Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/sKPss4iqw62-bB9mNs0GQNOUQRs.roa
File: sKPss4iqw62-bB9mNs0GQNOUQRs.roa (raw, json)
Hash identifier: nGO+rLPtEvpZpVACAHT3idbsJOn29J+r7KmmOrbYA0Y=
Subject key identifier: B0:A3:EC:B3:88:AA:C3:AD:BE:6C:1F:66:36:CD:06:40:D3:94:41:1B
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 050F37
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/sKPss4iqw62-bB9mNs0GQNOUQRs.roa
Signing time: Thu 14 Apr 2022 11:19:14 +0000
ROA not before: Thu 14 Apr 2022 11:19:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331575 (0x50f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Apr 14 11:19:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0a3ecb388aac3adbe6c1f6636cd0640d394411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:3d:49:38:c2:c5:ae:74:f9:33:70:0d:61:
c8:5a:0f:70:ff:db:0c:5f:5e:8e:0d:d5:0e:d3:61:
52:fd:3c:e5:9d:c8:32:e6:aa:15:4a:00:74:bc:f1:
d3:69:8e:d6:98:98:89:54:e8:c3:90:54:9c:f2:80:
84:4f:9a:07:30:20:82:5a:49:fe:87:01:be:e2:77:
7b:38:75:67:83:d4:d4:83:db:86:29:12:4f:55:4a:
94:ce:76:04:34:ed:83:08:ea:1b:8a:6f:e9:31:8e:
3a:2f:1e:42:48:b3:32:94:77:7c:c5:c1:c9:bd:60:
a9:56:f5:79:7c:37:22:b5:44:a5:40:f0:a0:79:61:
62:60:ff:00:66:59:7a:88:67:00:7e:12:64:27:ca:
fe:1f:6a:18:0f:fd:91:cb:0b:89:48:af:54:bc:f8:
c9:24:35:d9:af:b4:ad:b7:ad:c9:2b:d7:da:1b:be:
12:be:a2:46:b1:cf:e5:ad:54:d9:8c:72:49:1f:d1:
c9:bc:a9:21:1d:ee:73:1a:33:11:b0:67:8d:3a:68:
75:3a:d5:dd:19:3d:0f:f6:40:e0:f5:4d:c6:b7:2b:
6a:e7:a9:19:9d:cc:59:f0:2b:3d:e7:85:92:0d:34:
35:db:35:8f:9a:9d:34:70:6f:ef:ca:57:5a:7e:f4:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A3:EC:B3:88:AA:C3:AD:BE:6C:1F:66:36:CD:06:40:D3:94:41:1B
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/sKPss4iqw62-bB9mNs0GQNOUQRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
11:25:1a:8a:7c:2b:6c:a6:cd:90:2b:ec:78:5b:24:83:a6:0c:
4f:c5:b9:05:80:6b:0d:4a:b6:46:72:fa:8a:fa:b9:8b:33:22:
11:7f:b9:10:16:ee:e2:55:97:22:0a:3d:a2:fb:81:74:0f:60:
1d:c6:40:34:33:7f:20:db:14:7a:a1:6e:07:e3:d9:89:7f:a9:
f2:26:76:7c:a4:81:66:fb:de:73:99:39:1a:07:70:45:f9:11:
bb:9b:c1:da:09:5c:7d:92:af:dc:cc:cb:58:ad:3d:de:b4:0f:
81:a7:d5:e1:5a:d0:bb:8f:70:5f:32:3e:cb:59:12:24:c6:e2:
0d:fa:78:98:6f:9f:6c:44:0f:bc:47:37:95:83:d1:2d:1b:72:
67:4e:23:29:b8:2a:ab:ea:6b:c4:e8:39:a3:42:67:5a:3c:d0:
b4:dd:1d:ae:db:a9:a9:83:56:57:39:03:08:09:21:5c:3c:76:
72:05:34:dc:3b:c4:16:7d:77:b3:8c:77:68:f6:9c:3b:98:fe:
5a:22:aa:f0:a6:86:e3:83:fc:ec:f3:83:f4:0c:2f:0f:39:5b:
8f:8f:8f:c2:c5:e5:3e:cd:ee:1e:7b:ad:12:5f:c1:92:7d:47:
fc:4b:1f:fb:d6:b9:a6:ef:87:42:3c:46:20:77:62:90:93:28:
e2:1b:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:42:32 2025 by rpki-client