Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/4Dbp3ih2LSNhT9R1gRze906v1qo.roa
File: 4Dbp3ih2LSNhT9R1gRze906v1qo.roa (raw, json)
Hash identifier: NCDLIDlGct/4W1Ea0aCtOeIJZKlnl/Co9cuopeTZkkY=
Subject key identifier: E0:36:E9:DE:28:76:2D:23:61:4F:D4:75:81:1C:DE:F7:4E:AF:D6:AA
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 038AE7BE
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/4Dbp3ih2LSNhT9R1gRze906v1qo.roa
Signing time: Sat 01 Jan 2022 15:05:50 +0000
ROA not before: Sat 01 Jan 2022 15:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 171.22.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59434942 (0x38ae7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Jan 1 15:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e036e9de28762d23614fd475811cdef74eafd6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:6d:90:ee:ce:a6:dc:be:cc:33:17:d8:f7:
0e:58:1f:25:a7:e2:6d:f9:e4:e3:e8:58:ea:15:e2:
3e:94:ed:70:fd:f3:3f:d7:94:55:80:d6:3a:bd:3c:
be:e6:7b:33:45:21:86:d7:80:44:92:47:ee:55:c5:
3a:56:10:0c:43:d1:0c:96:83:51:ae:88:a2:bd:7f:
75:bd:e3:64:31:92:e1:08:20:ae:d3:6a:2a:19:48:
37:e3:43:6f:7c:14:f4:a8:8e:64:3e:ac:dc:94:83:
10:a2:5e:df:1d:5e:00:24:6b:38:d0:81:26:52:d1:
e4:31:14:ba:d9:0d:b8:f1:5d:d8:6c:89:fe:d7:2f:
0c:5f:29:1f:d4:b8:27:e5:37:ca:cb:62:76:7e:1c:
97:96:cb:7c:2c:87:30:39:db:19:1a:25:7e:5d:02:
1a:12:d8:68:7a:d2:7b:8b:3d:ce:50:b7:8f:ae:08:
4a:d2:ba:9c:58:df:19:65:24:3e:68:65:ab:ac:76:
cb:a5:02:ab:fe:8b:f2:f8:8d:d5:e3:61:7c:6e:0c:
ed:5e:72:dc:64:66:2d:60:3f:37:86:5e:0a:87:c3:
9e:e8:62:80:b0:57:ad:d4:bd:a8:12:40:3a:ab:6e:
e4:f4:5d:18:22:44:d3:9f:94:e1:f7:7f:db:f5:db:
36:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:E9:DE:28:76:2D:23:61:4F:D4:75:81:1C:DE:F7:4E:AF:D6:AA
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/4Dbp3ih2LSNhT9R1gRze906v1qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.16.0/22
Signature Algorithm: sha256WithRSAEncryption
04:fd:a0:62:ed:07:8f:34:70:5c:0a:09:43:65:0a:c0:8b:49:
a8:ab:f5:2b:32:d3:5f:be:43:a4:3f:26:0b:77:33:8c:85:43:
11:3d:8e:bb:3d:9a:7b:bc:27:81:dc:e8:c0:1e:3d:c7:fd:79:
98:01:fa:91:09:60:c9:54:bf:ae:43:8e:b7:c8:38:70:79:7b:
29:5c:fc:ee:fd:e2:b2:35:ed:ed:d4:8b:bc:13:19:55:d2:4e:
bb:98:68:52:10:49:01:0b:3c:8c:2d:15:ce:32:7f:e2:64:32:
c1:29:60:f2:ce:30:6e:b5:58:e4:ea:c4:98:44:c7:1e:3a:12:
ae:36:8b:51:96:9d:6c:b5:61:d0:67:56:07:30:dd:d8:d9:51:
e5:36:e2:7f:e2:b7:30:81:cb:05:e7:a2:93:54:1b:e9:68:ec:
35:c2:34:c9:f1:fe:a1:3e:bb:d2:ab:7f:25:b3:4e:3f:19:d8:
5c:aa:94:ff:32:a0:24:a6:99:03:1b:f6:1f:5e:a6:d9:fa:17:
fd:b2:2b:1d:4d:98:99:9c:33:d7:9e:18:0a:d6:cc:e5:b8:8e:
a6:0b:b9:44:53:43:a6:20:41:3e:0c:91:f3:60:9d:fc:d8:5d:
0d:42:d2:0c:05:07:13:4d:fc:2f:bd:a7:5e:0e:39:a8:31:58:
e5:b1:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:34:36 2025 by rpki-client