Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/sWdjcD4465Ax-v1etNJiPckZ2Mo.roa
File: sWdjcD4465Ax-v1etNJiPckZ2Mo.roa (raw, json)
Hash identifier: Xm2X08BRHtpAYjujjrfQD1HyHvhfZHw3CiPMhVdap88=
Subject key identifier: B1:67:63:70:3E:38:EB:90:31:FA:FD:5E:B4:D2:62:3D:C9:19:D8:CA
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 018456E56124D4B1240F2FBBD3AE0B330044
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/sWdjcD4465Ax-v1etNJiPckZ2Mo.roa
Signing time: Tue 08 Nov 2022 10:59:43 +0000
ROA not before: Tue 08 Nov 2022 10:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 171.22.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:e5:61:24:d4:b1:24:0f:2f:bb:d3:ae:0b:33:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Nov 8 10:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b16763703e38eb9031fafd5eb4d2623dc919d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:bb:eb:8f:6f:d7:f0:bc:83:0b:3c:e1:8e:
2e:cd:e2:9c:c2:db:0a:8e:b9:5e:a0:95:cf:68:e4:
4e:29:f1:d5:10:86:82:aa:3a:21:39:3d:94:84:5d:
b8:48:0e:62:d8:1c:96:c8:81:da:49:59:b4:8b:44:
eb:18:37:26:d9:ce:8e:00:2d:1e:ce:47:fe:1d:91:
5c:5a:1e:01:28:9a:e2:56:34:3f:2b:4e:76:c0:fc:
fb:ee:be:a3:5d:4e:6d:20:c9:e5:fd:5f:a2:93:e2:
ba:7e:69:88:ee:f1:ab:4d:33:5d:82:7c:b7:65:20:
74:f4:b7:e1:fa:b8:b6:66:5b:01:13:04:d5:76:25:
8c:82:8e:84:9b:b3:06:cf:f7:d6:69:b5:7b:e3:33:
2c:51:55:d4:58:0d:1c:94:eb:56:29:59:51:43:ed:
45:f7:d1:93:83:c5:c0:d8:11:c2:05:7e:99:98:c2:
d0:71:9f:3c:b9:08:99:c7:cf:25:c3:0e:db:e6:36:
4b:57:3f:c4:f2:7b:7a:bc:45:fd:af:06:3d:85:aa:
09:d9:ff:1f:cd:fb:d7:85:63:c0:1b:70:99:6d:f5:
1f:53:77:cf:aa:ba:ff:65:63:22:ec:58:bc:db:b8:
62:5c:d8:12:b8:a5:c8:1f:91:b4:3a:9d:30:02:a3:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:63:70:3E:38:EB:90:31:FA:FD:5E:B4:D2:62:3D:C9:19:D8:CA
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/sWdjcD4465Ax-v1etNJiPckZ2Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ec:bb:41:e2:4a:a4:d1:16:b8:58:99:95:2c:6d:69:73:d1:
74:71:ec:c9:9d:33:25:8a:6c:d0:8d:cd:28:21:de:30:47:41:
90:bc:7f:00:0e:20:65:e2:63:4f:d3:7b:74:da:f8:c8:e2:20:
4d:49:c2:32:e2:23:ca:08:ca:c9:1d:f4:82:61:fd:a0:15:9b:
27:38:57:55:2e:18:fc:30:8b:38:9d:4e:91:ee:b8:49:c7:c5:
20:61:51:76:a5:e7:4b:7c:03:2a:31:71:88:16:6d:dd:d3:b6:
71:22:60:4b:9a:dd:d5:ba:08:f8:2e:43:dc:3c:4b:b1:d7:ec:
a3:a8:a7:08:1a:7f:ed:0f:24:d5:27:54:9c:e4:8a:e9:a1:84:
99:ab:8b:4b:9e:cb:0f:cc:88:e9:e3:2d:91:50:78:a4:7c:46:
df:92:32:fb:50:16:be:de:d9:02:9d:da:22:c1:0f:ee:b7:ce:
b1:e2:fb:1f:a3:ff:a0:42:de:ba:ec:d3:6d:77:61:76:5a:5b:
30:25:54:90:ab:25:e5:aa:ee:69:c0:e0:44:13:8a:52:fc:a9:
1a:f7:96:ac:e6:b4:1f:53:39:17:32:f7:79:c2:df:ea:f3:35:
3c:b6:0b:f2:e9:4f:ee:37:aa:da:81:cf:a5:09:a6:fa:b0:59:
59:af:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:00 2023 by rpki-client on console-ams.rpki-client.org