Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/ohn9T2qUKUjEdS53IFlvEja17pY.roa
File: ohn9T2qUKUjEdS53IFlvEja17pY.roa (raw, json)
Hash identifier: IBB2tPlRZhiulRGdFDHEUsFHO9Za9GfXKP7a/cd97+U=
Subject key identifier: A2:19:FD:4F:6A:94:29:48:C4:75:2E:77:20:59:6F:12:36:B5:EE:96
Certificate issuer: /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial: 0499B581
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/ohn9T2qUKUjEdS53IFlvEja17pY.roa
Signing time: Wed 22 Jun 2022 08:33:44 +0000
ROA not before: Wed 22 Jun 2022 08:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.29.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77182337 (0x499b581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
Validity
Not Before: Jun 22 08:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a219fd4f6a942948c4752e7720596f1236b5ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:28:01:75:f0:bd:04:15:2a:73:b4:5b:6e:
fb:e4:26:be:14:8e:df:00:be:ab:66:20:52:dd:5d:
9b:85:6a:e8:21:54:44:46:01:ea:8f:d4:3a:55:27:
ad:c0:b9:4d:98:d3:79:e3:9e:4b:9c:58:a7:3a:6a:
61:87:b4:70:5c:a1:e7:02:46:f9:b9:71:6d:41:ce:
56:35:80:c1:8a:5e:e4:c7:19:4c:7d:4f:ee:9f:74:
81:eb:49:57:24:99:cb:01:e2:92:5a:6c:6c:c8:1e:
a3:15:c5:d9:4d:4a:b6:cf:4a:92:f1:92:57:07:08:
46:37:3c:fa:ba:d3:2d:98:84:de:28:65:3b:7a:da:
c1:56:a1:4f:a1:9c:a3:3f:76:77:7f:7f:41:dc:4c:
79:73:79:ea:2d:d8:c5:4b:4d:f1:c3:6a:8f:c0:58:
2c:3d:20:5f:b2:1e:94:df:25:af:13:8a:57:20:d2:
24:6c:4b:e7:46:8d:7b:ce:71:75:df:12:a6:bc:1c:
7d:13:55:2e:52:39:b2:1c:34:ea:41:91:fd:9d:48:
93:d9:ba:af:1b:69:37:88:a3:f0:0a:65:69:5c:46:
ac:40:30:ac:26:68:15:13:a0:bf:3b:6d:3c:0f:67:
aa:48:fe:10:1c:e1:24:ed:7d:8a:00:95:f2:06:cf:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:FD:4F:6A:94:29:48:C4:75:2E:77:20:59:6F:12:36:B5:EE:96
X509v3 Authority Key Identifier:
keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/ohn9T2qUKUjEdS53IFlvEja17pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.28.0/23
171.22.31.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:a6:ab:b6:36:f3:a1:c0:bc:aa:f3:be:d2:93:61:1f:e2:
54:63:73:18:6c:4e:b8:59:56:d0:d0:11:ad:3c:f0:36:49:7e:
c5:4b:56:e9:9e:41:ca:a7:09:e2:42:fe:10:45:ca:73:f6:d2:
a4:b9:4f:87:19:4a:8a:0b:55:69:15:17:a2:4a:a2:e4:30:e6:
dc:69:75:13:61:1a:05:74:f6:33:5e:29:21:b4:7f:f5:86:14:
e8:a5:c1:4e:b7:d1:df:dd:c4:c1:5f:ce:23:a6:73:8b:5c:a1:
9c:59:36:8f:14:a6:5b:b9:ab:62:46:34:1f:75:55:ad:bd:9c:
8c:b7:84:a1:09:39:47:11:86:b4:6d:09:c9:58:c6:25:20:77:
eb:9c:ea:1d:c2:89:81:2e:c5:6f:85:15:0b:12:c2:13:ed:cb:
88:a6:7c:1b:d0:14:32:99:41:2c:c1:aa:8f:87:43:f8:b4:a1:
3b:be:6e:13:92:c0:2c:bc:43:99:26:0c:9a:41:58:28:16:3c:
09:e5:62:a4:2a:58:59:b5:4c:4a:30:fe:80:57:30:ec:25:b0:
e4:88:de:4b:bf:71:6a:01:23:e2:73:21:39:d4:4a:f5:6e:c5:
f7:d6:5e:ed:92:76:99:b9:14:05:67:fc:7b:e8:aa:ce:ce:dd:
d2:dc:cc:6a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBJm1gTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MTg5Yzc0OTUwMmU1NTM2NmEzNTBiZWE5NzM1NGY2OTk3YzNjMzIxMB4XDTIyMDYy
MjA4MzM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTIxOWZkNGY2YTk0
Mjk0OGM0NzUyZTc3MjA1OTZmMTIzNmI1ZWU5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKU1KAF18L0EFSpztFtu++QmvhSO3wC+q2YgUt1dm4Vq6CFU
REYB6o/UOlUnrcC5TZjTeeOeS5xYpzpqYYe0cFyh5wJG+blxbUHOVjWAwYpe5McZ
TH1P7p90getJVySZywHiklpsbMgeoxXF2U1Kts9KkvGSVwcIRjc8+rrTLZiE3ihl
O3rawVahT6Gcoz92d39/QdxMeXN56i3YxUtN8cNqj8BYLD0gX7IelN8lrxOKVyDS
JGxL50aNe85xdd8SprwcfRNVLlI5shw06kGR/Z1Ik9m6rxtpN4ij8AplaVxGrEAw
rCZoFROgvzttPA9nqkj+EBzhJO19igCV8gbP5g8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSiGf1PapQpSMR1LncgWW8SNrXuljAfBgNVHSMEGDAWgBRhicdJUC5VNmo1
C+qXNU9pl8PDITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lZbkhTVkF1VlRacU5RdnFselZQYVpmRHd5RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvZmViYjM3LWQyZmUtNDQ0Yy04N2RiLWJkNmM5OWU3ZTJkYS8x
L29objlUMnFVS1VqRWRTNTNJRmx2RWphMTdwWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
ZmViYjM3LWQyZmUtNDQ0Yy04N2RiLWJkNmM5OWU3ZTJkYS8xL1lZbkhTVkF1VlRa
cU5RdnFselZQYVpmRHd5RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAasWHAMEAKsWHzANBgkqhkiG9w0B
AQsFAAOCAQEAaVmmq7Y286HAvKrzvtKTYR/iVGNzGGxOuFlW0NARrTzwNkl+xUtW
6Z5ByqcJ4kL+EEXKc/bSpLlPhxlKigtVaRUXokqi5DDm3Gl1E2EaBXT2M14pIbR/
9YYU6KXBTrfR393EwV/OI6Zzi1yhnFk2jxSmW7mrYkY0H3VVrb2cjLeEoQk5RxGG
tG0JyVjGJSB365zqHcKJgS7Fb4UVCxLCE+3LiKZ8G9AUMplBLMGqj4dD+LShO75u
E5LALLxDmSYMmkFYKBY8CeVipCpYWbVMSjD+gFcw7CWw5IjeS79xagEj4nMhOdRK
9W7F99Ze7ZJ2mbkUBWf8e+iqzs7d0tzMag==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org