Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/eYj0R1E8HY0xpma4AJZi2e8KaK0.roa
File: eYj0R1E8HY0xpma4AJZi2e8KaK0.roa (raw, json)
Hash identifier: NQQKkRneNchEQdem13lJi4kWKbtSKSbCuSWDPNOOkYU=
Subject key identifier: 79:88:F4:47:51:3C:1D:8D:31:A6:66:B8:00:96:62:D9:EF:0A:68:AD
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0184A95A4B63D07CA4F9139234DE9B492130
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/eYj0R1E8HY0xpma4AJZi2e8KaK0.roa
Signing time: Thu 24 Nov 2022 11:16:17 +0000
ROA not before: Thu 24 Nov 2022 11:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211760
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:5a:4b:63:d0:7c:a4:f9:13:92:34:de:9b:49:21:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Nov 24 11:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7988f447513c1d8d31a666b8009662d9ef0a68ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:dd:4a:ea:0d:96:84:cf:92:c0:7c:12:2d:
46:68:2c:8b:85:b3:db:13:94:55:03:22:fe:56:d4:
52:82:f2:f7:03:a4:fd:ab:53:d6:71:65:46:99:57:
cc:cb:db:ac:b8:3d:1e:a8:d3:15:65:7a:1a:cc:2c:
28:3a:73:2f:7b:58:d0:a5:24:8e:a6:90:37:02:eb:
61:c8:7b:74:64:db:27:5e:d0:38:4c:34:3c:7e:a2:
ff:02:17:bf:41:cb:3c:48:1e:b2:78:96:8e:a9:99:
23:bb:07:93:77:38:79:54:ef:22:b3:f3:ae:49:05:
05:64:9f:ef:62:0f:8c:76:99:f3:7d:dd:b7:3f:05:
cd:71:88:01:bb:c5:74:1b:4d:2a:40:f4:01:7a:65:
aa:93:b3:db:ed:5c:31:1c:5e:7b:3f:84:7d:00:fa:
c2:55:ca:41:b7:2e:21:4a:1d:29:71:46:95:8d:b8:
0b:28:fe:65:13:e0:2d:87:03:65:f5:af:38:6b:8f:
8b:2f:b9:a1:98:d9:9b:c5:99:3e:30:6b:a1:a3:5c:
1d:57:a8:1f:15:20:f8:31:dc:75:88:cc:d5:a7:78:
19:c0:96:0b:34:d8:c0:dd:05:c6:86:e5:34:c7:8a:
84:b9:71:15:6d:32:c5:54:b2:7a:47:e8:ad:72:d4:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:F4:47:51:3C:1D:8D:31:A6:66:B8:00:96:62:D9:EF:0A:68:AD
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/eYj0R1E8HY0xpma4AJZi2e8KaK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8f:3e:67:48:d4:30:3e:61:89:b4:f2:4e:80:73:18:bb:21:
64:30:34:7e:23:11:40:02:a5:bc:b7:83:84:45:07:f2:1b:cf:
09:d8:4f:7b:73:32:cb:77:b4:62:9e:fa:7a:e7:26:6f:3f:3d:
c6:55:82:0d:2b:b2:9f:da:a6:b2:8a:c5:dc:9e:57:9f:41:b9:
1b:bc:0d:65:1d:64:03:40:dd:70:2b:27:22:7d:37:de:28:80:
10:8d:05:d6:5f:a3:d7:cb:2e:4c:95:23:87:e8:f1:d4:0d:fa:
1c:b7:09:86:58:d7:80:ea:5a:db:c1:eb:8c:41:22:20:9e:dd:
61:80:8e:52:5e:de:e4:c3:ca:87:8c:5f:fd:11:f6:90:eb:03:
34:c6:b9:5b:4c:9d:e7:ba:21:e5:c0:79:14:dd:24:be:70:61:
28:1a:78:f2:06:a4:22:30:94:27:80:26:1e:9e:5b:43:fa:5f:
56:dd:32:74:b7:84:b5:61:b1:1f:f8:e3:6e:82:2a:87:47:ea:
58:cc:c8:5a:e4:97:51:d2:61:52:0e:d9:f0:8b:75:d5:ef:21:
78:8a:47:63:79:70:4f:61:e9:68:37:e7:91:1d:2d:c1:9a:ab:
83:c8:1d:dd:fe:9f:4a:ac:4f:fa:73:a1:98:d8:4c:00:cf:ce:
6e:9f:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:57 2025 by rpki-client