Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/au8LiI7yGj5mc19yrUBrCrm5p6E.roa
File: au8LiI7yGj5mc19yrUBrCrm5p6E.roa (raw, json)
Hash identifier: UpRDMQjsEXpTXF82Lq8Wf62aaozB3hkVtTil2hWl+JI=
Subject key identifier: 6A:EF:0B:88:8E:F2:1A:3E:66:73:5F:72:AD:40:6B:0A:B9:B9:A7:A1
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 04789587
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/au8LiI7yGj5mc19yrUBrCrm5p6E.roa
Signing time: Thu 14 Apr 2022 08:14:13 +0000
ROA not before: Thu 14 Apr 2022 08:14:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 171.22.16.0/24 maxlen: 24
171.22.18.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75011463 (0x4789587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Apr 14 08:14:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6aef0b888ef21a3e66735f72ad406b0ab9b9a7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:76:4f:92:80:76:8d:bc:9d:7a:34:ad:f1:
47:33:0f:53:4c:e1:57:66:9e:6b:1b:57:fd:b6:c8:
07:bc:aa:7b:62:16:a9:5f:12:30:5c:34:53:99:b3:
14:8f:32:f5:b2:8a:b1:d2:37:d2:a6:62:42:63:17:
0f:40:50:43:da:89:41:d2:47:2d:e3:66:a6:fd:09:
31:a2:97:22:c7:77:a7:f7:e0:f4:5e:90:0b:e5:61:
9c:71:75:0e:b0:a3:b2:ab:b6:cd:d1:fa:df:c6:e4:
47:7a:9e:05:67:46:0e:09:78:fa:4f:17:6f:b1:c3:
35:81:c0:cb:8f:42:3f:e7:d8:57:63:44:a2:a1:00:
20:1b:a4:81:6f:ac:54:f1:a6:7a:17:d1:91:76:e0:
2b:ee:66:a1:74:f9:76:58:43:4b:66:9e:62:19:0d:
01:77:6a:8d:55:78:ab:eb:50:05:84:ec:83:fa:10:
03:e7:7b:d5:99:5a:5d:d4:67:a3:ab:19:d2:d2:f4:
35:53:63:68:35:44:3d:5b:29:34:ce:47:af:8f:82:
49:03:08:11:4c:1a:55:9c:51:5e:58:89:22:57:fc:
15:96:c2:d7:ce:7e:91:47:e9:ab:c0:37:3c:88:9b:
f6:70:00:5c:45:ab:9f:55:ab:6c:c9:70:08:2f:ba:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:0B:88:8E:F2:1A:3E:66:73:5F:72:AD:40:6B:0A:B9:B9:A7:A1
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/au8LiI7yGj5mc19yrUBrCrm5p6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.16.0/24
171.22.18.0/23
Signature Algorithm: sha256WithRSAEncryption
26:c2:c1:77:4d:4e:fb:36:64:86:8f:a2:d0:29:41:eb:08:86:
4e:0d:eb:1c:70:f4:ce:7e:ea:16:13:89:0e:8c:7f:2e:35:bd:
59:a0:ba:b4:3e:c7:50:f0:e7:7f:d6:52:51:88:b0:01:2c:91:
cc:99:f4:61:20:9b:b8:d8:2a:47:1b:a4:98:2c:fa:00:ac:a6:
94:a6:cd:f5:51:94:15:20:66:52:5a:c4:a2:94:6d:47:2f:35:
4f:5c:4d:3a:07:0a:a2:77:a7:9d:6c:0d:e9:90:df:85:be:cd:
6d:74:04:7c:67:78:7e:b4:8c:c5:fb:5c:2c:3b:c3:ce:49:5c:
cb:17:98:d5:af:47:f4:18:a9:7d:13:09:0b:a0:d3:9e:03:90:
bd:61:cf:73:b2:98:2e:61:7f:71:18:0e:90:76:5f:4c:d0:ae:
08:3b:69:cb:24:7c:44:c2:b3:6c:39:28:32:31:f4:ac:02:a0:
f3:78:4b:b7:36:31:f5:1f:5a:9e:46:dc:3e:d9:71:9d:e2:68:
e6:25:b8:a4:79:27:09:c8:70:73:ba:4f:68:a3:93:2c:e7:b8:
b8:c3:90:5e:da:d9:63:4e:eb:f0:32:08:05:83:2f:5d:c2:34:
39:31:f2:23:a1:79:82:18:ec:40:0b:22:6b:2d:51:29:52:9b:
01:f5:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net