Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/d_56x2wmCzSK1aQqIcXUYqRt1ho.roa
File: d_56x2wmCzSK1aQqIcXUYqRt1ho.roa (raw, json)
Hash identifier: 4E6ppx4fL16JLKVEy8UC+FQ/dcWoDWV3yMq4J3g0RcA=
Subject key identifier: 77:FE:7A:C7:6C:26:0B:34:8A:D5:A4:2A:21:C5:D4:62:A4:6D:D6:1A
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C57B530F6B130B4608244C5529465
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/d_56x2wmCzSK1aQqIcXUYqRt1ho.roa
Signing time: Sun 01 Jan 2023 22:55:46 +0000
ROA not before: Sun 01 Jan 2023 22:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396073
IP address blocks: 171.22.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:57:b5:30:f6:b1:30:b4:60:82:44:c5:52:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77fe7ac76c260b348ad5a42a21c5d462a46dd61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:a3:fa:f9:89:31:c1:e8:00:a4:bf:43:38:
3a:7e:a2:e5:01:af:41:ac:c0:8d:82:23:24:f2:fa:
00:23:ad:3a:42:8a:a9:fb:94:7c:6a:fa:b2:95:3a:
f2:27:8a:de:5a:f1:c1:62:aa:c7:97:98:08:fd:82:
02:83:d8:ba:f4:db:74:68:3e:c8:ef:a2:97:82:28:
bc:a3:b6:8c:0c:b7:5c:00:a5:a1:ad:9c:ad:74:9a:
fb:d5:88:55:13:51:1d:f9:2a:fb:07:5a:cf:88:98:
bc:02:45:1f:d1:04:36:41:76:65:8f:8f:c5:b7:5c:
50:2d:a4:08:ff:ed:96:a2:92:95:60:aa:6c:ee:c3:
7e:3c:1e:9f:65:2c:96:e6:10:d5:fa:69:47:ec:da:
4c:f1:6b:39:f5:ae:0f:9f:6c:10:b0:10:ea:20:6f:
8d:35:ea:14:36:22:6f:16:92:05:a8:a7:23:ca:92:
dd:d4:0b:5c:db:73:de:3e:7f:4c:3d:1e:68:80:7b:
1a:60:a3:a7:28:e3:bd:cc:b4:07:e5:55:30:c5:91:
1f:29:86:e3:b3:b0:91:e0:94:54:4e:b0:87:64:53:
7c:6d:5e:12:da:d5:85:0c:ce:e3:47:fb:ce:3e:9a:
31:af:07:21:79:ca:25:9a:85:f5:98:d0:54:b6:12:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:7A:C7:6C:26:0B:34:8A:D5:A4:2A:21:C5:D4:62:A4:6D:D6:1A
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/d_56x2wmCzSK1aQqIcXUYqRt1ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3d:5b:94:9d:d5:d6:a0:f3:4e:e6:7f:39:c6:0d:d8:70:2e:
b1:9b:12:70:db:56:3a:b5:8a:50:44:9a:52:b5:1c:88:aa:dd:
5f:c2:e8:0b:f1:97:df:a9:ba:25:46:74:39:1d:3a:e5:41:11:
80:7f:fe:94:c7:95:5d:6b:d7:72:5a:38:c6:f9:32:95:2c:e1:
cf:e0:97:79:f0:80:5c:c2:56:05:de:1d:17:6c:e4:05:ab:d4:
64:25:4c:d7:8b:3f:de:04:9a:ed:5b:36:55:0f:7b:99:88:f1:
7b:5b:b1:65:12:cd:28:c0:29:be:6e:ec:fe:4d:13:7d:4d:fa:
68:6f:46:3a:04:4f:1d:63:94:5e:b8:a9:5f:7e:a4:03:f5:36:
77:76:e8:c3:2d:0f:76:2e:af:a9:49:32:99:f1:9c:b1:39:a3:
ab:93:85:60:ea:06:2f:58:bf:6f:a0:5c:da:9b:15:6a:40:95:
c7:06:b9:f5:2d:95:e8:41:6b:35:5a:65:18:69:f2:36:dd:ed:
47:16:34:6c:67:6d:75:b7:c1:4c:d3:6f:0e:0c:f6:d5:48:93:
d0:0c:44:4b:94:05:c6:f1:e9:9c:0f:77:ba:a5:4f:e8:e3:94:
34:d8:15:16:cd:70:85:8f:4c:fe:f2:b2:64:e0:17:f3:e6:a6:
86:ea:4c:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvjFe1MPaxMLRggkTFUpRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjMwMTAxMjI1NTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2ZlN2FjNzZjMjYwYjM0OGFkNWE0MmEyMWM1ZDQ2MmE0NmRkNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQqj+vmJMcHoAKS/Qzg6fqLlAa9B
rMCNgiMk8voAI606Qoqp+5R8avqylTryJ4reWvHBYqrHl5gI/YICg9i69Nt0aD7I
76KXgii8o7aMDLdcAKWhrZytdJr71YhVE1Ed+Sr7B1rPiJi8AkUf0QQ2QXZlj4/F
t1xQLaQI/+2WopKVYKps7sN+PB6fZSyW5hDV+mlH7NpM8Ws59a4Pn2wQsBDqIG+N
NeoUNiJvFpIFqKcjypLd1Atc23PePn9MPR5ogHsaYKOnKOO9zLQH5VUwxZEfKYbj
s7CR4JRUTrCHZFN8bV4S2tWFDM7jR/vOPpoxrwchecolmoX1mNBUthLtSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHf+esdsJgs0itWkKiHF1GKkbdYaMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvZF81Nngyd21DelNLMWFRcUljWFVZcVJ0MWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxZOMA0G
CSqGSIb3DQEBCwUAA4IBAQCiPVuUndXWoPNO5n85xg3YcC6xmxJw21Y6tYpQRJpS
tRyIqt1fwugL8ZffqbolRnQ5HTrlQRGAf/6Ux5Vda9dyWjjG+TKVLOHP4Jd58IBc
wlYF3h0XbOQFq9RkJUzXiz/eBJrtWzZVD3uZiPF7W7FlEs0owCm+buz+TRN9Tfpo
b0Y6BE8dY5ReuKlffqQD9TZ3dujDLQ92Lq+pSTKZ8ZyxOaOrk4Vg6gYvWL9voFza
mxVqQJXHBrn1LZXoQWs1WmUYafI23e1HFjRsZ211t8FM028ODPbVSJPQDERLlAXG
8emcD3e6pU/o45Q02BUWzXCFj0z+8rJk4Bfz5qaG6kyO
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:09 2025 by rpki-client