Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/7Q8_IvA44DligzZPL2bommxHq_8.roa
File: 7Q8_IvA44DligzZPL2bommxHq_8.roa (raw, json)
Hash identifier: eIaMQ9x5XVfC2VdHO6ulcaGeVzOWJq+aJwNsbHMDnCw=
Subject key identifier: ED:0F:3F:22:F0:38:E0:39:62:83:36:4F:2F:66:E8:9A:6C:47:AB:FF
Certificate issuer: /CN=9bfb150d090b2c9e548d958b3506546c3480904e
Certificate serial: 02389F
Authority key identifier: 9B:FB:15:0D:09:0B:2C:9E:54:8D:95:8B:35:06:54:6C:34:80:90:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/7Q8_IvA44DligzZPL2bommxHq_8.roa
Signing time: Wed 01 Jun 2022 12:52:20 +0000
ROA not before: Wed 01 Jun 2022 12:52:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209481
IP address blocks: 171.22.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145567 (0x2389f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bfb150d090b2c9e548d958b3506546c3480904e
Validity
Not Before: Jun 1 12:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed0f3f22f038e0396283364f2f66e89a6c47abff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:4e:ee:92:eb:52:9e:2c:2a:47:d5:b4:96:
26:47:24:b8:52:05:f1:43:05:23:bc:39:fd:33:41:
78:b3:12:2e:9b:7f:38:f1:a8:19:6a:7b:65:f8:4f:
70:ee:80:d8:b0:d6:a1:35:26:a3:f6:0e:0a:c6:7b:
e7:7f:11:cc:1d:bf:3c:92:10:b4:89:23:a8:60:f5:
83:ec:f8:c8:da:af:2a:aa:3a:e7:4c:a3:43:0b:97:
13:6f:02:fb:2f:5c:d0:2a:f4:34:f7:fa:e9:b6:b0:
f7:91:79:be:d1:b1:be:e7:57:bd:09:f3:3f:7e:97:
61:67:45:ef:be:03:ee:e8:43:a6:60:1a:bf:f2:db:
fb:07:a5:76:75:5e:cb:08:14:be:05:ac:56:1f:e7:
5a:06:11:2b:6d:35:b6:94:8f:31:2c:ff:38:72:e4:
ab:82:61:19:6c:3c:53:16:9b:4f:41:bb:63:67:a1:
0c:d4:c2:61:73:e8:9f:4d:6e:80:8e:f0:10:c3:95:
5f:91:cd:9a:e8:63:b0:58:a8:0e:ae:03:1c:cb:d1:
0d:33:fe:a9:19:6a:d6:63:40:dd:85:00:ac:23:12:
5d:4a:68:7d:0b:3e:2f:0a:0b:55:e6:e7:3d:9e:b6:
2e:bb:fa:34:69:af:68:d5:c4:92:be:c6:ee:ee:aa:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:3F:22:F0:38:E0:39:62:83:36:4F:2F:66:E8:9A:6C:47:AB:FF
X509v3 Authority Key Identifier:
keyid:9B:FB:15:0D:09:0B:2C:9E:54:8D:95:8B:35:06:54:6C:34:80:90:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/7Q8_IvA44DligzZPL2bommxHq_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd36f4-0352-4a3b-be59-925d5aa61306/1/m_sVDQkLLJ5UjZWLNQZUbDSAkE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.240.0/22
Signature Algorithm: sha256WithRSAEncryption
02:80:63:c6:a3:26:7d:35:be:4b:68:f3:16:1c:08:12:e3:ee:
b9:b7:31:76:81:bb:e8:fd:c0:6f:04:d8:40:01:04:40:66:fc:
77:5a:9a:23:95:fd:30:8d:30:d5:e1:2b:65:e2:a8:e3:ff:a0:
12:ed:b0:73:9d:a0:5e:01:44:ad:1c:bc:1a:aa:02:46:3d:02:
c1:4b:20:7d:5e:a3:60:4f:df:dc:77:8a:c1:7d:68:7d:e7:c5:
3d:30:0c:ff:24:66:2e:d9:7a:78:5a:d5:41:c7:7d:fd:48:d6:
fb:9e:dd:01:33:1d:10:b4:bf:af:37:af:2b:fa:42:59:97:b4:
21:32:54:0b:ed:bb:6d:38:b4:8c:0f:2f:7e:8b:d4:23:4b:b9:
1a:a2:d4:2b:10:65:00:db:3e:b5:00:eb:b9:f1:87:77:93:dc:
4b:4f:56:83:f9:73:72:c8:9d:34:d3:35:69:71:4f:81:11:07:
dd:82:8d:9e:26:22:a7:12:f8:12:15:b2:9a:22:7b:a6:5f:e3:
74:85:59:61:e3:a8:5a:bf:72:e4:32:2f:72:3a:02:46:0c:79:
83:39:dd:87:9b:1a:82:a9:fc:4e:cf:5f:69:36:ff:d6:d9:5a:
9e:df:f2:27:0d:f4:1f:86:f2:b7:80:e2:eb:f1:26:b7:4d:d2:
13:2f:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:01:37 2025 by rpki-client