Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/oPD9QbbpVQ-GOMVIiybTeRTRftw.roa
File: oPD9QbbpVQ-GOMVIiybTeRTRftw.roa (raw, json)
Hash identifier: d65VAhW6hf7+UGzv/K2+HDnS8DG9AuIijeRxvJ00nDE=
Subject key identifier: A0:F0:FD:41:B6:E9:55:0F:86:38:C5:48:8B:26:D3:79:14:D1:7E:DC
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 0183E972B39338503AF7A20869997ED0047B
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/oPD9QbbpVQ-GOMVIiybTeRTRftw.roa
Signing time: Tue 18 Oct 2022 04:55:51 +0000
ROA not before: Tue 18 Oct 2022 04:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 171.22.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:72:b3:93:38:50:3a:f7:a2:08:69:99:7e:d0:04:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Oct 18 04:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0f0fd41b6e9550f8638c5488b26d37914d17edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:63:06:9b:1e:72:23:0b:50:81:be:a5:84:
ec:b5:5e:3b:b5:fa:af:12:8a:13:58:fc:81:ae:80:
1c:28:d1:4d:d2:52:d1:78:28:19:6b:30:89:56:3a:
51:28:ba:fc:d6:54:8b:af:23:c9:68:75:ca:e1:e8:
75:2e:4c:38:49:9d:dc:bf:27:6d:41:9c:5c:9a:bc:
b2:93:62:70:19:c6:9e:6b:ad:04:49:a9:8b:59:fc:
de:69:13:33:2a:8a:14:1d:53:ff:9e:70:cc:3e:3a:
29:42:71:bc:6a:00:1d:d9:26:20:f6:fa:9e:b4:78:
32:01:75:b3:39:0a:b9:f8:83:64:4a:ba:7b:76:5d:
ea:2f:15:49:b4:88:67:b1:a2:c4:4e:83:9a:62:f0:
a4:92:4c:a4:c7:09:12:b4:72:a6:04:81:df:54:ff:
e1:8a:df:77:1a:24:08:28:be:54:be:5e:90:92:56:
5e:dd:00:3e:6f:aa:7e:8e:b2:39:95:8e:29:15:a1:
41:88:1a:2b:21:3d:46:52:10:24:f1:16:83:d9:a1:
16:65:1e:44:ee:28:b0:70:48:29:fd:c3:6a:30:dc:
33:82:7d:26:55:20:df:43:82:63:d7:fb:6a:aa:c6:
4f:43:9c:ff:33:a6:f2:b4:20:43:70:a5:80:d9:ba:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:FD:41:B6:E9:55:0F:86:38:C5:48:8B:26:D3:79:14:D1:7E:DC
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/oPD9QbbpVQ-GOMVIiybTeRTRftw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6e:5c:ee:07:91:d6:47:8f:fd:2a:03:31:65:9d:a4:9c:b4:
93:d5:99:85:5c:fd:25:16:97:76:65:49:4c:5a:96:13:8c:50:
74:af:6d:37:76:da:e9:b7:52:8b:a6:40:02:36:93:60:a5:52:
1d:78:c1:79:5b:ba:33:fd:c5:9f:49:b8:85:e9:06:ce:e7:5f:
99:2a:1e:f4:6b:b9:83:ae:ff:cf:3d:90:bc:30:b9:6f:ac:9f:
e5:36:3c:7f:8c:b2:71:57:b5:02:40:05:0e:c1:e5:24:d4:33:
4f:7d:5b:5e:cf:74:4e:46:21:0a:55:1f:98:1c:af:1c:94:68:
c9:9f:bc:ee:10:80:71:0f:74:2c:bf:1b:a6:c9:d2:d5:df:b5:
30:ef:a6:f5:d3:34:ed:f4:ad:31:ae:0a:57:5f:36:76:88:4b:
85:3c:2d:b7:95:82:82:a3:8d:81:3b:10:e2:ed:2b:87:e4:a5:
e2:86:35:60:99:81:22:91:57:f6:3a:13:9c:23:ea:fd:f4:b5:
18:83:aa:5a:96:42:d2:01:8c:cf:e3:e9:8c:18:a5:62:a7:c5:
1d:66:7c:a9:54:37:9a:dc:83:a6:8f:ba:84:81:2c:e9:c4:31:
81:96:d3:ba:00:98:1d:8e:72:5a:dc:9a:f5:83:42:4c:4b:da:
6c:53:9c:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPpcrOTOFA696IIaZl+0AR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTU2YmFlZTA1MThlOTVjMWFkZjEyMzdkYWRmYmU0MzE0
YzZhZWEwHhcNMjIxMDE4MDQ1NTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGYwZmQ0MWI2ZTk1NTBmODYzOGM1NDg4YjI2ZDM3OTE0ZDE3ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hjBpseciMLUIG+pYTstV47tfqv
EooTWPyBroAcKNFN0lLReCgZazCJVjpRKLr81lSLryPJaHXK4eh1Lkw4SZ3cvydt
QZxcmryyk2JwGcaea60ESamLWfzeaRMzKooUHVP/nnDMPjopQnG8agAd2SYg9vqe
tHgyAXWzOQq5+INkSrp7dl3qLxVJtIhnsaLEToOaYvCkkkykxwkStHKmBIHfVP/h
it93GiQIKL5Uvl6QklZe3QA+b6p+jrI5lY4pFaFBiBorIT1GUhAk8RaD2aEWZR5E
7iiwcEgp/cNqMNwzgn0mVSDfQ4Jj1/tqqsZPQ5z/M6bytCBDcKWA2bq/bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDw/UG26VUPhjjFSIsm03kU0X7cMB8GA1UdIwQY
MBaAFG/la67gUY6Vwa3xI32t++QxTGrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1Mjgt
ZWEzNDcwZmNlNDFmLzEvb1BEOVFiYnBWUS1HT01WSWl5YlRlUlRSZnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMjgyNTEtNzQ0Mi00NzFmLWI1MjgtZWEzNDcwZmNlNDFm
LzEvYi1WcnJ1QlJqcFhCcmZFamZhMzc1REZNYXVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYRMA0G
CSqGSIb3DQEBCwUAA4IBAQCXblzuB5HWR4/9KgMxZZ2knLST1ZmFXP0lFpd2ZUlM
WpYTjFB0r203dtrpt1KLpkACNpNgpVIdeMF5W7oz/cWfSbiF6QbO51+ZKh70a7mD
rv/PPZC8MLlvrJ/lNjx/jLJxV7UCQAUOweUk1DNPfVtez3RORiEKVR+YHK8clGjJ
n7zuEIBxD3QsvxumydLV37Uw76b10zTt9K0xrgpXXzZ2iEuFPC23lYKCo42BOxDi
7SuH5KXihjVgmYEikVf2OhOcI+r99LUYg6palkLSAYzP4+mMGKVip8UdZnypVDea
3IOmj7qEgSzpxDGBltO6AJgdjnJa3Jr1g0JMS9psU5x4
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:44:10 2025 by rpki-client