Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/xt7oDX9ux1W7NGPMsyixUhUYB-U.roa
File: xt7oDX9ux1W7NGPMsyixUhUYB-U.roa (raw, json)
Hash identifier: WrimaadYzWysAe1G/9ak2LnoWCB9DJf5RascY1q6u08=
Subject key identifier: C6:DE:E8:0D:7F:6E:C7:55:BB:34:63:CC:B3:28:B1:52:15:18:07:E5
Certificate issuer: /CN=ff40503cb21a922897971726f6b7eecc253f1193
Certificate serial: 01856FB117A961B994770EE47582EB10B5C9
Authority key identifier: FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/xt7oDX9ux1W7NGPMsyixUhUYB-U.roa
Signing time: Sun 01 Jan 2023 23:35:54 +0000
ROA not before: Sun 01 Jan 2023 23:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3221
IP address blocks: 171.22.244.0/22 maxlen: 22
193.40.0.0/16 maxlen: 16
2001:bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:17:a9:61:b9:94:77:0e:e4:75:82:eb:10:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40503cb21a922897971726f6b7eecc253f1193
Validity
Not Before: Jan 1 23:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6dee80d7f6ec755bb3463ccb328b152151807e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:b9:24:f2:3a:0c:c3:c7:bc:4a:eb:ea:2a:
e6:b3:7e:44:3e:9d:b9:44:ac:48:b3:3d:00:42:e4:
ae:e5:92:86:96:94:11:6a:de:bd:28:b1:1a:8f:54:
df:d8:32:03:d1:9a:0a:66:08:7a:4c:c4:8c:12:05:
db:7f:dd:b9:09:51:43:91:3f:51:a9:5a:67:57:ca:
39:62:6c:26:ab:fa:3e:78:6d:6f:5b:64:cb:9d:e4:
86:c1:37:05:40:e2:56:3f:9a:3c:f8:72:90:02:b5:
ba:50:e6:fe:4a:82:cd:f1:66:32:60:94:73:c8:62:
98:46:16:93:ca:83:a2:19:a0:d8:f3:a0:b1:90:cd:
7a:25:7a:95:27:5f:fe:5d:57:f2:e0:4d:fa:20:3a:
52:a5:79:b6:5f:74:50:62:ba:07:94:ef:e9:12:75:
85:f6:c1:cd:f0:06:af:f7:68:07:db:bb:29:cd:2b:
6d:f4:a8:f0:51:48:b2:c6:53:62:96:dd:69:f3:bf:
cb:3f:bd:08:41:a9:44:81:12:2e:40:10:db:aa:af:
45:95:47:ef:75:fc:fb:e2:d9:3f:f1:cd:00:11:55:
88:23:92:d1:93:8a:81:a9:86:eb:5f:57:81:94:8f:
eb:c8:0c:2f:ca:42:e2:8f:65:41:a1:0c:15:1e:56:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:E8:0D:7F:6E:C7:55:BB:34:63:CC:B3:28:B1:52:15:18:07:E5
X509v3 Authority Key Identifier:
keyid:FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/xt7oDX9ux1W7NGPMsyixUhUYB-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/_0BQPLIakiiXlxcm9rfuzCU_EZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.244.0/22
193.40.0.0/16
IPv6:
2001:bb8::/32
Signature Algorithm: sha256WithRSAEncryption
31:33:80:a3:5c:b7:27:a5:1b:7d:50:c8:5d:d1:45:e1:bd:6d:
7d:16:c3:94:51:7e:9c:58:9d:45:8b:b4:75:ff:fd:ef:5b:e4:
26:53:c0:12:e2:8c:82:40:f2:78:f0:f6:4a:08:44:a7:38:39:
c4:c0:2f:ec:2d:3b:0c:3d:df:05:5d:34:80:80:bf:ed:2f:73:
1d:fb:b4:f5:4c:09:b7:d7:7d:39:e2:1d:84:3e:a0:33:31:90:
ce:4c:ac:6b:79:f8:bc:75:10:58:42:9a:bc:17:13:39:45:19:
8c:54:5c:58:d0:79:8b:63:30:93:72:4f:4f:e7:2b:e5:88:5a:
c6:7c:81:80:81:4b:9c:0c:63:65:02:8b:eb:57:af:68:3b:61:
3a:b8:1d:fc:6e:08:31:f0:51:8c:9f:86:cc:fc:28:61:5f:7c:
c6:fb:9b:e4:7b:02:c6:06:e9:02:2c:c0:18:5e:a3:65:cf:9e:
8c:46:97:4e:a6:eb:07:d9:71:4a:1c:13:b5:f9:f6:2d:18:b9:
18:d1:4b:7b:86:22:ee:34:e4:69:44:65:b6:30:2d:8f:d6:f1:
ae:5f:67:5f:a6:12:eb:11:4a:01:62:79:82:27:12:5a:71:e5:
89:03:88:5c:dd:7d:cf:a6:43:31:b0:83:96:e3:c8:ac:a9:16:
0d:ca:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 12:33:02 2023 by rpki-client on console-ams.rpki-client.org