Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LEl8vQRHKtWf73OUYOcdSImz0x8.roa
File: LEl8vQRHKtWf73OUYOcdSImz0x8.roa (raw, json)
Hash identifier: sVasx2+8t1a3jYA9XkvsyQOz80W46ACrn+iS3gMl+OM=
Subject key identifier: 2C:49:7C:BD:04:47:2A:D5:9F:EF:73:94:60:E7:1D:48:89:B3:D3:1F
Certificate issuer: /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial: 0185728C69EF63EBEABC40FD6E245B7BDD16
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LEl8vQRHKtWf73OUYOcdSImz0x8.roa
Signing time: Mon 02 Jan 2023 12:54:42 +0000
ROA not before: Mon 02 Jan 2023 12:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202505
IP address blocks: 2.59.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:69:ef:63:eb:ea:bc:40:fd:6e:24:5b:7b:dd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Validity
Not Before: Jan 2 12:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c497cbd04472ad59fef739460e71d4889b3d31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:e8:3f:33:70:73:2b:d9:2b:40:5e:df:83:
96:1a:9e:a1:13:c4:d3:e8:68:8e:6c:bd:8e:6e:34:
09:2b:9c:83:ce:af:ab:23:0f:f9:ad:85:61:22:0e:
6d:c5:13:4e:25:bb:f1:b5:49:65:ce:64:66:c4:5d:
b7:36:4f:d4:cf:4c:3e:53:2e:b2:f8:48:34:be:bb:
ac:d7:87:42:b5:24:d8:ea:fb:2c:a4:0b:58:d0:f5:
f6:d3:0c:a7:f2:87:4e:af:e2:a4:ed:37:53:45:9b:
dd:c5:27:f5:bf:8b:68:14:54:20:0d:bd:29:f3:e5:
ef:85:4e:8c:30:b3:fb:47:fb:28:72:2a:55:2a:40:
45:e0:29:09:5a:ec:7b:ac:e1:8e:d7:5b:95:6b:53:
57:51:a1:e3:6d:41:a2:c9:04:29:09:2f:cc:a5:0e:
ea:70:0a:0c:3f:fb:65:7e:38:ce:39:4a:81:03:96:
9a:39:cb:24:36:f3:71:8f:b5:35:62:c3:86:9e:6a:
31:f0:70:50:98:ed:ec:0d:1e:e0:6c:3f:9a:92:14:
dc:32:f8:fc:99:91:b8:2b:fc:e2:06:52:10:d4:11:
9d:46:05:46:be:0f:87:91:d3:42:09:b4:65:0d:fb:
1d:79:c8:43:3a:90:54:b4:f0:4d:37:0b:bb:22:31:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:7C:BD:04:47:2A:D5:9F:EF:73:94:60:E7:1D:48:89:B3:D3:1F
X509v3 Authority Key Identifier:
keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/LEl8vQRHKtWf73OUYOcdSImz0x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1a:8a:5f:82:1d:85:5c:40:37:47:25:c6:59:3a:1d:52:f0:
e3:91:15:df:51:ca:a5:a6:10:32:90:bb:48:68:d8:7a:e6:b8:
c6:74:d7:8c:c6:29:7c:f0:b7:74:d5:9d:46:b6:67:54:da:80:
a8:2f:15:6c:a3:a6:9a:8d:e0:88:0c:96:e1:ba:b2:2f:18:ea:
67:1d:93:72:3f:37:a6:b8:55:40:a7:2a:09:03:9c:ce:65:f7:
fd:b7:b9:2c:ac:ce:e4:6b:84:37:1b:bb:62:36:5b:30:b6:03:
b8:27:36:24:18:80:65:a1:cb:c5:07:c3:24:9d:32:b4:a1:3d:
2a:fc:b1:fe:57:35:94:f4:88:26:63:7b:af:b0:02:84:ad:2a:
dd:b1:93:ea:0d:95:e7:4b:05:03:94:35:69:44:a8:d5:97:13:
ab:d4:bb:6f:e1:35:00:1f:48:c7:b6:ba:b1:70:7c:42:3a:c2:
67:3f:c6:81:26:67:75:ad:f2:37:c5:47:ff:01:68:80:37:a6:
7e:14:9e:6f:34:35:bd:f3:7c:ce:8f:25:cd:c6:a9:72:ea:f8:
52:72:cd:b7:f3:49:bb:28:04:5f:d5:1e:9a:fc:f3:f3:31:63:
77:8c:c2:53:ee:39:c3:4d:0b:e9:bf:b5:9e:ec:8b:28:64:0e:
7e:4f:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org