Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/49O5pgx96ZytOrM35WIfPYDCGFk.roa
File: 49O5pgx96ZytOrM35WIfPYDCGFk.roa (raw, json)
Hash identifier: tpMUocM9+z+XdoxQXtS3c6GKQdwXFsRGvoi0LW0ME3I=
Subject key identifier: E3:D3:B9:A6:0C:7D:E9:9C:AD:3A:B3:37:E5:62:1F:3D:80:C2:18:59
Certificate issuer: /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial: 019425FDAD29F96CDA66958639F1C74887E2
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/49O5pgx96ZytOrM35WIfPYDCGFk.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13332
IP address blocks: 171.22.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ad:29:f9:6c:da:66:95:86:39:f1:c7:48:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d3b9a60c7de99cad3ab337e5621f3d80c21859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:94:a0:14:73:bd:fb:70:96:1e:c9:b1:d4:
d9:22:21:4a:0d:49:49:63:1b:cb:37:c9:ea:48:af:
ae:3a:1e:7a:92:3d:74:eb:8a:13:33:64:8d:4f:9a:
c4:6a:e1:63:f2:8a:5a:45:83:94:cc:87:ab:20:f0:
7c:ce:3b:48:a3:a7:e9:b4:3a:02:cc:38:ca:6d:4e:
75:4e:b1:dc:aa:0d:23:e8:23:84:f3:f2:05:9d:db:
88:ad:9f:62:7e:05:f2:98:f4:3d:20:21:78:58:b3:
eb:8a:18:89:af:15:6c:b5:53:b8:ba:45:df:1c:a1:
f5:19:bb:dc:c4:66:46:2e:70:2b:58:a6:62:2b:f9:
8e:13:b4:da:49:f5:35:2d:55:58:9c:f8:32:69:43:
8e:b7:ae:cb:16:d5:78:96:f3:2e:89:59:c8:f8:2e:
31:5b:22:fb:ea:49:69:42:c7:bd:3f:c7:11:64:f4:
88:9c:7c:4c:70:d4:34:3d:f7:3b:3f:b7:25:05:28:
46:b4:28:17:a1:39:e3:d4:42:11:1f:66:11:24:e0:
cd:5e:1f:1b:0a:e0:98:21:0d:22:03:78:c7:7d:aa:
37:4c:7e:bd:f7:60:f0:30:10:8b:e8:c9:49:83:f4:
c0:e6:28:db:6f:15:53:de:87:87:fb:98:57:13:41:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D3:B9:A6:0C:7D:E9:9C:AD:3A:B3:37:E5:62:1F:3D:80:C2:18:59
X509v3 Authority Key Identifier:
keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/49O5pgx96ZytOrM35WIfPYDCGFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.216.0/22
Signature Algorithm: sha256WithRSAEncryption
48:99:72:2d:92:4e:d3:85:5a:3d:1e:06:c9:d2:db:39:18:8a:
e0:14:1b:01:e0:84:e5:00:10:c0:f5:6f:e9:ce:fd:3a:ac:26:
eb:67:10:58:14:b9:f2:69:fb:5d:4e:3e:38:ba:17:a0:a2:25:
d8:7c:7b:c2:95:bd:98:e2:13:6c:d2:76:79:2b:16:d1:df:76:
86:df:36:26:c8:52:bc:34:75:ed:2f:15:8f:15:49:11:c3:e7:
49:3c:3f:bc:cd:c3:10:3e:68:26:eb:b9:36:34:65:b4:ed:4f:
9a:d7:81:1c:cd:54:82:f3:57:c0:e2:ca:2e:fc:24:20:15:1e:
53:c2:2b:86:c8:98:02:5b:34:bc:cb:75:a1:e8:f3:21:ea:ee:
57:7f:21:fe:be:42:95:89:70:46:ec:91:b2:86:be:2d:ae:11:
91:76:3b:b1:f6:35:7c:c0:34:1d:58:87:06:f0:39:00:e4:cc:
f1:6f:ab:bb:d4:a6:0b:30:e5:7d:d0:10:c0:53:26:07:45:92:
2f:1f:5c:d8:f1:1c:63:03:80:ee:ad:a2:0d:f0:09:e3:20:1d:
ff:ec:5d:f9:5d:4c:70:da:7d:29:71:95:96:09:12:7f:d0:bb:
61:cc:8b:ed:8b:0f:12:64:b0:3f:60:4e:7d:a0:64:99:1a:fe:
6e:cc:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:58:45 2025 by rpki-client