Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/Kb0pKt7wzmibsLK2L-nYRrdnWJg.roa
File: Kb0pKt7wzmibsLK2L-nYRrdnWJg.roa (raw, json)
Hash identifier: 14zD3l9XV+j3W7sxdCiuNsOApFY8fKXwaJxHYCnyTlA=
Subject key identifier: 29:BD:29:2A:DE:F0:CE:68:9B:B0:B2:B6:2F:E9:D8:46:B7:67:58:98
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 01826DF315E13894EAE428E0AF1EA30AB8C0
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/Kb0pKt7wzmibsLK2L-nYRrdnWJg.roa
Signing time: Fri 05 Aug 2022 12:20:23 +0000
ROA not before: Fri 05 Aug 2022 12:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 171.22.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:f3:15:e1:38:94:ea:e4:28:e0:af:1e:a3:0a:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Aug 5 12:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29bd292adef0ce689bb0b2b62fe9d846b7675898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:5e:10:60:7b:8d:e1:ff:89:3d:3d:a6:86:
0a:e4:99:6a:80:7c:20:cf:8e:b3:6c:87:f9:1c:9a:
f1:22:1f:8d:af:c5:69:76:14:f7:48:90:4d:53:c4:
06:52:80:bc:51:b5:be:d1:3b:70:dd:b1:b0:9c:3c:
bf:7c:64:e8:7e:62:23:f1:43:4c:a1:77:e8:b2:e8:
4d:ca:81:c0:17:9e:26:ec:f0:c4:bf:21:af:16:b2:
75:ae:f2:8f:93:b5:a0:56:fe:a7:44:25:e0:2c:17:
9c:8d:22:ab:48:5d:b9:4e:66:c4:51:db:6e:69:bf:
2f:8e:a5:bb:fe:c4:28:c2:65:c2:b2:ad:35:97:37:
8f:43:8e:a1:e6:6f:25:90:a4:6a:65:e8:ee:de:07:
50:c7:d5:1a:f0:9d:dc:35:dd:dc:d1:1d:f6:6d:0d:
71:4a:c3:9c:1e:44:a5:fd:1f:f5:5a:61:78:66:0d:
a0:3f:cd:7a:f3:16:a4:75:13:86:6f:cd:d9:55:40:
f2:44:9d:87:f0:2d:8d:37:d0:32:7c:34:7f:8d:37:
ba:5f:bc:b3:b0:3d:84:97:d1:5a:37:86:b0:a0:31:
6a:a0:ef:ca:5b:fe:f0:98:86:3a:3c:6f:41:97:22:
af:9c:e6:75:67:74:dc:02:c1:29:9d:18:22:39:bd:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:29:2A:DE:F0:CE:68:9B:B0:B2:B6:2F:E9:D8:46:B7:67:58:98
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/Kb0pKt7wzmibsLK2L-nYRrdnWJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.19.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:ad:5c:f7:d3:3c:96:04:75:5b:e1:76:4b:a8:75:36:b9:
52:8f:4d:5e:80:89:37:6e:c4:19:79:6a:0d:b0:6a:3f:86:a8:
38:98:da:7b:e4:e0:34:06:61:9f:88:8f:27:9b:53:c5:a0:64:
dd:90:50:d1:f8:80:25:77:04:67:87:40:ea:bf:1a:a3:76:5d:
93:4e:87:7c:85:43:1e:6a:64:64:80:14:9e:15:0b:8e:08:18:
dd:20:a1:3b:b1:b2:00:6b:66:5d:77:7c:52:ba:c6:71:45:ff:
df:83:a3:c3:0d:78:70:eb:51:e7:0c:6b:19:a4:21:dd:c4:bd:
ad:40:44:6e:97:2b:d5:83:95:d7:fd:05:54:59:eb:18:a3:ea:
94:95:21:c4:e0:3c:64:29:3d:9f:00:2f:c3:30:6b:86:a6:19:
06:02:e0:08:f0:21:6c:5b:b6:27:4a:03:91:fc:4c:28:b8:e9:
be:14:61:6c:4a:d9:9d:8f:4e:b1:75:69:e7:d2:fa:e6:bc:63:
1f:1e:be:65:6a:08:85:da:31:bc:11:ee:11:79:a3:fb:1f:fb:
ca:79:3b:d8:de:94:36:14:87:dc:33:88:6c:c0:eb:8d:de:78:
36:77:7a:29:06:b0:33:8e:4d:45:6b:c1:72:9e:9c:19:73:f2:
07:7f:4f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:42 2025 by rpki-client