Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/JtpMDVGiL_pan_rfIvU5NVXEXr8.roa
File: JtpMDVGiL_pan_rfIvU5NVXEXr8.roa (raw, json)
Hash identifier: LvOaXuDIlUJtc/3WQFfuiIXlpwGBSRh6QnNpXzpmfk4=
Subject key identifier: 26:DA:4C:0D:51:A2:2F:FA:5A:9F:FA:DF:22:F5:39:35:55:C4:5E:BF
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 048DA74F
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/JtpMDVGiL_pan_rfIvU5NVXEXr8.roa
Signing time: Fri 17 Jun 2022 11:00:44 +0000
ROA not before: Fri 17 Jun 2022 11:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.28.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76392271 (0x48da74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Jun 17 11:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26da4c0d51a22ffa5a9ffadf22f5393555c45ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:84:9b:0e:1f:1c:50:12:3d:81:bd:32:26:
83:f5:a9:01:86:89:56:37:56:d0:47:2a:38:b5:60:
52:5c:fd:e9:50:28:43:2d:b3:f2:8b:e3:aa:ac:c2:
8e:ec:1c:35:ce:64:b3:64:bf:79:50:c3:ae:56:79:
b0:70:fa:fb:4a:27:34:c9:26:4f:a5:fe:3f:2a:12:
e5:69:53:56:d5:c4:d2:c1:77:5f:e2:14:94:61:6e:
23:98:4d:0f:09:6f:78:29:68:96:9a:6c:34:67:2d:
73:88:00:e9:21:98:1f:a8:d1:ec:0f:99:ad:3e:fa:
fc:6c:33:7a:57:f8:e9:49:a2:e8:09:a3:7d:3a:96:
82:93:b0:49:97:95:98:5e:38:73:c3:e0:90:a0:bf:
85:4a:31:38:f3:8e:56:62:39:0e:e3:aa:0f:53:30:
2d:a9:c5:c9:50:d5:01:94:28:5c:01:c6:ba:7a:e7:
23:47:a4:79:08:6d:58:b2:51:b8:97:f8:59:7f:10:
d7:de:c1:43:2c:e5:c9:72:32:f3:72:67:86:04:82:
c6:4f:b2:fd:eb:e5:6e:94:2b:1b:13:32:9b:94:b0:
bf:ee:3e:c2:1d:b8:22:44:ff:96:a8:d5:a4:40:92:
55:e8:6e:d0:56:2a:9b:7f:d5:bf:29:df:1a:44:06:
7e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:4C:0D:51:A2:2F:FA:5A:9F:FA:DF:22:F5:39:35:55:C4:5E:BF
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/JtpMDVGiL_pan_rfIvU5NVXEXr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
171.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e6:ce:71:b6:36:4f:4e:17:e8:2f:e4:7c:2b:29:03:96:90:
bb:85:74:cf:8a:5f:2d:56:a0:b2:fa:26:b9:07:fb:66:8a:ec:
61:b5:13:d7:ee:9a:2e:3a:01:db:bc:7d:39:15:0d:d2:e5:a8:
d2:a7:94:58:e4:68:24:74:86:d1:af:51:22:81:b2:d0:c2:36:
de:af:9b:ba:b2:58:9c:db:86:f4:e8:30:0e:d4:ca:99:95:5a:
59:51:80:f1:8e:73:f7:f8:68:36:90:cf:79:31:8b:cc:87:d5:
fb:9d:36:1a:5c:f1:cb:e4:82:d0:cc:ac:51:6f:21:37:a7:a9:
db:fb:a3:c9:79:e3:0f:bc:6d:33:c8:25:b0:63:c1:85:d9:99:
95:2b:72:81:45:e1:ae:24:d8:95:fb:ef:91:18:02:96:0e:73:
f7:96:2a:6a:a3:6a:a7:6f:aa:6e:c7:52:54:05:66:80:3b:1a:
07:dd:35:6a:e0:29:6a:05:99:dc:43:52:8c:49:91:6e:38:92:
8f:2a:7c:1d:7e:26:5c:fe:73:bb:f5:92:5e:67:4d:5a:ca:3f:
7a:ad:34:bc:38:b2:15:37:ab:08:10:41:3a:71:67:9d:b8:50:
2d:6b:46:5b:4b:17:d2:fc:50:5c:88:1f:52:bb:70:14:7c:32:
2d:64:31:93
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBI2nTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTg5Yzc0OTUwMmU1NTM2NmEzNTBiZWE5NzM1NGY2OTk3YzNjMzIxMB4XDTIyMDYx
NzExMDA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZkYTRjMGQ1MWEy
MmZmYTVhOWZmYWRmMjJmNTM5MzU1NWM0NWViZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOJhJsOHxxQEj2BvTImg/WpAYaJVjdW0EcqOLVgUlz96VAo
Qy2z8ovjqqzCjuwcNc5ks2S/eVDDrlZ5sHD6+0onNMkmT6X+PyoS5WlTVtXE0sF3
X+IUlGFuI5hNDwlveClolppsNGctc4gA6SGYH6jR7A+ZrT76/Gwzelf46Umi6Amj
fTqWgpOwSZeVmF44c8PgkKC/hUoxOPOOVmI5DuOqD1MwLanFyVDVAZQoXAHGunrn
I0ekeQhtWLJRuJf4WX8Q197BQyzlyXIy83JnhgSCxk+y/evlbpQrGxMym5Swv+4+
wh24IkT/lqjVpECSVehu0FYqm3/VvynfGkQGfqECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQm2kwNUaIv+lqf+t8i9Tk1VcRevzAfBgNVHSMEGDAWgBRhicdJUC5VNmo1
C+qXNU9pl8PDITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lZbkhTVkF1VlRacU5RdnFselZQYVpmRHd5RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvZmViYjM3LWQyZmUtNDQ0Yy04N2RiLWJkNmM5OWU3ZTJkYS8x
L0p0cE1EVkdpTF9wYW5fcmZJdlU1TlZYRVhyOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
ZmViYjM3LWQyZmUtNDQ0Yy04N2RiLWJkNmM5OWU3ZTJkYS8xL1lZbkhTVkF1VlRa
cU5RdnFselZQYVpmRHd5RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAKsWHAMEAKsWHzANBgkqhkiG9w0B
AQsFAAOCAQEAgObOcbY2T04X6C/kfCspA5aQu4V0z4pfLVagsvomuQf7ZorsYbUT
1+6aLjoB27x9ORUN0uWo0qeUWORoJHSG0a9RIoGy0MI23q+burJYnNuG9OgwDtTK
mZVaWVGA8Y5z9/hoNpDPeTGLzIfV+502Glzxy+SC0MysUW8hN6ep2/ujyXnjD7xt
M8glsGPBhdmZlStygUXhriTYlfvvkRgClg5z95YqaqNqp2+qbsdSVAVmgDsaB901
auApagWZ3ENSjEmRbjiSjyp8HX4mXP5zu/WSXmdNWso/eq00vDiyFTerCBBBOnFn
nbhQLWtGW0sX0vxQXIgfUrtwFHwyLWQxkw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org