Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa
File: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (raw, json)
Hash identifier: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=
Subject key identifier: EC:D3:96:4B:0A:FA:23:1F:56:A8:CB:45:09:AB:94:A1:7A:B6:07:81
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0194221FDBE098F835C7B4A41B8FBA955525
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 171.22.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:db:e0:98:f8:35:c7:b4:a4:1b:8f:ba:95:55:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecd3964b0afa231f56a8cb4509ab94a17ab60781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:16:b6:5e:a5:0f:b5:56:6f:97:d1:85:e1:
48:42:fa:cd:7b:f3:e0:08:13:d5:5c:f4:e1:21:df:
a2:55:16:d9:57:69:39:9e:dd:a4:a0:82:10:f8:34:
6c:09:64:fa:11:fb:9f:b5:c0:14:6c:36:60:46:d6:
25:60:96:8f:48:00:8f:09:f7:a2:05:b7:87:83:ea:
8b:71:f9:9e:31:ba:72:7d:52:a7:0b:b7:e9:5f:58:
5a:5e:7c:c2:5e:48:5e:29:44:89:b8:b2:d7:b5:36:
99:a3:a1:28:8d:89:7f:87:fd:df:26:f0:42:d8:3b:
58:6a:36:e0:e8:78:de:dd:52:4b:60:ba:02:9e:83:
a2:e9:7a:fe:0d:db:f6:b8:88:3e:2f:cd:03:19:81:
c6:18:20:93:cc:a3:da:69:9c:6e:38:ba:8c:25:a9:
4f:73:42:32:54:4d:26:de:3b:62:81:fe:ce:8e:8e:
a2:54:4b:ac:ec:c6:b7:55:e8:d4:8f:fd:db:67:87:
96:67:54:fb:69:9b:00:fe:9a:51:fc:f9:1b:3e:16:
e9:72:dc:42:d9:6a:a4:14:c5:ec:08:3c:16:2e:10:
0b:84:34:a6:10:ab:7e:0a:95:26:19:9e:7c:14:b2:
db:58:13:82:b4:00:42:dd:ff:fb:3e:13:64:60:3a:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:96:4B:0A:FA:23:1F:56:A8:CB:45:09:AB:94:A1:7A:B6:07:81
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
17:7d:7a:27:c1:70:4f:9b:56:13:a7:93:9c:77:d9:1b:fe:80:
03:27:74:24:17:28:79:5e:59:e3:fe:3a:0e:da:2f:97:b0:d3:
e2:f0:4c:d5:aa:4b:8c:77:07:d5:7b:da:bb:3b:6d:a1:14:75:
fe:b4:b7:be:cb:36:ce:19:01:e6:31:f2:d4:e2:2b:ed:88:a5:
82:7a:d2:b8:ad:e5:8a:be:6d:ee:9f:a8:24:7e:02:c2:dd:b6:
df:c6:75:d8:cf:d1:41:34:f3:e8:cd:5b:21:2f:fd:8d:e5:da:
0f:d5:ae:98:7f:78:0a:b3:61:4c:7e:bc:4a:7f:9e:f0:d4:53:
05:25:26:57:15:2f:02:ab:e2:17:cc:1b:59:04:12:66:59:7f:
3d:9c:03:74:19:32:38:1c:1d:66:5d:59:e9:1e:71:95:3e:07:
c5:a9:3a:0b:de:b5:6b:0e:1d:ae:c6:bc:fa:e8:c6:6b:4b:6a:
16:a9:0d:64:07:fb:0f:61:15:52:4e:34:e6:97:e3:d7:b7:ed:
c5:da:e0:e0:6b:5b:e9:3d:1d:96:6a:d1:e4:ac:66:8c:0b:2d:
d6:ed:11:39:64:87:27:af:5a:1e:30:13:b3:20:29:79:77:f3:
d9:20:be:ad:95:cd:02:7b:8d:25:fe:33:cd:f7:9c:bd:d8:38:
d1:65:8e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:46:34 2025 by rpki-client