Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vs2q7M0iZm7bPxUZTly7BEmiZ2A.roa
File: vs2q7M0iZm7bPxUZTly7BEmiZ2A.roa (raw, json)
Hash identifier: nfoGntdr47xxmqWa7sCrVJRqOuk8Rtkmsut8rIQ621M=
Subject key identifier: BE:CD:AA:EC:CD:22:66:6E:DB:3F:15:19:4E:5C:BB:04:49:A2:67:60
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0183F41FB160D9123ABDD49986B5DD769886
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vs2q7M0iZm7bPxUZTly7BEmiZ2A.roa
Signing time: Thu 20 Oct 2022 06:41:01 +0000
ROA not before: Thu 20 Oct 2022 06:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 176.221.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:1f:b1:60:d9:12:3a:bd:d4:99:86:b5:dd:76:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 20 06:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=becdaaeccd22666edb3f15194e5cbb0449a26760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:70:ba:07:4c:9a:11:1f:5b:ad:d1:f9:94:
0d:53:f9:40:de:ef:8a:c5:1c:08:03:cb:2a:3f:e4:
94:31:78:2c:0d:b4:14:6c:96:58:a7:73:30:7b:c7:
c6:15:de:10:2f:e2:82:f1:e7:7e:36:e5:41:6f:30:
3b:89:e1:7e:e8:4b:20:c1:4b:2c:ef:a0:52:39:58:
96:52:04:be:b1:95:35:25:c5:94:f2:07:bb:34:0b:
d1:65:50:3e:49:1d:ed:58:81:9a:3a:8f:69:b2:4e:
7d:20:63:22:73:70:f9:f1:24:1f:74:19:c4:f0:eb:
8a:0f:b2:33:eb:14:85:62:ff:ea:e8:e7:ea:8e:43:
90:d7:6d:d1:3c:1e:c3:44:2e:4a:1f:b6:e0:89:50:
0b:3c:0a:3c:87:14:a0:ce:ff:06:e7:ed:c2:4b:d1:
b6:52:96:13:0c:30:ab:7b:76:3d:71:ab:a6:cd:06:
5e:c2:d3:56:d8:d6:bc:c6:91:b1:05:7d:35:27:97:
9c:86:2f:9c:ef:2e:6a:57:94:54:00:6c:38:de:60:
6c:56:a7:fc:9b:24:22:ce:2d:c3:e0:61:1f:da:a3:
ac:97:4a:dc:17:d6:e4:86:25:15:60:c7:ef:a2:7f:
15:d8:69:17:1e:82:fb:fd:a5:88:30:ad:83:63:7c:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CD:AA:EC:CD:22:66:6E:DB:3F:15:19:4E:5C:BB:04:49:A2:67:60
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/vs2q7M0iZm7bPxUZTly7BEmiZ2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
01:63:08:47:cb:07:a6:c6:f9:cc:fc:6e:eb:4e:d2:62:8e:46:
51:8c:7c:c2:ed:3c:92:ec:c4:cd:cc:7b:26:bf:06:5a:9a:ed:
21:3b:60:e2:7d:4c:28:ba:fb:0f:1b:79:c9:31:a2:ed:b5:24:
c4:31:fe:53:e0:92:a9:4f:42:25:85:85:db:5b:08:dd:f2:0e:
64:ec:dd:6a:4f:30:a5:e0:27:51:ff:69:c8:14:fc:dd:21:05:
1a:3c:88:8b:d1:c2:b5:cb:ee:79:5d:8e:b6:69:15:a6:a5:d2:
67:d5:0b:e2:82:0b:3e:96:dd:c7:d0:81:ab:b5:ed:46:d7:77:
e5:e5:d5:56:c4:80:c2:54:41:15:25:0d:69:78:f1:0e:d9:87:
99:64:25:12:00:17:31:cc:fe:a4:fe:86:c1:8f:00:79:16:ad:
2b:39:ba:2f:56:5e:de:64:ca:f6:e2:71:ab:68:1d:1b:59:bf:
8b:c1:2c:ac:0d:af:17:22:a5:4b:dd:2d:3f:b7:0d:9d:97:71:
3d:8c:e5:67:ad:be:76:4c:03:83:a3:df:28:44:79:b3:c1:ea:
bf:e8:d8:cd:b1:7d:62:1f:b0:5f:a0:12:63:28:6d:0d:d4:c1:
fa:54:2a:13:06:87:55:03:35:c0:66:84:44:1d:2b:21:c4:a0:
d4:fb:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:01 2025 by rpki-client