9a:1f:71:0a:e1:77:30:0a:61:
a2:c7:d8:6c:96:d4:29:c7:41:ff:09:72:b1:cb:10:ab:cf:b8:
d0:ed:0a:cb:dd:af:ca:d3:d9:6f:67:c7:a7:46:62:8c:51:3b:
f1:22:1c:30:7e:c6:c9:32:a6:a7:55:15:c8:76:98:24:ac:34:
4e:5c:58:30:d0:97:20:a1:68:a2:d7:d3:e2:00:76:b3:af:f9:
92:0a:7d:3f:83:11:3f:97:2d:26:88:98:c4:2f:02:7f:92:62:
14:c6:c8:48:b6:d3:fa:d1:7e:35:38:a4:45:27:38:20:35:f3:
2c:9b:2b:c1:29:2d:dc:df:05:2b:15:aa:26:e5:f5:81:0d:b9:
7e:37:1c:42:e4:3c:93:64:58:32:10:ce:74:71:10:99:42:e1:
8a:94:87:44:2f:7f:ab:bb:72:79:b0:52:85:33:47:7d:0c:67:
8c:5b:86:30:09:43:be:30:44:b3:44:96:02:02:33:b5:52:1b:
ef:e3:a7:08:55:66:cb:1b:d3:e2:5e:22:61:1f:31:83:d1:f3:
ef:12:0e:65:1a:3d:e8:1a:42:f5:7c:b8:6a:e6:86:0d:5e:c7:
8f:49:cf:41:fb:5d:9e:32:d9:e5:be:16:f2:46:17:96:9a:28:
b9:3c:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:45 2025 by rpki-client