Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/m66vlWYeAPwQVjD1R_K1lHoVbGw.roa
File: m66vlWYeAPwQVjD1R_K1lHoVbGw.roa (raw, json)
Hash identifier: 5JB+IjwRERgECGh5qxsqH3wzsZtWikeBcztL8JlQeKw=
Subject key identifier: 9B:AE:AF:95:66:1E:00:FC:10:56:30:F5:47:F2:B5:94:7A:15:6C:6C
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 0183A2AB6824CBC4AE5572CC4BCE9B7C0082
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/m66vlWYeAPwQVjD1R_K1lHoVbGw.roa
Signing time: Tue 04 Oct 2022 11:04:45 +0000
ROA not before: Tue 04 Oct 2022 11:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 171.22.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:ab:68:24:cb:c4:ae:55:72:cc:4b:ce:9b:7c:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Oct 4 11:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9baeaf95661e00fc105630f547f2b5947a156c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:af:28:46:97:b1:94:1d:6f:26:d1:d3:42:
72:82:ee:63:5f:c9:d0:7d:59:c2:91:aa:21:87:16:
0d:d3:d8:89:8d:72:71:3f:32:de:10:fa:be:a8:8e:
32:83:38:f2:0f:00:2f:19:74:79:98:c6:07:05:b9:
af:b6:61:88:2a:9d:b3:26:ab:78:38:8b:be:98:ec:
9a:92:82:2f:b0:b8:e1:1a:55:54:c5:13:f9:56:d2:
3a:8c:03:11:6b:56:94:ee:73:e7:ab:b6:16:f2:0d:
53:0a:aa:77:e2:b9:07:7d:e6:bb:17:5c:55:16:70:
cf:a0:6c:ba:fd:c8:97:25:f5:a6:8a:ce:b9:ee:3c:
2b:aa:b2:88:ac:01:db:46:71:10:ad:f9:cc:8f:f6:
b8:b2:34:cb:bf:17:24:1e:61:f9:9e:b8:a0:21:0d:
9a:d2:f3:dd:14:01:f6:a7:65:d2:42:02:7e:ed:85:
fd:86:4a:1e:5d:e0:93:74:48:ae:ab:de:0c:22:81:
26:36:bd:09:a2:05:bc:c9:19:4a:ce:e7:e0:cc:0a:
1e:6e:26:ba:53:18:35:d5:23:f3:7a:ad:bd:16:ec:
0e:59:8a:18:19:80:84:16:1e:ce:78:16:18:32:79:
2f:9e:e7:c4:4d:90:3c:73:69:8b:c7:ff:80:94:d8:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:AF:95:66:1E:00:FC:10:56:30:F5:47:F2:B5:94:7A:15:6C:6C
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/m66vlWYeAPwQVjD1R_K1lHoVbGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.19.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6b:22:84:70:f4:4a:01:27:6d:c4:8b:11:15:fe:76:1f:f4:
e9:a6:ef:31:1d:30:c3:db:c8:79:06:98:a7:92:85:40:81:44:
d3:4c:49:58:88:20:6c:59:23:18:6f:1d:22:18:cf:6e:c0:f3:
f4:eb:d8:8f:2a:75:80:5a:a6:fb:7b:28:b5:27:ce:2c:83:4a:
5e:a0:05:49:a3:10:66:06:a5:98:b5:8d:1e:01:06:2a:75:fb:
81:ae:b4:f8:2b:70:b0:db:ad:b3:44:c4:c6:12:d9:f9:e6:dc:
bc:08:49:b2:a7:6d:94:94:b5:44:27:80:bd:e0:55:e2:a2:e1:
7b:11:14:c8:67:4b:ba:ae:3e:9b:db:3c:2a:16:fc:0f:23:b5:
03:47:91:0e:d3:5f:8f:da:04:fa:18:09:8c:ca:b4:16:6e:bf:
88:60:e4:c6:60:40:1e:37:b3:0c:4d:eb:bf:ce:49:57:f2:8f:
79:89:be:3b:39:5e:0f:90:f5:e9:28:03:c2:88:fa:b5:c6:38:
37:44:57:68:19:40:06:72:23:a1:06:dc:7f:d4:43:5f:c1:68:
86:e8:3a:26:24:47:cc:08:db:0f:1c:06:e6:67:12:44:23:43:
de:ba:d0:23:6b:f5:68:6d:4c:1d:a8:31:06:c0:83:1a:1f:74:
d2:66:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:43 2025 by rpki-client