Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/9wm1C4AzpzX9ilZtQxjlX9oXvUM.roa
File: 9wm1C4AzpzX9ilZtQxjlX9oXvUM.roa (raw, json)
Hash identifier: 8S+dQB75l/fKm3uxQDdyJwC7o4gqzKJA4B/rPGwrC7M=
Subject key identifier: F7:09:B5:0B:80:33:A7:35:FD:8A:56:6D:43:18:E5:5F:DA:17:BD:43
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 0182249CFCAC61D3C89668959C2C0FA1E83E
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/9wm1C4AzpzX9ilZtQxjlX9oXvUM.roa
Signing time: Fri 22 Jul 2022 06:34:04 +0000
ROA not before: Fri 22 Jul 2022 06:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:9c:fc:ac:61:d3:c8:96:68:95:9c:2c:0f:a1:e8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Jul 22 06:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f709b50b8033a735fd8a566d4318e55fda17bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:36:57:a3:d4:d1:6d:d7:fd:6b:d5:82:1b:
d8:d4:e8:48:9e:a5:3b:7f:8a:c4:05:a6:60:40:45:
76:5d:c7:33:11:bc:f4:f1:88:76:dc:fd:5e:8e:72:
f2:0a:19:e7:70:d5:a3:16:a5:ce:c2:65:da:12:cb:
54:88:69:ab:f7:a7:0d:29:70:a5:ba:20:cc:00:c4:
bf:fc:a5:3e:a4:4d:9a:0e:c2:42:76:d7:49:bd:5a:
51:6d:f4:5e:6d:f2:65:e6:f3:5a:58:88:6a:67:21:
6c:ed:f2:3c:15:91:b4:d6:f8:aa:ad:73:49:a3:00:
63:d2:b1:d6:23:a0:9c:54:0e:01:e3:33:79:f7:22:
89:bf:e1:ca:d0:71:5a:70:3f:3e:8c:34:8b:de:a2:
29:3e:09:ac:43:e2:9f:c1:bf:d6:8e:5c:a3:7c:38:
f4:3e:a4:f7:bf:78:45:e1:57:68:0b:ab:fa:83:27:
78:95:f6:a4:51:02:ea:60:db:e6:a3:25:a1:8f:f0:
1f:e8:78:39:95:34:0f:34:19:bc:c3:5f:5b:a4:db:
87:10:54:d3:71:51:9d:cc:aa:51:77:ef:88:40:03:
ba:3e:91:45:47:62:e0:22:e6:7e:2f:f0:68:1a:fa:
ab:0d:25:24:a8:31:79:db:93:9f:8a:61:5e:92:45:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:B5:0B:80:33:A7:35:FD:8A:56:6D:43:18:E5:5F:DA:17:BD:43
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/9wm1C4AzpzX9ilZtQxjlX9oXvUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.18.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:a2:20:c0:de:d7:1a:3d:70:1a:4e:db:10:a0:33:f1:b5:
e9:ec:44:40:86:7a:a2:0c:0f:a6:ea:13:98:0f:59:3b:78:1d:
c9:e1:64:1d:21:cc:0f:15:bd:5e:d8:7b:52:b4:33:c8:2c:77:
74:9d:4e:d5:c5:87:c8:1f:d2:d7:7e:87:d1:10:b3:4e:67:3f:
92:af:fd:ee:af:4c:68:6e:37:e1:b5:d4:a1:3b:ca:95:b8:78:
e3:78:d5:9b:03:c5:1d:b0:01:8c:21:d4:a2:3e:52:e0:61:71:
eb:03:66:62:8a:3b:99:63:b4:11:a4:63:27:fa:85:30:17:b5:
5b:3a:f7:c4:8a:17:53:b6:01:89:f2:a0:df:44:2c:63:8e:75:
76:cb:52:3c:fd:4d:b7:10:c9:9e:a9:a8:9d:39:e3:a8:5e:d7:
4a:e2:48:78:db:40:7c:0a:dc:7c:bf:d0:1e:95:af:ed:3e:c7:
58:25:5a:37:50:69:40:46:b4:46:af:86:f8:c5:13:9e:a3:9a:
72:1e:f6:d6:e7:d9:46:a4:ac:0b:d9:46:07:e3:2c:ff:f2:0a:
ba:47:88:a0:1a:85:ef:c0:31:2b:ad:cd:2e:bf:2d:3e:15:65:
56:1a:7f:4d:32:37:cd:1b:cf:9e:fd:96:6e:ba:df:b1:15:e3:
20:b6:f4:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIknPysYdPIlmiVnCwPoeg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2YmFlZTA1MThlOTVjMWFkZjEyMzdkYWRmYmU0MzE0
YzZhZWEwHhcNMjIwNzIyMDYzNDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzA5YjUwYjgwMzNhNzM1ZmQ4YTU2NmQ0MzE4ZTU1ZmRhMTdiZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm142V6PU0W3X/WvVghvY1OhInqU7
f4rEBaZgQEV2XcczEbz08Yh23P1ejnLyChnncNWjFqXOwmXaEstUiGmr96cNKXCl
uiDMAMS//KU+pE2aDsJCdtdJvVpRbfRebfJl5vNaWIhqZyFs7fI8FZG01viqrXNJ
owBj0rHWI6CcVA4B4zN59yKJv+HK0HFacD8+jDSL3qIpPgmsQ+Kfwb/WjlyjfDj0
PqT3v3hF4VdoC6v6gyd4lfakUQLqYNvmoyWhj/Af6Hg5lTQPNBm8w19bpNuHEFTT
cVGdzKpRd++IQAO6PpFFR2LgIuZ+L/BoGvqrDSUkqDF525OfimFekkX75QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcJtQuAM6c1/YpWbUMY5V/aF71DMB8GA1UdIwQY
MBaAFG/la67gUY6Vwa3xI32t++QxTGrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1Mjgt
ZWEzNDcwZmNlNDFmLzEvOXdtMUM0QXpwelg5aWxadFF4amxYOW9YdlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1MjgtZWEzNDcwZmNlNDFm
LzEvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYSMA0G
CSqGSIb3DQEBCwUAA4IBAQBz8aIgwN7XGj1wGk7bEKAz8bXp7ERAhnqiDA+m6hOY
D1k7eB3J4WQdIcwPFb1e2HtStDPILHd0nU7VxYfIH9LXfofRELNOZz+Sr/3ur0xo
bjfhtdShO8qVuHjjeNWbA8UdsAGMIdSiPlLgYXHrA2ZiijuZY7QRpGMn+oUwF7Vb
OvfEihdTtgGJ8qDfRCxjjnV2y1I8/U23EMmeqaidOeOoXtdK4kh420B8Ctx8v9Ae
la/tPsdYJVo3UGlARrRGr4b4xROeo5pyHvbW59lGpKwL2UYH4yz/8gq6R4igGoXv
wDErrc0uvy0+FWVWGn9NMjfNG8+e/ZZuut+xFeMgtvQS
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:15 2025 by rpki-client