Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/u98RBw27L0sxQmKCAynQYyvgRY4.roa
File: u98RBw27L0sxQmKCAynQYyvgRY4.roa (raw, json)
Hash identifier: JBdkk3K3Qnp62kvqnEIbUXfWBPsngY6bqCK++Yrlquw=
Subject key identifier: BB:DF:11:07:0D:BB:2F:4B:31:42:62:82:03:29:D0:63:2B:E0:45:8E
Certificate issuer: /CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Certificate serial: 069046CA
Authority key identifier: 3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/u98RBw27L0sxQmKCAynQYyvgRY4.roa
Signing time: Sat 01 Jan 2022 12:58:32 +0000
ROA not before: Sat 01 Jan 2022 12:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207709
IP address blocks: 2.56.152.0/24 maxlen: 24
2.56.155.0/24 maxlen: 24
2.56.154.0/24 maxlen: 24
2.56.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110118602 (0x69046ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e87c976373fa3d8ad905e534c4ffc2380420e1a
Validity
Not Before: Jan 1 12:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbdf11070dbb2f4b314262820329d0632be0458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:70:24:4b:c4:7e:29:a5:f1:12:ea:f4:e5:
7e:25:5f:d0:3b:b3:ae:4b:a3:21:1d:b8:16:4d:1f:
66:86:85:cb:35:f0:3e:e8:88:95:f6:eb:9d:3f:f6:
92:c3:74:ec:a8:18:3d:10:28:38:04:de:99:93:dc:
2e:33:8e:75:28:8f:09:af:98:2c:b8:cf:b3:4c:4d:
4a:eb:56:c0:82:66:80:14:52:f2:7d:b9:53:de:53:
34:8a:78:dc:96:fc:19:01:45:41:7b:5d:0f:6f:b1:
d2:e9:fd:c4:0a:d6:0f:67:68:f1:26:f5:9d:c7:c9:
c9:86:85:bd:99:6b:b7:b2:bd:13:5f:b7:e1:89:50:
f7:67:aa:b9:4c:db:63:9b:cf:9e:41:4c:d2:4a:f6:
af:de:48:ff:72:54:b2:c0:4a:58:43:fc:4b:af:c4:
f9:02:f9:ef:1a:ad:f5:22:18:52:2b:a1:5a:1c:7e:
bb:bf:e8:72:91:49:85:d6:e1:0b:43:0e:52:a9:f9:
fa:88:04:a1:fb:04:09:65:4e:b5:06:52:6e:4b:f6:
95:91:da:9c:52:99:c0:e3:eb:e3:d4:7f:84:b8:e3:
3d:14:04:f6:11:68:d4:2a:d5:e4:bf:2e:b4:f4:5f:
5f:3b:fa:6b:c7:c3:ea:9a:16:9f:46:b2:cc:f8:77:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:11:07:0D:BB:2F:4B:31:42:62:82:03:29:D0:63:2B:E0:45:8E
X509v3 Authority Key Identifier:
keyid:3E:87:C9:76:37:3F:A3:D8:AD:90:5E:53:4C:4F:FC:23:80:42:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PofJdjc_o9itkF5TTE_8I4BCDho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/u98RBw27L0sxQmKCAynQYyvgRY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/509d27-a91e-45bf-bea2-256d250eac76/1/PofJdjc_o9itkF5TTE_8I4BCDho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:9d:60:02:86:c8:a2:37:b6:78:76:ea:ab:53:68:15:76:71:
18:c8:54:03:23:dc:3f:92:92:61:af:73:fc:44:26:97:cc:7a:
26:9a:8b:b6:b7:20:36:1c:b6:0c:06:1d:d4:7b:6d:e3:df:59:
fe:4f:89:df:67:06:d6:e9:af:ed:a9:40:3c:6c:86:da:d3:44:
9a:80:ae:d3:e3:5e:fe:1f:50:cd:95:c9:e1:75:13:1c:45:8e:
94:a5:fb:36:fc:09:80:ac:24:9d:e0:61:ec:0c:3c:0d:58:82:
ab:1d:9b:70:ec:cd:d8:f2:66:04:10:d1:18:63:a6:9e:c5:a8:
90:8a:65:7d:3c:7f:37:50:bd:90:bb:a4:30:6d:0d:86:b1:f7:
68:83:e8:9a:da:b0:2c:f3:85:e8:bb:79:31:42:33:56:70:c1:
fc:d4:9c:f3:b1:51:54:16:e4:42:48:3d:55:b2:63:ca:bf:03:
c8:58:d0:ed:74:eb:fa:28:e2:58:af:dd:ea:f6:ba:6e:74:a5:
51:c4:65:3b:a3:3b:2e:59:1e:c1:8b:f0:4b:cf:5b:26:bf:b3:
a5:ef:13:6c:cc:54:97:72:f7:29:a9:60:7e:4c:2a:53:f5:fb:
1e:a2:2e:1d:c6:55:12:21:a2:fb:1e:08:4b:90:7e:de:2a:de:
0a:02:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:54 2024 by rpki-client on console-fra.rpki-client.org