Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/BzOfGIaqhzL2CJ_ClImHmFtRDlQ.roa
File: BzOfGIaqhzL2CJ_ClImHmFtRDlQ.roa (raw, json)
Hash identifier: 8Jn73NSaDuyz1yXubvZ0IoeTttOR28i/L+p2ZkSa1ZA=
Subject key identifier: 07:33:9F:18:86:AA:87:32:F6:08:9F:C2:94:89:87:98:5B:51:0E:54
Certificate issuer: /CN=9bfb150d090b2c9e548d958b3506546c3480904e
Certificate serial: 01856CEF2FC257F2C2B61374720B70CA2EE2
Authority key identifier: 9B:FB:15:0D:09:0B:2C:9E:54:8D:95:8B:35:06:54:6C:34:80:90:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/BzOfGIaqhzL2CJ_ClImHmFtRDlQ.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209481
IP address blocks: 171.22.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2f:c2:57:f2:c2:b6:13:74:72:0b:70:ca:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bfb150d090b2c9e548d958b3506546c3480904e
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07339f1886aa8732f6089fc2948987985b510e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:b9:01:18:cb:4a:46:a5:e5:2f:98:77:52:
52:fd:e3:94:e5:00:14:89:33:d2:9e:f5:17:5c:cb:
d4:09:31:45:15:30:ef:56:b3:43:ed:65:2d:47:78:
be:6f:a3:ad:4d:fb:e4:cb:70:c5:8b:8c:df:d5:d6:
38:eb:e7:9f:e0:dd:11:a1:fb:68:33:6d:d9:73:1f:
0c:86:e5:3c:b3:a4:5c:55:14:25:ad:81:9e:04:7e:
b3:cc:c4:4c:a6:44:8d:e9:56:21:32:d4:94:1d:b8:
fd:9c:05:bd:cf:ca:8d:03:90:4f:1e:2c:29:23:d9:
02:b9:f2:12:f4:a9:e4:5f:ae:56:94:95:ab:5b:28:
44:9a:63:17:c1:db:38:78:4e:53:c4:f7:24:45:72:
d1:d5:ce:73:06:2b:68:f3:24:85:54:d7:81:44:fe:
c8:cc:a7:68:5e:c3:e0:9a:a3:74:d7:51:97:44:08:
67:60:a2:ef:d6:04:44:1a:9c:91:18:6a:9c:c2:e9:
d0:10:61:fb:2c:69:31:98:25:9c:7d:1c:dd:4a:7c:
c4:8d:9f:5a:d3:3d:53:0b:d7:be:7f:e5:a6:d6:40:
ca:71:88:1d:ee:51:ee:4a:2a:42:d3:18:2b:f1:18:
d2:a3:eb:6e:97:e6:4f:47:94:bc:a5:a9:63:49:66:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:9F:18:86:AA:87:32:F6:08:9F:C2:94:89:87:98:5B:51:0E:54
X509v3 Authority Key Identifier:
keyid:9B:FB:15:0D:09:0B:2C:9E:54:8D:95:8B:35:06:54:6C:34:80:90:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/BzOfGIaqhzL2CJ_ClImHmFtRDlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.240.0/22
Signature Algorithm: sha256WithRSAEncryption
47:39:67:7f:e1:a7:0e:9a:18:41:f2:4d:9c:96:c4:ac:07:32:
86:df:b4:62:c3:69:37:83:57:c5:be:03:b3:b0:1d:1a:45:8f:
4d:a6:c4:ea:09:a5:0b:8d:a2:66:3f:d8:48:96:d6:31:45:27:
10:ad:3e:c3:24:96:ef:c6:28:30:95:38:94:fb:9e:bc:ec:f4:
e3:cf:3e:95:51:e8:74:97:73:ac:cf:d1:b0:58:a2:26:fd:1d:
8b:16:eb:5c:1a:85:0d:0a:aa:79:56:d1:9b:7a:fa:45:6c:50:
0b:2a:02:30:8d:14:15:01:9b:d7:28:11:b1:bd:0c:d7:e5:5d:
c6:97:a1:47:8d:35:6a:74:ec:14:ac:d9:18:18:d9:72:aa:cd:
86:fb:7b:f6:62:27:de:dc:79:18:63:ae:54:11:bd:63:55:bb:
f8:3a:4e:73:93:25:49:93:3f:fb:ce:a5:14:ab:cc:bd:19:e8:
8a:d1:dc:2e:6f:1c:1a:5a:bd:37:fc:26:26:1b:2f:10:74:fb:
b7:69:3d:d0:e2:5f:af:f4:17:79:85:63:40:76:74:4a:c6:11:
5e:1e:e1:ad:1c:39:2a:b3:0f:07:b5:b6:9b:f7:8e:42:56:0a:
35:5f:d4:f8:fa:4b:53:77:94:35:2b:d7:7c:4e:42:af:b2:72:
fe:23:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:39:25 2025 by rpki-client