Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_H_2bnDdkySrEycRKnn6yY8MS_U.roa
File: _H_2bnDdkySrEycRKnn6yY8MS_U.roa (raw, json)
Hash identifier: yM7XpZ8+tHtjYnuKczaqay8rdbclWEef3kDdy5oC0U8=
Subject key identifier: FC:7F:F6:6E:70:DD:93:24:AB:13:27:11:2A:79:FA:C9:8F:0C:4B:F5
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0AA17945
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_H_2bnDdkySrEycRKnn6yY8MS_U.roa
Signing time: Wed 27 Apr 2022 16:46:29 +0000
ROA not before: Wed 27 Apr 2022 16:46:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25780
IP address blocks: 171.22.76.0/22 maxlen: 24
185.172.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178354501 (0xaa17945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 27 16:46:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc7ff66e70dd9324ab1327112a79fac98f0c4bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:96:ee:6e:db:78:9e:cc:62:de:27:c3:7c:
45:12:27:b3:fd:a0:8a:2a:27:0f:c2:13:79:08:09:
31:3f:91:2a:77:c6:4c:a3:30:b6:a9:5c:cd:e0:8a:
33:70:78:84:5c:62:a3:18:9a:29:74:9b:c4:66:db:
d1:15:d6:d9:eb:f9:00:10:97:ba:2f:09:3a:ba:5d:
73:21:51:31:49:65:39:29:ff:96:2b:42:ce:3e:1a:
c0:68:97:ef:14:a9:27:af:39:0e:24:fb:65:58:02:
66:ed:80:ba:5d:05:79:f9:1f:56:81:13:51:d7:74:
91:6e:27:b1:19:1e:5f:f5:5a:62:f6:68:c1:bf:f8:
32:c8:92:50:9d:8a:24:f9:db:5d:53:94:77:29:b0:
5e:ba:7a:91:2b:fa:69:7d:fa:fb:4b:ce:64:e0:cf:
b1:23:b7:77:ee:21:3e:2e:ea:a0:62:e8:0c:00:41:
be:c8:29:f0:e1:17:b6:44:62:9f:24:93:7d:99:01:
01:e6:cf:1c:23:b0:56:8c:71:ed:ee:f3:33:09:c0:
a8:aa:cf:40:73:93:42:cd:61:97:24:d0:0f:a1:0f:
7c:32:ca:6d:42:25:5d:fc:c7:d9:7d:57:ed:6f:3d:
e4:82:20:32:c5:d5:36:3c:08:26:27:f6:35:ed:19:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:F6:6E:70:DD:93:24:AB:13:27:11:2A:79:FA:C9:8F:0C:4B:F5
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_H_2bnDdkySrEycRKnn6yY8MS_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/22
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
89:c1:b1:9a:ff:b6:b3:8b:36:4f:06:7d:b9:f3:bb:de:0d:0a:
08:c1:bd:a4:3c:2a:bd:2f:92:ed:d0:9e:67:0c:a8:a9:85:62:
07:40:74:49:69:52:15:15:f9:89:b8:af:6d:75:10:65:88:e1:
65:28:ab:a0:5c:f6:d6:43:53:a5:06:83:1e:4c:12:3e:c7:a7:
b4:3f:8a:6a:2b:3a:30:47:70:2b:c6:6b:32:47:70:ea:07:53:
77:63:c6:e1:58:e0:47:a1:75:19:0a:83:db:46:ed:0c:2d:76:
90:b0:5d:27:aa:68:27:0c:d4:f8:01:b7:c7:ac:56:2d:e3:f1:
13:aa:4d:58:62:e2:1b:a4:1d:53:80:6c:25:87:7e:2c:89:63:
e3:01:2a:9c:0f:51:c2:20:93:44:24:72:84:5e:3a:8c:ee:c4:
3b:3f:35:6a:00:a4:a9:f1:0b:07:62:ca:30:1e:30:bd:21:1b:
7c:7b:57:f8:78:b8:7e:b4:57:24:6b:fb:74:72:42:46:c7:61:
63:b0:3e:26:2c:75:3a:e6:72:e5:96:37:23:76:b6:7b:19:92:
5e:3b:51:85:f6:fb:bf:e4:e8:30:fb:c1:d5:fa:52:47:cd:a6:
21:ac:24:e0:5f:06:8a:c2:59:a8:f1:95:eb:c8:77:dd:45:d3:
d4:6c:52:0c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECqF5RTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDQy
NzE2NDYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM3ZmY2NmU3MGRk
OTMyNGFiMTMyNzExMmE3OWZhYzk4ZjBjNGJmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOqKlu5u23iezGLeJ8N8RRIns/2giionD8ITeQgJMT+RKnfG
TKMwtqlczeCKM3B4hFxioxiaKXSbxGbb0RXW2ev5ABCXui8JOrpdcyFRMUllOSn/
litCzj4awGiX7xSpJ685DiT7ZVgCZu2Aul0FefkfVoETUdd0kW4nsRkeX/VaYvZo
wb/4MsiSUJ2KJPnbXVOUdymwXrp6kSv6aX36+0vOZODPsSO3d+4hPi7qoGLoDABB
vsgp8OEXtkRinySTfZkBAebPHCOwVoxx7e7zMwnAqKrPQHOTQs1hlyTQD6EPfDLK
bUIlXfzH2X1X7W895IIgMsXVNjwIJif2Ne0ZYtMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT8f/ZucN2TJKsTJxEqefrJjwxL9TAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L19IXzJibkRka3lTckV5Y1JLbm42eVk4TVNfVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAqsWTAMEArmsrDANBgkqhkiG9w0B
AQsFAAOCAQEAicGxmv+2s4s2TwZ9ufO73g0KCMG9pDwqvS+S7dCeZwyoqYViB0B0
SWlSFRX5ibivbXUQZYjhZSiroFz21kNTpQaDHkwSPsentD+Kais6MEdwK8ZrMkdw
6gdTd2PG4VjgR6F1GQqD20btDC12kLBdJ6poJwzU+AG3x6xWLePxE6pNWGLiG6Qd
U4BsJYd+LIlj4wEqnA9RwiCTRCRyhF46jO7EOz81agCkqfELB2LKMB4wvSEbfHtX
+Hi4frRXJGv7dHJCRsdhY7A+Jix1OuZy5ZY3I3a2exmSXjtRhfb7v+ToMPvB1fpS
R82mIawk4F8GisJZqPGV68h33UXT1GxSDA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:25 2025 by rpki-client