Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/jfE_41LTIpnBxwGZHrwAk5wr_ho.roa
File: jfE_41LTIpnBxwGZHrwAk5wr_ho.roa (raw, json)
Hash identifier: UrxkLssdlXaps1eHJDlNIEHQwlrsTkTIponybyyGBJY=
Subject key identifier: 8D:F1:3F:E3:52:D3:22:99:C1:C7:01:99:1E:BC:00:93:9C:2B:FE:1A
Certificate issuer: /CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Certificate serial: 018345D14ACA9AB9A9C9A924E3F1D7BEB4E8
Authority key identifier: 6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/jfE_41LTIpnBxwGZHrwAk5wr_ho.roa
Signing time: Fri 16 Sep 2022 10:21:27 +0000
ROA not before: Fri 16 Sep 2022 10:21:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 171.22.17.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:d1:4a:ca:9a:b9:a9:c9:a9:24:e3:f1:d7:be:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe56baee0518e95c1adf1237dadfbe4314c6aea
Validity
Not Before: Sep 16 10:21:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8df13fe352d32299c1c701991ebc00939c2bfe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:dd:51:8e:05:74:7d:3a:02:d5:2d:15:76:
9b:66:10:0e:f9:43:1a:a3:b7:88:00:48:e8:6e:68:
1d:5c:56:bf:18:5f:70:55:19:14:1f:9e:8a:40:81:
95:96:33:f0:a0:bf:6c:35:58:38:c8:72:1b:ba:de:
51:7c:57:02:4d:ba:a7:b4:e3:7e:30:75:cd:21:14:
14:a9:e5:57:17:a6:99:55:35:11:25:1d:11:02:85:
0e:6a:fc:b1:35:ec:74:e3:6d:7f:98:d5:5e:93:67:
82:9d:10:2f:1a:85:0d:a6:01:bc:bf:e0:f0:b1:79:
54:61:df:40:b1:dc:30:88:ee:8c:9a:bb:6b:7e:ab:
c6:00:29:69:f1:14:46:18:93:d5:f5:7c:34:cb:e9:
36:80:dc:f0:ea:16:81:04:ef:c7:a5:a2:44:c9:54:
9b:3b:54:bf:f4:ad:6c:4c:07:7c:74:c1:a5:6c:8c:
dc:1e:10:4a:70:e7:3e:24:5b:4d:9d:f2:6c:0a:94:
03:f5:fb:61:04:0d:19:1c:e3:a7:e0:d1:7e:d9:3b:
32:b7:8b:b4:97:29:b2:d4:1d:57:be:a3:38:0f:2b:
fb:2a:96:1d:d4:89:2a:87:56:c3:ca:da:b7:2a:c1:
21:27:97:75:67:12:5c:ee:ca:60:65:af:fd:ee:a1:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:3F:E3:52:D3:22:99:C1:C7:01:99:1E:BC:00:93:9C:2B:FE:1A
X509v3 Authority Key Identifier:
keyid:6F:E5:6B:AE:E0:51:8E:95:C1:AD:F1:23:7D:AD:FB:E4:31:4C:6A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-VrruBRjpXBrfEjfa375DFMauo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/jfE_41LTIpnBxwGZHrwAk5wr_ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/228251-7442-471f-b528-ea3470fce41f/1/b-VrruBRjpXBrfEjfa375DFMauo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.17.0/24
171.22.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:55:bf:61:19:4e:b5:33:73:81:a1:8c:9a:2a:90:09:97:4c:
98:9a:c2:3b:f2:d7:43:ff:8c:eb:4c:ee:26:53:65:14:37:e2:
cd:f0:3f:46:14:4e:e2:62:ef:0d:59:44:be:71:87:27:64:22:
c1:0c:3d:2c:10:cc:5d:57:83:6d:35:64:00:72:26:1c:5c:ed:
fa:c7:26:b1:44:8d:c2:47:ad:0c:d0:85:14:a5:de:83:16:64:
39:72:87:aa:9c:e0:65:a2:29:f8:9a:d0:f3:74:21:80:c9:90:
b5:06:00:bd:08:97:2f:49:fd:17:14:d8:f7:31:df:57:bf:d7:
c7:49:09:cd:82:3c:74:cb:1c:58:21:80:68:f1:7e:63:fe:f8:
e3:bd:c6:40:70:7a:2d:fa:cb:3e:dd:68:52:56:53:55:de:d3:
06:9b:dc:ca:d2:f3:79:5d:92:aa:60:be:89:89:29:67:45:03:
9b:1c:3d:8f:0b:8f:f5:c6:ea:65:ea:a8:09:fa:87:8a:a0:b6:
27:c7:f3:16:34:94:2d:f3:8b:53:6e:d4:fe:47:92:56:18:0e:
2d:35:2d:e4:e6:4b:ff:4f:bd:7f:92:64:8d:60:f2:23:3f:5c:
62:de:64:60:81:0e:9d:3b:3e:64:73:07:5c:fa:f2:9f:f8:fb:
e9:3e:c2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net