Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/MTsmQPClBNmC2T2oFuK7i2FwAqw.roa
File: MTsmQPClBNmC2T2oFuK7i2FwAqw.roa (raw, json)
Hash identifier: J20qBCvDkUjH7/hleIl3umrizlYWKMIDReaNbInZprM=
Subject key identifier: 31:3B:26:40:F0:A5:04:D9:82:D9:3D:A8:16:E2:BB:8B:61:70:02:AC
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0184375508404C6E8ADC1BEDE22AD57C42CD
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/MTsmQPClBNmC2T2oFuK7i2FwAqw.roa
Signing time: Wed 02 Nov 2022 07:53:50 +0000
ROA not before: Wed 02 Nov 2022 07:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 171.22.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:55:08:40:4c:6e:8a:dc:1b:ed:e2:2a:d5:7c:42:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Nov 2 07:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=313b2640f0a504d982d93da816e2bb8b617002ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:42:50:8a:01:5a:3a:71:1c:80:3f:e5:2a:
8e:98:67:b5:ff:fe:6c:a3:38:5b:dd:de:d8:e5:90:
04:fc:38:dc:80:85:15:9d:3f:76:5a:2c:13:0f:e1:
d5:71:fd:ba:53:1b:9c:4a:1f:c8:cd:ea:6f:1c:ef:
01:43:54:51:fd:7d:01:65:7a:e1:e9:3c:d6:17:db:
54:75:44:a3:5a:d3:a2:fa:0c:81:70:74:66:34:de:
d8:65:2b:0b:b3:46:a6:7f:87:0b:3b:08:41:a5:59:
c0:6a:f2:ee:3b:da:56:79:ff:d3:36:89:e6:c0:ba:
12:bb:b2:6a:a5:5f:1d:41:2b:c8:43:71:b4:15:79:
22:44:1b:26:84:99:da:e6:cd:7d:04:be:ba:4f:d4:
82:db:fc:df:a9:7e:49:9f:db:b8:d0:7c:59:19:1c:
4b:1a:3a:59:f3:c9:d3:68:bb:c5:c4:be:ab:b3:43:
6f:65:1a:db:56:33:a4:f7:79:21:10:9a:2a:fa:b4:
25:50:41:ac:51:08:0c:e8:6a:97:ab:4a:94:72:94:
b9:a1:84:af:3c:b4:06:d9:30:5f:da:c1:20:f0:6d:
13:65:e7:9c:e8:8d:ef:61:e9:0e:e7:65:95:29:a0:
4c:42:3d:53:c2:85:dd:53:3a:61:8a:32:40:05:e9:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:26:40:F0:A5:04:D9:82:D9:3D:A8:16:E2:BB:8B:61:70:02:AC
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/MTsmQPClBNmC2T2oFuK7i2FwAqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.29.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a2:24:cd:b0:e4:5e:2e:ef:00:2f:09:65:fc:36:4a:70:d7:
88:e9:36:7e:e2:10:1e:c5:94:8c:17:9f:d8:0d:1c:07:82:7e:
37:de:65:da:36:0d:8c:12:e0:54:67:b5:5e:14:dd:54:a2:c1:
32:61:7b:85:46:61:74:5a:67:bd:d9:a1:a4:45:7a:cd:ca:4e:
01:12:95:11:b4:39:fd:14:de:d2:48:48:d5:16:c7:b0:59:97:
06:f2:95:ca:74:0a:09:af:ae:7b:cd:aa:09:0a:db:c1:2c:2d:
89:71:d1:c7:1a:60:42:5f:67:7e:c1:a4:5c:ac:30:b1:96:ba:
ae:b3:20:63:00:68:88:14:44:e2:87:4a:d5:dd:ac:6c:e9:d7:
ad:b5:35:c6:df:58:d6:8b:45:d7:89:dc:84:8d:e1:e9:e4:57:
9d:c2:0b:11:20:6c:c7:83:0a:8e:f4:83:c1:60:16:65:78:42:
ea:5e:b7:16:42:57:64:08:41:e5:b9:fd:22:ca:39:09:b4:1a:
6c:8f:cf:87:96:72:eb:f1:da:8c:0d:30:40:ef:72:7a:45:22:
58:70:95:fb:70:68:82:48:7c:a9:c0:25:d8:85:52:bd:7e:08:
ba:4f:f0:83:3c:2d:99:31:e9:d8:7f:52:92:47:de:28:91:d3:
d3:18:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:05 2025 by rpki-client