Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/SY0dvAzGwBnmHQBTxcqaYsqQj5w.roa
File: SY0dvAzGwBnmHQBTxcqaYsqQj5w.roa (raw, json)
Hash identifier: zUACniSsU4OqkK3RQGAU3kN3ncUpNBdJvdrEzRn/POo=
Subject key identifier: 49:8D:1D:BC:0C:C6:C0:19:E6:1D:00:53:C5:CA:9A:62:CA:90:8F:9C
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 0486D195
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/SY0dvAzGwBnmHQBTxcqaYsqQj5w.roa
Signing time: Thu 21 Apr 2022 14:15:00 +0000
ROA not before: Thu 21 Apr 2022 14:15:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 171.22.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75944341 (0x486d195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Apr 21 14:15:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498d1dbc0cc6c019e61d0053c5ca9a62ca908f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:93:8c:06:1c:60:50:a2:dd:aa:11:cd:5e:
fc:c9:91:f5:79:44:8d:8d:55:44:1a:90:1b:70:40:
6a:e5:8a:1c:06:b0:12:aa:1b:6f:9b:b7:ed:79:1c:
5d:c3:e2:b1:2d:62:5e:7b:43:05:25:b5:a4:87:b9:
e4:bd:0a:48:c1:3c:c1:50:6d:70:27:77:8e:a7:20:
7b:f9:29:71:b0:f2:b0:48:8b:71:1e:be:37:99:5c:
e3:09:91:9b:6b:d8:18:31:c8:23:75:55:b8:2b:dd:
96:b0:0c:9c:8d:63:34:e6:0e:18:eb:71:5d:45:33:
52:d3:5f:ea:1e:19:f5:ef:f9:9d:e9:95:9c:b8:f5:
8f:0d:7d:7a:92:81:1e:64:26:e4:82:26:25:6f:fa:
62:eb:3d:ba:7d:f1:45:cb:8f:ab:4e:1b:ab:3f:8f:
1f:14:e3:61:e9:5a:5c:b9:cf:d5:df:f7:a5:e4:97:
17:c6:bb:f0:75:c3:3c:f4:d0:2d:74:01:9a:43:7f:
59:35:75:33:72:fb:0f:af:9e:b0:61:93:51:c6:d2:
f1:c9:24:72:07:87:c1:aa:09:45:60:47:d3:be:31:
f2:e6:9e:5c:13:a0:a8:62:d8:0c:0b:68:a1:6a:0b:
5a:57:25:c7:a9:54:6e:4e:9a:f1:3f:f2:a5:ec:a6:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:1D:BC:0C:C6:C0:19:E6:1D:00:53:C5:CA:9A:62:CA:90:8F:9C
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/SY0dvAzGwBnmHQBTxcqaYsqQj5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6c:87:3d:b6:45:cb:39:b2:11:e0:ad:93:14:c9:f4:54:89:
6d:3c:64:5d:52:cf:a0:ce:37:15:d3:30:d8:08:28:36:3d:0c:
7b:d2:16:a4:af:7d:69:4b:a7:67:1e:8c:f8:69:a8:6b:a8:bd:
f6:35:cd:06:07:d8:f9:b7:4a:eb:a7:53:28:1c:cd:01:f3:0f:
58:7a:f7:00:6b:34:b6:a1:44:4c:e6:79:61:9e:ad:ea:68:c2:
7f:9e:ab:8b:ec:aa:af:cd:3c:84:55:b8:b7:24:17:ce:d4:fc:
c7:6b:db:b4:6c:68:f7:2c:c1:62:bc:07:bd:63:3d:e3:61:6e:
7a:6a:c9:60:0f:5e:53:88:89:be:39:bc:26:8c:04:85:2f:0e:
d9:06:d2:a1:61:29:6d:fd:1e:28:9e:5d:f5:cc:eb:6f:64:13:
59:31:42:68:6d:03:02:66:c4:37:47:1c:9e:35:36:33:4c:6a:
6e:8b:83:40:26:0d:ad:5c:81:dc:65:53:f3:5b:0f:a2:e3:58:
16:02:dd:91:5e:be:48:69:10:94:b2:ec:50:05:c6:20:7d:12:
72:e1:07:4b:ad:44:25:59:a6:58:eb:13:5f:b4:92:43:80:28:
d1:41:54:ef:09:98:1a:dc:d4:59:ff:b7:e7:f5:0e:c1:ca:63:
fd:7c:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:51:19 2025 by rpki-client