Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/5p3QNevr3Zx1krBRU5mDzjje9yU.roa
File: 5p3QNevr3Zx1krBRU5mDzjje9yU.roa (raw, json)
Hash identifier: v2i528mT6l5NNHX2sM+JsIbZBSgqJp/oUqk0PlOOECw=
Subject key identifier: E6:9D:D0:35:EB:EB:DD:9C:75:92:B0:51:53:99:83:CE:38:DE:F7:25
Certificate issuer: /CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Certificate serial: 0182B6AE0AFB90A7F2745FC92F296DCEDA5A
Authority key identifier: 3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/5p3QNevr3Zx1krBRU5mDzjje9yU.roa
Signing time: Fri 19 Aug 2022 15:17:15 +0000
ROA not before: Fri 19 Aug 2022 15:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 2.56.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:ae:0a:fb:90:a7:f2:74:5f:c9:2f:29:6d:ce:da:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Validity
Not Before: Aug 19 15:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69dd035ebebdd9c7592b051539983ce38def725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:28:60:89:91:4f:14:7b:63:e8:f1:d7:70:
42:a1:08:eb:97:a0:20:df:ed:12:56:aa:d2:83:22:
8a:9c:56:c5:8d:3c:f6:3a:bd:69:8c:06:ff:66:64:
79:a8:01:ce:83:e7:19:be:e1:c4:6a:92:16:c3:85:
51:56:76:84:c5:43:ed:fb:0d:8f:b7:0f:b8:a7:ac:
91:42:3f:09:ab:bc:26:a3:b8:62:de:8c:27:f4:a7:
4e:71:7f:7f:9b:4f:b7:1b:3e:3c:b3:52:8b:d2:aa:
17:34:83:2e:2b:4c:34:ac:10:c3:f1:94:d9:2c:d3:
f4:72:0c:60:ca:7f:d6:7b:a4:03:84:ea:ef:9a:56:
70:d9:c7:bf:ae:2b:69:61:fc:99:f4:e7:21:e8:f7:
6a:89:71:49:de:12:8f:4a:df:f1:f1:b4:40:be:82:
d5:b3:8f:f8:68:5a:f6:6b:28:2a:7d:12:97:a1:f5:
c6:27:10:e4:d4:8b:b6:5b:88:6b:2a:18:e7:21:6e:
0f:91:e2:34:06:a6:b5:63:f5:41:ef:a3:cf:59:07:
1a:87:50:2c:80:63:08:ac:ef:75:0b:65:21:b2:56:
b5:0c:7f:94:98:97:c5:d5:1a:1a:6f:63:ce:d1:54:
5e:a7:37:36:70:17:9d:d8:1c:7c:b4:35:fe:81:8e:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:D0:35:EB:EB:DD:9C:75:92:B0:51:53:99:83:CE:38:DE:F7:25
X509v3 Authority Key Identifier:
keyid:3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/5p3QNevr3Zx1krBRU5mDzjje9yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:57:33:b3:2f:84:5d:14:ca:2c:02:56:4c:df:70:c0:23:68:
61:5d:4c:84:0f:a5:00:3e:34:e9:6d:48:d2:b1:1c:5d:20:86:
e0:1e:db:8f:50:ae:80:19:68:8b:a9:4c:18:54:6e:48:c7:1a:
22:07:c1:bf:e6:a8:8b:a4:6f:45:ff:a3:bb:f1:04:bf:a3:53:
50:e0:a9:2a:b1:b3:ac:26:c4:5e:c5:4d:ee:0a:d3:26:41:0f:
33:25:5b:85:52:ef:12:7d:27:1d:54:21:6b:b5:8b:35:aa:26:
49:f6:26:22:73:32:09:4b:37:b1:9e:68:f4:dd:75:e6:65:bd:
0f:ee:92:77:e1:5d:8e:e1:96:a8:73:8c:d2:33:78:76:c5:10:
28:ad:22:a4:ae:9e:70:2a:ba:1a:11:e8:17:ab:c5:41:f4:13:
a6:03:0e:a1:ed:2e:f3:2f:99:26:2c:64:2b:aa:18:52:f0:b7:
51:50:56:80:6f:c9:44:4c:44:c6:d2:68:f2:b1:5d:22:3b:7e:
f6:8e:ee:d0:4a:ec:85:9c:88:01:3c:fe:63:1c:49:98:5b:1a:
9d:4c:e3:95:05:eb:18:36:a0:dc:c7:06:84:86:8a:ff:06:24:
01:b8:8f:3d:2c:c8:7d:46:ec:bb:b8:c4:cb:9c:14:64:cd:75:
82:53:80:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org