Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/OUfGoY_iCQ_Ws_iCprvUGp4vTWQ.roa
File: OUfGoY_iCQ_Ws_iCprvUGp4vTWQ.roa (raw, json)
Hash identifier: jeEZl33fUgAItjMnte4rQVR5W1wglJx5vv1j5vDm7m4=
Subject key identifier: 39:47:C6:A1:8F:E2:09:0F:D6:B3:F8:82:A6:BB:D4:1A:9E:2F:4D:64
Certificate issuer: /CN=ff40503cb21a922897971726f6b7eecc253f1193
Certificate serial: 04E0408B
Authority key identifier: FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/OUfGoY_iCQ_Ws_iCprvUGp4vTWQ.roa
Signing time: Sat 01 Jan 2022 12:01:54 +0000
ROA not before: Sat 01 Jan 2022 12:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206844
IP address blocks: 171.22.245.0/24 maxlen: 24
171.22.246.0/23 maxlen: 23
171.22.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81805451 (0x4e0408b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40503cb21a922897971726f6b7eecc253f1193
Validity
Not Before: Jan 1 12:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3947c6a18fe2090fd6b3f882a6bbd41a9e2f4d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:03:d8:aa:d2:12:46:ce:1c:ef:93:9a:54:
c8:83:3e:ab:59:cc:e0:ab:f1:71:25:3b:a2:8c:e4:
6f:23:c9:60:3f:01:96:73:75:be:72:af:de:34:03:
be:c2:70:63:de:5f:88:a4:c9:88:46:32:59:b2:fe:
39:d6:72:0a:57:30:59:af:15:1c:8a:fb:bf:66:a8:
14:a1:1f:77:11:d0:27:99:ad:c6:19:87:b7:07:03:
36:a4:86:21:5e:3c:ea:74:13:aa:91:39:fa:01:b3:
c0:a2:cd:50:59:50:79:da:03:80:65:ca:e5:35:4c:
f4:d4:aa:c7:ac:7d:78:3d:16:aa:71:12:42:04:91:
5d:50:96:c4:71:48:5c:4b:ae:40:9f:25:07:36:e8:
c4:81:15:6d:4b:7c:47:ef:a2:86:58:08:24:4c:8c:
c0:04:62:e4:a7:1c:5e:1d:f0:78:cb:f8:b6:1f:b0:
39:34:f4:c2:f4:6c:35:bd:78:08:1e:b2:7b:72:d3:
3c:9a:02:ad:55:ba:1d:96:82:bf:d0:d0:5a:55:e4:
5c:37:08:55:67:d9:68:6e:ee:b1:96:0a:34:e2:4d:
8d:8c:af:c9:a7:5a:d6:8a:8d:f2:f9:f9:d6:d3:bf:
fe:0e:fa:09:6a:8e:6b:03:b7:00:66:52:e4:83:f1:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:47:C6:A1:8F:E2:09:0F:D6:B3:F8:82:A6:BB:D4:1A:9E:2F:4D:64
X509v3 Authority Key Identifier:
keyid:FF:40:50:3C:B2:1A:92:28:97:97:17:26:F6:B7:EE:CC:25:3F:11:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0BQPLIakiiXlxcm9rfuzCU_EZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/OUfGoY_iCQ_Ws_iCprvUGp4vTWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/529414-d7a5-49eb-9bd6-cbf1bbb0fd18/1/_0BQPLIakiiXlxcm9rfuzCU_EZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:08:c6:4c:67:31:bb:71:e0:84:80:5e:a5:62:bc:32:5f:a7:
93:34:64:6e:b8:64:db:33:b2:29:3f:22:19:de:26:cb:7b:ca:
86:92:31:43:89:5d:00:0f:0f:25:f4:21:27:c4:3b:7b:20:db:
69:5f:22:7e:04:da:2c:9b:ac:4e:e9:ab:c2:bb:52:fe:25:48:
39:7d:03:c4:af:0c:76:78:9a:81:d3:3d:45:40:cd:ff:6c:0e:
d5:0d:df:c2:7b:3c:3b:13:9b:71:a6:19:9f:a1:24:23:ba:89:
e2:15:42:b6:94:81:e5:e5:13:07:d2:30:83:57:c1:ed:21:03:
8b:09:f8:6e:b7:93:2b:04:d2:06:bc:35:86:d4:eb:23:28:40:
e6:6b:a3:83:01:02:74:eb:03:52:71:db:9a:f2:21:c6:e4:7d:
a6:5f:c9:29:02:95:6a:30:64:73:d2:84:47:09:2a:74:37:c1:
6a:14:bd:c3:09:c5:9f:e0:9c:fe:7b:27:2d:84:9c:d6:c3:05:
57:4f:83:b2:1d:8a:95:ce:ca:fd:7b:ee:ba:50:58:45:79:f3:
7b:c3:33:a4:66:ae:98:03:3d:30:74:9f:b2:ae:79:6e:41:3b:
5b:f3:b5:bb:33:8f:77:f0:f7:79:87:da:af:89:5c:8a:fd:1f:
96:a8:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:22 2023 by rpki-client on console.sobornost.net