Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/QX1PzB0slLNh42gV_9Uq9W7-NNU.roa
File: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (raw, json)
Hash identifier: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=
Subject key identifier: 41:7D:4F:CC:1D:2C:94:B3:61:E3:68:15:FF:D5:2A:F5:6E:FE:34:D5
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01942521FF8B3144E81FE770BCF646AEA6B0
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/QX1PzB0slLNh42gV_9Uq9W7-NNU.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47674
IP address blocks: 171.22.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ff:8b:31:44:e8:1f:e7:70:bc:f6:46:ae:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=417d4fcc1d2c94b361e36815ffd52af56efe34d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:ad:dd:c2:67:61:e3:17:9a:b1:66:8e:1c:
55:52:08:05:c9:26:ef:01:9f:4e:e7:db:ab:db:f4:
2c:50:1e:68:0e:4b:9d:3b:09:6a:03:12:c0:1a:3f:
32:f2:8f:35:5d:e8:6d:a5:5f:78:1b:96:46:97:36:
03:c2:01:a2:22:fd:0f:84:a4:f0:18:8d:38:56:1e:
18:94:64:8d:4b:37:d9:a6:c8:a6:4d:3b:81:a2:e6:
bd:76:57:0b:93:7b:38:71:e4:2a:02:d3:ea:0c:5d:
5a:c3:1f:8b:54:cf:aa:2e:ac:be:38:26:68:00:9c:
1c:e6:55:dd:07:fe:dc:1a:ed:ed:70:ae:f2:6c:5f:
cc:ab:60:e2:b9:c0:64:48:6e:ab:9f:47:19:d8:e7:
eb:19:62:55:53:c1:d2:83:82:ae:c5:b3:e4:42:b3:
0e:22:65:5d:e7:64:ae:a3:88:32:cc:9b:76:dc:34:
dd:27:c9:03:69:bf:df:2d:f3:9c:ba:d9:42:68:3b:
7f:d3:f0:c0:d3:7e:6a:07:dc:82:8b:f3:dc:4e:ef:
05:b9:54:4f:e5:87:59:39:af:84:c0:16:3d:6e:9b:
8c:98:a4:c0:fe:73:18:e5:11:05:0b:c9:5b:fb:fd:
f5:8a:e4:3a:1c:ad:f4:c7:70:35:2e:79:c7:5e:53:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7D:4F:CC:1D:2C:94:B3:61:E3:68:15:FF:D5:2A:F5:6E:FE:34:D5
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/QX1PzB0slLNh42gV_9Uq9W7-NNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:80:b6:85:f7:82:bf:37:ac:0d:3f:ae:b7:26:51:f0:0d:2b:
d2:21:11:73:6c:3f:3b:b1:d0:96:b9:da:82:db:fe:43:c9:9c:
d6:a7:cc:f4:65:37:3d:7d:c3:e0:29:71:c0:97:fa:f5:f8:1e:
1f:d9:cd:89:97:a9:3a:33:d0:49:a2:b3:0b:a4:96:9c:16:6a:
f5:17:aa:e5:8d:a2:cf:17:8f:ee:32:97:b3:af:73:a2:f3:20:
30:6a:96:4a:25:be:89:0f:8b:b8:c3:63:6d:21:4f:c8:45:c4:
71:79:08:f4:bf:78:ae:81:59:c9:0d:03:40:be:fa:aa:49:63:
ce:79:46:75:8a:c6:be:21:c1:60:a9:b5:23:a6:0c:3a:cf:92:
22:85:bc:c0:76:4e:c2:43:b0:11:12:a9:f5:5b:b0:63:6a:c7:
48:d9:09:ef:af:25:22:a8:17:e9:a5:2b:6d:00:8f:12:46:9f:
5a:c6:57:5d:6b:ee:76:7b:40:64:26:09:3b:f5:bc:d7:6b:9a:
46:57:34:b1:50:f4:ef:2e:fa:ee:a7:f4:3b:35:8f:d9:97:a5:
5c:39:18:58:e0:3f:a3:bb:44:0b:52:71:33:33:52:e4:26:cc:
de:31:fd:05:0a:b4:d5:04:1d:c8:82:31:91:e3:db:71:1d:18:
68:47:e8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:22 2025 by rpki-client