Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/m4nA49Lv7EMjkCcxgMafzldImD4.roa
File: m4nA49Lv7EMjkCcxgMafzldImD4.roa (raw, json)
Hash identifier: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=
Subject key identifier: 9B:89:C0:E3:D2:EF:EC:43:23:90:27:31:80:C6:9F:CE:57:48:98:3E
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 019420D63530F739150CF1DF655FE4DA8C48
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/m4nA49Lv7EMjkCcxgMafzldImD4.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19527
IP address blocks: 66.22.228.0/23 maxlen: 24
66.22.228.0/24 maxlen: 24
66.22.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:30:f7:39:15:0c:f1:df:65:5f:e4:da:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b89c0e3d2efec432390273180c69fce5748983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:c6:29:d8:7b:28:20:4a:2c:8b:16:70:9f:
49:93:a0:5a:ec:f2:9e:54:6f:70:98:0b:da:4c:21:
d0:87:a4:6d:cd:b9:68:01:bd:c4:de:64:c3:60:e0:
62:fa:96:3c:15:4c:27:87:0d:71:c0:9d:42:77:b7:
66:df:2e:de:a1:3c:4c:32:27:04:90:9a:6a:e1:b5:
2a:86:bd:a0:85:88:d6:ab:ba:75:98:c3:2b:c4:1f:
b1:0b:82:f4:57:bf:c0:ea:ed:e0:aa:51:0f:16:99:
02:4c:0a:f6:e9:b3:62:69:28:ed:b6:ec:b0:bb:f8:
8a:1b:e0:38:21:03:94:83:23:60:95:95:d9:30:5e:
be:7c:1f:ea:6f:de:9c:85:ce:33:39:d9:47:11:52:
bf:89:bf:6f:60:7f:78:c8:93:bc:62:8a:38:5f:44:
b9:13:ac:39:61:59:b1:2f:cb:9d:41:92:07:c9:be:
a1:2f:d3:00:5e:58:02:c3:93:34:1a:9d:48:6c:cc:
b0:14:b8:ce:e3:d9:67:ea:70:7d:ec:ca:81:6f:66:
7f:37:88:01:57:c6:92:c4:99:18:fa:5b:26:4c:00:
26:7c:4a:5f:b7:b6:9c:c5:ab:d3:b5:53:28:6b:4a:
c3:eb:86:90:60:25:e0:17:eb:48:5a:fb:48:c5:c4:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:C0:E3:D2:EF:EC:43:23:90:27:31:80:C6:9F:CE:57:48:98:3E
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/m4nA49Lv7EMjkCcxgMafzldImD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:af:58:f2:3a:19:c7:a0:39:2d:2a:30:66:cd:33:34:f7:33:
90:93:ac:8c:36:f7:d5:78:94:b7:7e:e3:04:d2:ff:f5:cf:af:
9d:9f:98:7b:09:82:a8:c8:ab:3d:4c:86:56:4d:e6:a9:8e:59:
bb:c3:69:62:a5:17:19:64:05:c6:65:e0:3a:a5:07:10:19:f6:
bc:3b:a7:bd:13:bf:df:83:4a:39:e5:1f:22:59:e2:03:05:f5:
70:f5:89:21:bf:d5:34:46:03:74:38:e4:f7:e4:93:63:fc:2b:
a8:c9:22:12:5d:54:ef:f3:3d:e2:40:11:a5:db:b5:37:86:f9:
b4:04:23:77:8f:3f:04:f9:0e:89:de:cb:34:e2:79:3f:8b:bd:
37:60:b7:9f:ad:05:b2:05:ef:77:29:49:61:ea:8b:ca:50:3c:
ef:69:92:02:aa:2f:e2:6d:6e:58:29:7d:6b:c9:6e:00:78:09:
ad:2a:bc:e0:30:1a:44:6c:7b:f7:ba:d2:92:cb:ea:0d:8a:f6:
f8:f6:d5:a8:23:40:87:3b:c1:2b:c7:52:32:6f:97:a0:e6:f7:
81:12:ab:48:43:c9:70:91:27:22:1d:79:7d:39:9e:ca:3f:95:
2f:af:8b:9b:f7:54:79:96:d0:c5:04:19:33:4c:05:74:07:05:
5d:a9:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:59:27 2025 by rpki-client