Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/nV1NL6mCVcCM6N2O3kJIA9glilY.roa
File: nV1NL6mCVcCM6N2O3kJIA9glilY.roa (raw, json)
Hash identifier: uUezb+tfYJU5VM2PM2MIn4OE/J7C7C0DbSbCyMAz3Qo=
Subject key identifier: 9D:5D:4D:2F:A9:82:55:C0:8C:E8:DD:8E:DE:42:48:03:D8:25:8A:56
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 04489A4E
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/nV1NL6mCVcCM6N2O3kJIA9glilY.roa
Signing time: Fri 20 May 2022 14:16:29 +0000
ROA not before: Fri 20 May 2022 14:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71866958 (0x4489a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: May 20 14:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d5d4d2fa98255c08ce8dd8ede424803d8258a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:2a:63:0e:74:14:fd:a9:81:ec:39:4d:ab:
6b:cf:9a:c3:68:6d:bf:7c:9d:b7:65:e5:d2:d6:cf:
86:cb:fc:30:26:68:85:ec:3a:e2:0e:77:c5:d6:48:
fe:38:2a:c6:48:b9:bd:f8:f9:db:11:bc:5b:b6:1b:
d3:51:da:0d:28:a7:1a:65:25:f1:e3:93:83:89:0c:
96:16:a5:9f:07:e3:3c:06:9e:d0:7d:f0:3a:ac:34:
d8:07:eb:0f:7a:3e:25:dd:f0:cd:f5:3f:75:64:35:
c9:4d:62:4a:43:f5:55:20:86:ac:a1:51:66:8f:8b:
34:eb:fd:9f:00:6e:62:b6:b6:fa:96:7d:1b:ea:6c:
ad:48:c8:19:c4:0e:66:71:75:3b:ef:79:78:6c:f0:
21:37:a8:ef:37:60:6e:ac:55:e7:2c:3a:4b:b7:29:
48:b6:ae:fc:a7:26:83:58:95:00:29:63:8e:a4:30:
de:b5:00:55:2b:e4:f9:8f:24:0e:39:66:82:bd:d0:
60:70:19:6a:63:58:d2:68:b8:3a:ce:b9:f6:9c:5d:
54:dd:f0:9f:36:1d:1d:27:df:f0:20:30:1b:4e:c8:
a7:2e:1f:8b:13:cc:87:6e:b6:9f:e7:4a:46:5b:c4:
5a:5a:1f:ad:61:18:28:cf:50:c6:b7:20:40:0b:f0:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:4D:2F:A9:82:55:C0:8C:E8:DD:8E:DE:42:48:03:D8:25:8A:56
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/nV1NL6mCVcCM6N2O3kJIA9glilY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e2:7c:dc:d8:47:65:dd:a7:30:40:a5:47:61:ed:25:0c:75:
65:62:1b:d3:d8:88:67:11:1f:6a:50:b5:e2:8a:c5:32:4b:7f:
b1:8e:a3:a2:ad:32:dd:95:5e:e9:de:a9:2c:dc:fe:8b:31:53:
a8:4e:e6:2d:95:dd:fa:36:14:dc:58:81:3b:ad:b4:93:67:71:
fc:12:fd:4d:74:0e:76:b3:6e:f1:fa:26:1b:3a:1b:e5:0b:7e:
62:dd:4d:0a:2b:b3:f5:eb:06:ea:2c:71:3d:7b:70:79:5f:f3:
2a:b4:46:a1:31:72:2a:6d:f4:27:db:16:fa:55:07:1b:fa:67:
ef:d2:28:84:12:75:f1:4f:73:d2:96:72:98:a4:32:2c:32:0d:
34:df:08:85:bd:80:23:c9:67:1f:49:d3:86:53:1c:7f:2e:6b:
3b:22:4a:69:92:8e:ac:c5:60:25:0c:97:5d:75:55:3f:d2:ba:
2a:ea:85:bb:84:c7:82:cd:4e:14:b1:1a:26:31:4c:02:7f:eb:
91:b7:49:e0:cb:a5:6c:17:60:d6:04:ea:7d:50:eb:53:10:ad:
35:5d:24:77:fb:f8:fd:9c:25:c5:8c:00:c2:60:ae:be:af:8a:
e2:47:df:f3:f9:3e:e8:9f:63:4a:f9:d9:df:e8:f8:82:18:8d:
d1:15:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org