Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WyVW3TM8FkBBBYGALI4v0xb6X8M.roa
File: WyVW3TM8FkBBBYGALI4v0xb6X8M.roa (raw, json)
Hash identifier: FibUo+z22GT3PykpZxFuoHmBUOHVy7veROqjNth7nZU=
Subject key identifier: 5B:25:56:DD:33:3C:16:40:41:05:81:80:2C:8E:2F:D3:16:FA:5F:C3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0854DF6A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WyVW3TM8FkBBBYGALI4v0xb6X8M.roa
Signing time: Sat 11 Jun 2022 03:32:02 +0000
ROA not before: Sat 11 Jun 2022 03:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139779946 (0x854df6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 11 03:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b2556dd333c1640410581802c8e2fd316fa5fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:31:26:4f:dd:95:f3:60:8b:e9:85:49:8b:
bb:eb:d1:f3:cc:df:b9:a7:2a:4b:01:c6:2c:db:38:
f0:18:46:a4:d6:62:1d:b3:4e:c9:e9:7b:0e:3f:3e:
3b:b9:f1:5e:da:91:1e:6c:fc:fd:97:4b:eb:de:fc:
04:9b:be:0a:42:92:24:27:78:1f:fe:f1:27:86:8c:
cd:b0:52:23:0b:67:a3:a3:74:da:bb:52:96:86:59:
7a:d6:ee:28:06:1a:3e:be:fe:7b:48:94:2e:49:4a:
35:fb:c5:1d:bb:cc:c3:ee:ad:0d:be:72:de:8a:f2:
08:19:ac:af:4a:4a:95:0c:25:c7:2a:08:17:40:75:
2c:5a:d4:f7:fa:71:e4:8f:4e:b0:91:87:10:9c:ca:
83:0a:39:77:ed:a3:a4:5e:84:82:9a:44:c4:6d:7f:
c3:8c:ae:42:dd:ea:68:bb:c5:8c:a2:74:5f:ca:dc:
60:b5:cf:17:9b:4a:00:96:8c:47:9a:10:63:a8:e0:
15:62:19:da:b2:ab:d1:23:4d:56:61:b4:9a:6c:56:
f2:cc:36:98:e1:63:ed:00:53:88:e1:0f:98:9f:51:
a4:e4:cc:36:41:49:0c:51:97:5f:64:33:9b:53:99:
c3:81:81:66:3c:5c:7d:85:c6:c6:c2:f9:a2:72:90:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:56:DD:33:3C:16:40:41:05:81:80:2C:8E:2F:D3:16:FA:5F:C3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/WyVW3TM8FkBBBYGALI4v0xb6X8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
04:7a:db:29:dc:02:ff:89:1b:41:df:30:72:1e:ac:8f:0a:74:
7c:b5:37:83:3c:d5:58:66:08:d0:a6:8e:da:7e:84:9f:01:ec:
2b:11:33:c9:77:9f:58:11:b4:00:00:ef:51:a7:89:92:68:27:
55:ec:d3:98:39:13:97:3e:4a:bd:3f:e3:ed:ab:26:31:93:3e:
b9:dc:94:69:ac:c8:fa:fb:e8:e1:11:4e:02:02:57:29:ae:f1:
a5:63:2b:0c:46:08:79:fa:e5:57:04:f9:09:a3:b1:f4:0c:89:
0d:f4:3b:50:09:a3:67:2f:19:bd:de:27:35:53:59:65:e3:21:
b6:dd:26:cc:39:da:f7:32:2e:41:eb:c4:f7:60:00:ba:0c:df:
a8:d2:f8:14:07:39:51:40:ee:16:70:24:8a:0f:85:85:3e:10:
1b:d0:59:a7:64:c4:10:ee:df:10:67:db:8b:1e:18:4e:b3:cd:
26:5e:76:7c:5f:7b:9e:84:17:2e:a7:11:28:b4:a6:a2:77:9f:
6f:5a:96:51:03:29:91:d3:67:a4:92:42:6c:00:9f:ac:01:3f:
b4:ed:03:b1:9f:11:f8:6e:51:fc:a6:8b:43:3f:f7:af:05:91:
d2:16:59:40:4c:18:df:f6:3a:d4:0e:33:11:33:19:07:4f:14:
83:d2:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:38:41 2025 by rpki-client