Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Cxta0Q8lE2H7QFSE-04aXN5rY5c.roa
File: Cxta0Q8lE2H7QFSE-04aXN5rY5c.roa (raw, json)
Hash identifier: 3zhDJgHp/C45ysxvoEUtN7vCSfEv2tk8Q0e2Nfo7GhM=
Subject key identifier: 0B:1B:5A:D1:0F:25:13:61:FB:40:54:84:FB:4E:1A:5C:DE:6B:63:97
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01957E14FFA0DE1442016A0D55ABA86C6F58
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Cxta0Q8lE2H7QFSE-04aXN5rY5c.roa
Signing time: Mon 10 Mar 2025 03:24:20 +0000
ROA not before: Mon 10 Mar 2025 03:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273167
IP address blocks: 171.22.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7e:14:ff:a0:de:14:42:01:6a:0d:55:ab:a8:6c:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 10 03:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b1b5ad10f251361fb405484fb4e1a5cde6b6397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:19:64:19:c2:4c:a7:05:45:6f:ef:95:32:
0a:be:1f:ac:e5:90:f9:56:49:56:16:7f:56:15:af:
cc:82:03:e3:eb:18:f7:23:5f:c3:8b:e7:70:31:97:
e5:30:43:b1:c9:4a:aa:0f:80:9b:35:77:d5:b3:8b:
c4:b0:84:37:cd:2d:95:0a:fe:7a:d4:fd:04:96:8a:
e8:32:dc:44:f2:2e:cb:f1:58:ab:d1:e2:e9:2e:f2:
eb:2d:63:aa:87:b0:06:12:18:85:09:2b:66:58:9c:
e2:31:c0:f8:25:d9:9b:85:7e:1c:ec:a5:7c:20:cd:
d1:b5:ab:a2:13:bb:f3:4a:03:09:2b:e2:73:8b:73:
57:4b:e4:f9:36:a3:77:a0:64:fb:5a:03:5b:93:bf:
5f:b2:2a:d3:58:a4:c3:d4:26:54:fd:f3:93:29:47:
cc:f4:fb:70:96:46:a4:9d:97:3a:a4:81:a1:71:0d:
68:ac:a9:71:40:bd:b5:56:49:ce:f7:be:9f:2b:76:
0a:74:13:63:3c:84:dd:41:6e:f8:45:3c:32:13:20:
26:6f:88:77:99:eb:17:30:ca:97:84:f7:9a:22:3e:
eb:9f:32:1b:07:65:fb:60:71:33:f4:e8:39:b1:6b:
22:d2:25:38:ef:df:8b:2f:e2:29:56:88:18:3b:f9:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:5A:D1:0F:25:13:61:FB:40:54:84:FB:4E:1A:5C:DE:6B:63:97
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Cxta0Q8lE2H7QFSE-04aXN5rY5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.165.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fb:39:0f:01:2f:7b:b6:9d:78:df:4b:3a:f2:a3:a5:6c:ac:
55:d1:06:cb:31:e7:13:d4:ee:e2:ef:1d:bd:c6:a4:31:2b:87:
ca:b5:5e:4c:30:cd:2c:e0:f6:58:46:46:62:be:ff:4b:5a:3f:
1a:1e:53:c5:c4:ab:51:84:2c:f0:5c:5a:62:05:d2:7d:2a:92:
99:31:91:8d:be:31:0f:f9:38:27:75:73:91:8c:ea:ea:e9:28:
61:e9:02:5b:2a:13:67:7b:c9:d2:fa:37:28:1d:76:f7:a6:13:
c5:13:2f:74:25:0c:2f:ac:87:76:88:7e:5f:b0:15:85:6b:1d:
e6:e4:fe:40:e2:49:57:62:5e:15:70:ef:e4:6b:8e:be:04:0a:
6b:30:40:fd:5c:f6:ab:2a:eb:01:99:e4:1c:f7:4c:ed:ec:2a:
ba:f5:0c:f7:5f:cc:c9:2c:60:5b:c4:5c:d8:ff:f2:05:c0:fd:
9b:e1:e5:84:57:a4:99:50:b2:14:ca:5a:59:55:b9:e7:c2:fc:
ef:fd:ab:01:42:c1:4a:52:59:70:7f:22:18:c5:2c:22:76:4b:
a6:67:21:b6:ab:29:b7:2b:72:43:ee:8b:59:72:ef:03:ad:99:
41:f5:d2:ce:a1:69:91:d5:13:fb:76:b9:3e:b2:1d:27:75:4e:
09:7d:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:29:28 2025 by rpki-client