Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22822.roa
File: AS22822.roa (raw, json)
Hash identifier: XRlK+aeFBGBTc4X/qJ01dybcC3uTqkw/VUQGeI9FycE=
Subject key identifier: 46:9C:F2:80:7A:53:71:45:5C:A3:CD:B6:FC:98:FC:1A:E0:B5:E0:FF
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 450325998B063D5F30E1DFDF3727533AA6BEC20F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22822.roa
Signing time: Wed 01 Mar 2023 07:08:13 +0000
ROA not before: Wed 01 Mar 2023 07:03:13 +0000
ROA not after: Wed 28 Feb 2024 07:08:13 +0000
asID: 22822
IP address blocks: 179.61.170.0/24 maxlen: 24
191.101.200.0/24 maxlen: 24
191.101.208.0/24 maxlen: 24
191.101.226.0/24 maxlen: 24
191.101.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:03:25:99:8b:06:3d:5f:30:e1:df:df:37:27:53:3a:a6:be:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:13 2023 GMT
Not After : Feb 28 07:08:13 2024 GMT
Subject: CN=469CF2807A5371455CA3CDB6FC98FC1AE0B5E0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:4f:35:b1:be:df:82:3c:c6:78:c3:ed:43:
22:2f:e5:1b:ca:cb:4e:dd:d6:29:5e:99:a9:13:10:
0a:2a:e4:69:7f:bd:bc:ea:a7:19:24:f2:8c:5f:f8:
2d:64:34:e4:36:1e:ce:6a:1d:e0:92:56:01:af:ff:
c8:59:86:04:8e:1b:39:f4:17:23:25:ff:55:88:cc:
32:95:b7:77:4a:60:7b:82:0a:b3:ac:04:d7:0a:f5:
83:52:05:95:b4:d2:1a:0b:93:c5:9e:98:1b:80:ca:
2a:96:7c:10:97:6a:73:e1:fc:ab:39:9a:31:25:8f:
bb:bf:00:9e:e3:22:96:d4:1a:c1:f7:45:2a:d6:ca:
8b:ba:0a:ac:ab:2e:8a:b5:89:22:96:94:9a:2e:52:
94:cf:36:1b:54:b1:93:a7:86:ed:a7:99:30:73:42:
42:01:3e:23:9a:59:f1:d5:1c:ec:c4:c4:ae:73:83:
16:ad:1a:a4:aa:3d:d9:a2:9c:38:2b:40:d2:ff:dd:
3d:97:91:ee:93:c4:53:6b:eb:21:90:5f:ab:45:84:
dc:ca:c5:16:f4:be:6e:3c:fc:47:a3:6d:11:12:8a:
e9:d0:8b:f9:27:9a:ee:42:a0:0f:37:75:e0:ea:eb:
a1:ab:ec:d2:0b:25:a2:02:08:3f:55:05:d8:78:2d:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:F2:80:7A:53:71:45:5C:A3:CD:B6:FC:98:FC:1A:E0:B5:E0:FF
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
191.101.200.0/24
191.101.208.0/24
191.101.226.0/24
191.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
19:45:90:f2:23:af:1f:2d:f5:65:7f:e3:28:a4:ca:20:f3:39:
3b:25:35:4e:0f:9e:05:65:e2:28:22:55:ab:67:68:5f:82:96:
e0:2d:8a:db:8f:df:bc:7f:dd:a4:37:3f:cd:9b:3e:45:57:13:
91:cf:5a:76:17:da:e4:3b:4f:c2:5b:ee:f1:15:96:29:5d:b9:
1a:6a:28:94:82:e3:22:55:26:83:f3:82:90:b2:24:8d:48:3f:
8a:47:36:e5:da:f0:eb:14:3e:e0:bf:a8:4c:91:3f:64:ea:22:
27:ce:99:2c:11:c7:79:12:0e:05:fb:67:09:6a:a9:00:f4:4a:
47:9c:e1:29:6e:67:6e:b9:cd:26:d7:c4:26:91:38:30:e0:2c:
41:47:32:bd:cd:9f:0b:65:72:58:bc:9c:b1:03:cd:77:74:5f:
c4:4d:c1:e2:c9:b5:95:0e:12:4f:d8:05:9a:8f:36:68:4c:d8:
12:11:cb:56:18:c3:94:35:95:da:02:54:74:a8:ed:08:ff:1b:
66:a9:4a:8a:19:a8:0d:76:93:6e:13:9c:d4:f4:9c:c3:1e:5e:
b2:d1:d5:37:59:ff:4d:2c:16:01:ba:f7:01:86:66:80:c4:8f:
d0:be:15:6e:e1:66:20:ba:25:20:3b:92:b6:0d:ea:c8:d9:98:
0b:38:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:16 2025 by rpki-client