Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cdpTGG433FlgDVA2aZpCBvEXjVA.roa
File: cdpTGG433FlgDVA2aZpCBvEXjVA.roa (raw, json)
Hash identifier: NoxWc5kEsU8dKExsSxq/H/v8M2klgksnsEMaS/JVNfw=
Subject key identifier: 71:DA:53:18:6E:37:DC:59:60:0D:50:36:69:9A:42:06:F1:17:8D:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01958C330AF6FFD71240984E60154E47EFA1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cdpTGG433FlgDVA2aZpCBvEXjVA.roa
Signing time: Wed 12 Mar 2025 21:11:50 +0000
ROA not before: Wed 12 Mar 2025 21:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:33:0a:f6:ff:d7:12:40:98:4e:60:15:4e:47:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 12 21:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71da53186e37dc59600d5036699a4206f1178d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:0c:a8:19:c2:e4:2c:af:35:7c:11:9f:be:
50:83:87:cc:4d:17:ec:38:c5:43:c7:d6:53:90:04:
21:51:c8:04:2e:0a:16:0c:9b:60:77:9b:61:3f:f8:
45:df:17:8d:fc:11:63:5a:c4:60:78:b1:12:93:92:
ae:52:db:8f:3c:71:1d:97:1f:d0:af:25:fc:56:24:
77:fc:b2:79:5b:2b:04:19:d6:c6:30:7a:3e:81:f8:
d7:df:25:c1:fc:f1:c0:43:8e:65:5b:01:8e:ad:2c:
d5:85:2d:5b:47:c2:28:4a:d9:6a:c2:3d:98:f8:a5:
a7:14:b8:be:87:62:53:b0:c5:ba:02:6e:b7:79:49:
b5:63:57:7b:71:3b:d7:5a:dc:8a:ec:e2:cf:c8:39:
e7:e0:67:9b:3c:92:b8:d4:35:3b:65:7b:2f:ab:24:
f2:c5:77:92:34:d6:02:1e:41:05:83:05:73:0f:45:
b0:21:f5:84:46:3b:a3:13:3f:03:43:e0:1e:5b:da:
34:23:44:36:b8:d7:35:ad:1a:0d:36:0d:7f:d3:1d:
3a:0a:57:09:40:84:8a:11:75:03:e6:e4:fb:ab:bb:
d5:a6:9e:03:0f:3d:60:56:8b:f4:8b:e9:60:86:7b:
7f:f1:45:f3:61:88:5d:13:5a:7d:96:ba:30:f9:c5:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DA:53:18:6E:37:DC:59:60:0D:50:36:69:9A:42:06:F1:17:8D:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cdpTGG433FlgDVA2aZpCBvEXjVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:73:35:95:96:db:2e:e7:62:15:c1:a7:3a:98:8c:e0:c3:8e:
1b:e4:99:9e:52:91:69:18:ee:5d:7d:2e:e8:08:3c:f1:e2:8a:
a3:ed:ff:6f:ed:9c:a9:6b:b7:b1:f6:cd:32:8a:7d:02:d2:23:
9b:9f:19:73:fc:0d:08:e8:eb:40:23:a1:8b:f5:ce:ee:2b:3b:
2e:94:dd:81:c8:41:6f:d5:bc:ff:61:0a:de:53:b3:6f:bb:e9:
53:52:31:fb:7b:13:65:ce:f1:a4:15:28:d5:a3:73:9b:b2:e1:
94:2a:2e:81:86:b4:f1:3b:f9:d9:68:30:df:e9:a6:e7:7a:35:
29:47:5d:d2:f2:7a:90:77:c5:a0:75:58:e0:81:e9:29:c2:a6:
e7:21:7b:c9:86:46:c5:62:3e:1f:8e:32:7b:c3:13:93:5f:07:
2f:c6:29:68:e3:2b:c8:37:b4:30:7d:c3:c2:dd:f2:4f:dc:2e:
24:5e:9f:55:33:51:70:61:4c:aa:82:2b:2b:95:99:61:98:4e:
61:46:83:71:92:a4:ca:d6:ec:ca:1f:e6:df:2c:c1:51:ea:23:
1d:c9:11:d3:1f:bc:dd:4c:56:e9:22:29:b1:91:fa:e9:53:5c:
f1:46:a8:b8:68:95:86:7b:f2:0b:3d:ef:c6:d1:60:5f:e7:22:
7f:db:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:41 2025 by rpki-client