Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/6UUzSiNldwkcZMhREpH768U3zZ4.roa
File: 6UUzSiNldwkcZMhREpH768U3zZ4.roa (raw, json)
Hash identifier: rVK47q6XUxXjwN3dEQ3ictPl/BuO8AfGPlWIynFVepU=
Subject key identifier: E9:45:33:4A:23:65:77:09:1C:64:C8:51:12:91:FB:EB:C5:37:CD:9E
Certificate issuer: /CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Certificate serial: 0182BB4A2C2C2405507140286041EBB91BA5
Authority key identifier: 3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/6UUzSiNldwkcZMhREpH768U3zZ4.roa
Signing time: Sat 20 Aug 2022 12:46:16 +0000
ROA not before: Sat 20 Aug 2022 12:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 2.56.152.0/22 maxlen: 24
2.56.152.0/24 maxlen: 24
2.56.155.0/24 maxlen: 24
2.56.154.0/24 maxlen: 24
2.56.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:4a:2c:2c:24:05:50:71:40:28:60:41:eb:b9:1b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Validity
Not Before: Aug 20 12:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e945334a236577091c64c8511291fbebc537cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:b1:6a:d5:7f:4d:be:c5:83:14:86:c1:ed:
c1:83:a6:44:56:32:7c:3c:bd:6b:04:11:50:f8:56:
b4:40:19:71:d7:54:b3:74:8e:fd:44:b9:f5:9b:ed:
12:5e:ee:24:ff:96:f6:d1:fa:f8:88:dd:d7:b8:7f:
48:49:15:bd:cd:b7:7d:7d:ed:24:e6:02:f2:c6:77:
82:df:05:c7:05:06:74:a5:a6:20:2a:c9:38:f2:42:
11:b4:c9:fd:ca:ae:9b:f6:a7:14:f5:fe:90:b5:31:
92:34:25:ef:dc:a0:e4:54:30:13:49:23:23:89:f4:
9e:c4:68:2e:cc:96:f1:c6:ed:8b:67:cd:b9:4d:7f:
89:be:0e:24:82:3f:78:9a:15:87:4f:10:e3:2d:8a:
43:ed:45:56:34:33:ba:04:86:0b:a6:43:62:13:51:
2a:5a:61:26:28:66:3b:24:f9:b7:de:5e:c3:4e:14:
de:2f:04:5a:dd:b4:e7:6a:9c:e9:57:b2:a7:b3:86:
71:3a:a5:05:5e:50:ab:26:ac:36:18:a1:4a:01:f6:
36:17:45:cd:f4:78:ff:69:72:65:bd:bb:01:ee:91:
36:80:a3:d1:55:c6:ce:bf:6a:2f:58:7b:35:fc:69:
71:20:3f:03:2c:15:d4:fe:75:a0:d1:56:f1:b0:27:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:33:4A:23:65:77:09:1C:64:C8:51:12:91:FB:EB:C5:37:CD:9E
X509v3 Authority Key Identifier:
keyid:3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/6UUzSiNldwkcZMhREpH768U3zZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
39:03:a0:30:18:4d:8b:19:f6:19:98:47:de:db:aa:b9:75:a0:
cc:27:1f:62:12:35:09:5a:e1:37:54:75:7e:b6:30:b7:42:8d:
50:8f:a9:08:46:3a:3b:db:32:96:c7:89:42:46:7e:9b:1f:63:
a0:df:e7:a1:44:82:98:e4:72:e1:8d:94:93:79:da:d3:b1:04:
31:aa:fb:80:a2:3d:83:1e:e0:9b:03:ad:9c:9f:be:ab:6a:9e:
34:ad:49:17:69:00:56:d7:3f:3c:44:75:43:22:c1:4c:b6:a4:
93:7f:8e:ff:dc:7e:94:b7:2f:a9:88:04:1a:53:c2:8e:44:4e:
bc:23:ab:f7:f1:cc:21:2d:b9:e3:f6:b0:53:5a:93:9d:c2:7d:
d9:91:bf:4a:ac:e1:cd:80:e8:74:24:c1:bc:26:42:5d:c5:08:
23:73:cd:f3:29:5d:47:9a:18:45:93:98:c8:86:60:b2:db:f0:
5f:6b:70:60:ae:cc:6b:02:85:54:a1:86:66:75:a9:19:84:d4:
9f:32:18:59:32:6f:38:34:17:2f:c1:a9:be:02:a2:91:7e:d2:
5d:fd:77:80:fe:6f:16:da:f5:c0:a2:91:4e:c2:3b:3a:52:78:
6b:87:90:41:78:ed:74:9f:13:5a:15:e0:33:49:2e:d3:76:bf:
28:9d:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:07 2025 by rpki-client