Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/MighUbsEh7kja2NktbqkHmcbAy0.roa
File: MighUbsEh7kja2NktbqkHmcbAy0.roa (raw, json)
Hash identifier: chHocl7z0Q1N8sFDFa4eb/EBzoOXTB6kkSej+Dd5Ux0=
Subject key identifier: 32:28:21:51:BB:04:87:B9:23:6B:63:64:B5:BA:A4:1E:67:1B:03:2D
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 0183E5FD63AB50B23D2D7A96D2C6981055F9
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/MighUbsEh7kja2NktbqkHmcbAy0.roa
Signing time: Mon 17 Oct 2022 12:48:52 +0000
ROA not before: Mon 17 Oct 2022 12:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 171.22.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:fd:63:ab:50:b2:3d:2d:7a:96:d2:c6:98:10:55:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Oct 17 12:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32282151bb0487b9236b6364b5baa41e671b032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:7d:35:e2:34:c3:7c:82:48:7f:37:af:31:
71:21:8e:34:32:9c:87:2d:7a:53:47:62:c5:ad:b1:
04:15:d5:12:e3:9f:d6:4f:25:bf:aa:d4:23:94:70:
96:a7:3f:9c:e7:bb:93:d3:ef:16:5a:1f:fb:1e:2a:
cf:9b:a6:3a:5f:99:0f:7d:6e:f5:34:88:9a:80:76:
36:dc:c4:a9:03:0e:42:d3:be:f2:15:9e:a6:91:51:
49:78:37:24:21:f6:bf:b2:9a:ba:6d:18:d5:3e:2f:
29:3a:94:02:66:df:61:2c:4e:c3:d1:57:9a:57:b8:
03:c4:0a:89:d4:aa:ef:48:12:22:36:a5:97:0f:a6:
07:bd:e3:44:a5:1c:7c:c9:65:4f:42:1a:a6:7f:a5:
a7:df:3f:97:49:7d:f5:e5:4a:2d:89:37:cd:1e:8d:
ce:1f:9c:62:7f:08:f9:0a:c1:c6:10:74:c9:08:ac:
dc:c1:95:3a:76:71:87:96:cc:4f:c6:5d:03:38:ea:
a1:ad:84:ab:1a:56:79:ca:5c:4f:fd:2b:89:57:eb:
4b:9e:21:73:fb:15:62:93:a2:ee:6e:bf:1e:98:64:
09:06:6b:08:f3:2b:0e:ee:aa:51:28:cb:89:ec:17:
ee:68:07:ae:b5:56:6a:67:cb:0e:ab:1d:cc:84:44:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:21:51:BB:04:87:B9:23:6B:63:64:B5:BA:A4:1E:67:1B:03:2D
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/MighUbsEh7kja2NktbqkHmcbAy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0a:6b:7b:7a:17:80:d8:eb:14:21:82:9e:b1:e4:9a:fd:28:
53:b8:6c:e4:cd:28:24:44:9f:26:1a:df:63:68:c6:8d:a5:f5:
37:db:4d:ed:72:58:f9:67:39:a8:34:30:3e:f8:51:4f:94:35:
c4:7c:6a:bf:01:ab:dd:cd:2b:ea:ea:c5:13:25:77:0c:e0:30:
44:c8:d9:20:d9:0d:c4:99:a9:7e:eb:97:84:8b:50:74:d0:3b:
df:30:f5:e7:3c:38:46:77:06:13:e3:40:31:02:45:47:27:1e:
f5:0c:53:27:02:dc:6c:e8:c6:e3:fd:80:06:4c:9c:07:f4:a9:
fe:32:9e:88:21:66:6a:d3:e7:fb:96:8a:92:55:1b:4a:1a:b0:
fa:48:94:78:bd:72:9e:e2:5d:1e:65:97:6a:5f:04:e4:b0:be:
a2:92:2f:6a:09:f4:6c:0d:e9:d5:43:67:9c:37:32:f0:84:61:
7b:21:c7:ba:8a:99:c5:97:28:07:9c:08:07:de:99:f3:d1:49:
7c:fd:31:bd:94:bd:56:45:d2:0e:f3:d1:08:40:d8:1d:8e:d4:
e4:11:6f:ec:ad:0b:dd:c7:d9:b9:a6:c8:05:2b:ce:e1:75:d9:
a2:c1:a7:d8:b0:a6:6d:e5:37:b0:5f:3d:89:65:1e:bd:35:88:
37:2d:f1:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPl/WOrULI9LXqW0saYEFX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2YmFlZTA1MThlOTVjMWFkZjEyMzdkYWRmYmU0MzE0
YzZhZWEwHhcNMjIxMDE3MTI0ODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjI4MjE1MWJiMDQ4N2I5MjM2YjYzNjRiNWJhYTQxZTY3MWIwMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdV9NeI0w3yCSH83rzFxIY40MpyH
LXpTR2LFrbEEFdUS45/WTyW/qtQjlHCWpz+c57uT0+8WWh/7HirPm6Y6X5kPfW71
NIiagHY23MSpAw5C077yFZ6mkVFJeDckIfa/spq6bRjVPi8pOpQCZt9hLE7D0Vea
V7gDxAqJ1KrvSBIiNqWXD6YHveNEpRx8yWVPQhqmf6Wn3z+XSX315UotiTfNHo3O
H5xifwj5CsHGEHTJCKzcwZU6dnGHlsxPxl0DOOqhrYSrGlZ5ylxP/SuJV+tLniFz
+xVik6Lubr8emGQJBmsI8ysO7qpRKMuJ7BfuaAeutVZqZ8sOqx3MhEQ4MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDIoIVG7BIe5I2tjZLW6pB5nGwMtMB8GA1UdIwQY
MBaAFG/la67gUY6Vwa3xI32t++QxTGrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1Mjgt
ZWEzNDcwZmNlNDFmLzEvTWlnaFVic0VoN2tqYTJOa3RicWtIbWNiQXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1MjgtZWEzNDcwZmNlNDFm
LzEvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYRMA0G
CSqGSIb3DQEBCwUAA4IBAQATCmt7eheA2OsUIYKeseSa/ShTuGzkzSgkRJ8mGt9j
aMaNpfU3203tclj5ZzmoNDA++FFPlDXEfGq/AavdzSvq6sUTJXcM4DBEyNkg2Q3E
mal+65eEi1B00DvfMPXnPDhGdwYT40AxAkVHJx71DFMnAtxs6Mbj/YAGTJwH9Kn+
Mp6IIWZq0+f7loqSVRtKGrD6SJR4vXKe4l0eZZdqXwTksL6iki9qCfRsDenVQ2ec
NzLwhGF7Ice6ipnFlygHnAgH3pnz0Ul8/TG9lL1WRdIO89EIQNgdjtTkEW/srQvd
x9m5psgFK87hddmiwafYsKZt5TewXz2JZR69NYg3LfHk
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:28:24 2025 by rpki-client