Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa
File: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (raw, json)
Hash identifier: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=
Subject key identifier: 39:E3:27:AD:5D:27:55:7E:83:0A:95:F9:AE:E2:74:89:C6:37:A9:93
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 019422FB63F60327D1805F0393222690A9A0
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 171.22.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:63:f6:03:27:d1:80:5f:03:93:22:26:90:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e327ad5d27557e830a95f9aee27489c637a993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:51:f2:e3:31:43:fb:88:92:d6:10:1b:b9:
41:46:80:d9:d5:db:37:7d:1d:f5:d2:94:9b:ef:ef:
6b:c6:d0:0a:ef:83:53:ca:e3:b3:1f:2b:34:bc:b9:
76:62:ca:2e:af:d4:07:b3:23:1d:3f:77:7a:9b:96:
d8:e9:33:39:91:72:cf:0b:37:e1:3f:68:8c:63:ae:
06:84:e1:c9:99:e4:df:3e:d7:0b:07:89:b0:11:2c:
b5:92:aa:79:77:ee:55:f0:cf:e1:d2:06:dc:48:1f:
5a:aa:2e:5f:e8:cd:f1:fe:b0:9b:c2:7d:b8:00:cd:
4f:7a:27:32:5a:81:e7:ff:14:23:d8:77:68:25:ef:
fb:36:e8:c5:fe:04:49:38:f3:d4:7d:62:64:15:ad:
b9:c9:fd:dc:2e:ef:89:cb:48:dd:cd:55:79:aa:95:
d9:0e:f1:da:54:43:80:22:46:ee:e6:d7:e7:ae:1b:
87:29:de:03:bb:94:a0:82:58:cb:40:6d:5d:24:1c:
e5:1e:d3:f3:1e:79:b9:af:6c:71:5c:86:d5:42:5c:
72:a6:a5:3c:00:8b:1f:56:f2:9d:04:62:b3:8c:66:
22:60:c0:c8:70:da:d8:6c:1c:75:b3:ed:77:94:d9:
06:e8:12:97:4c:38:51:8a:50:af:ed:ff:9a:6d:24:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:27:AD:5D:27:55:7E:83:0A:95:F9:AE:E2:74:89:C6:37:A9:93
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.62.0/23
Signature Algorithm: sha256WithRSAEncryption
45:9e:4e:7e:c6:2a:48:fa:67:bb:fc:1b:09:f1:75:91:35:30:
1d:22:26:0c:35:10:cb:c7:65:4c:81:6b:b2:d4:d9:da:b3:f5:
71:ce:07:a7:0a:39:54:58:42:f3:a9:21:89:34:74:b0:51:9f:
e7:f5:f9:a0:b1:93:88:7f:5f:3d:eb:5f:11:07:94:b6:70:bc:
fb:e4:15:a3:0b:c0:6c:20:97:c3:dd:67:73:a7:88:44:7b:a8:
2b:09:27:82:a3:35:b7:ea:05:43:65:1f:07:d1:da:cb:a9:69:
9f:dc:40:d1:3d:bf:a5:ed:a7:c8:eb:9d:f8:48:f3:aa:a1:0f:
dd:4a:bd:b2:59:eb:25:01:02:b2:41:9f:3a:3c:04:4e:6f:cd:
54:e1:4f:5a:da:f1:96:54:2d:09:fb:ec:90:6f:8e:a8:d9:a7:
d6:06:b1:7c:7b:51:ac:8b:e2:5c:96:50:5b:50:f5:1f:c8:5a:
2a:ce:c2:8b:85:cc:ef:d1:bd:db:ce:41:22:55:ff:a0:88:a6:
eb:36:15:cd:90:65:2f:aa:17:4e:8b:fb:9b:4a:7f:5f:17:15:
99:05:54:61:a0:54:46:7c:50:f0:4e:25:20:45:38:12:6d:a2:
fd:0c:ca:ba:22:4a:7b:4e:b4:0c:ff:aa:67:b3:4e:1d:8e:94:
5a:16:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:12:55 2025 by rpki-client