Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/5MovxXJ_MQejLbNcpTxd5OFC4BA.roa
File: 5MovxXJ_MQejLbNcpTxd5OFC4BA.roa (raw, json)
Hash identifier: 9DnP7w383Df7SDsrC0dkcfURujWdp+6A17AhGIz7ElI=
Subject key identifier: E4:CA:2F:C5:72:7F:31:07:A3:2D:B3:5C:A5:3C:5D:E4:E1:42:E0:10
Certificate issuer: /CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Certificate serial: 08B78584
Authority key identifier: 98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/5MovxXJ_MQejLbNcpTxd5OFC4BA.roa
Signing time: Sat 01 Jan 2022 10:01:46 +0000
ROA not before: Sat 01 Jan 2022 10:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48577
IP address blocks: 2.59.4.0/24 maxlen: 24
2.59.7.0/24 maxlen: 24
2.59.5.0/24 maxlen: 24
2.59.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146244996 (0x8b78584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Validity
Not Before: Jan 1 10:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4ca2fc5727f3107a32db35ca53c5de4e142e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:d5:4f:87:58:08:b8:ff:73:8f:45:11:4d:
3e:d4:94:67:82:8c:3b:0c:16:70:49:dd:46:1a:bb:
b1:ea:e4:19:f4:50:7f:5e:5f:92:e0:a8:88:d5:1f:
24:8e:b0:65:41:91:cc:13:9e:82:89:fe:21:57:9f:
0e:d5:17:db:e9:52:ac:64:dd:99:d7:32:2c:77:b5:
d6:26:bf:29:97:fb:16:ad:a9:8a:0a:03:2b:3e:fb:
6d:eb:cd:ac:c7:55:c1:49:61:f9:13:5f:c9:60:95:
02:d4:9e:41:13:21:af:08:74:64:a2:16:57:19:58:
06:9e:60:25:5d:df:91:77:5e:92:57:61:10:94:50:
6b:ca:c1:c1:64:4d:e6:4d:a5:af:c3:3f:ea:31:e8:
b2:f6:1b:19:2d:a0:40:6c:b2:6c:b6:88:76:28:ad:
2a:a7:d5:10:2e:e3:09:4d:ed:ae:29:cb:61:b2:03:
1d:4d:a2:9a:84:52:bc:53:2f:7f:24:83:c5:2c:c7:
65:52:07:ec:cc:39:b5:cf:a3:af:7c:84:ed:71:0a:
f9:5e:9c:4d:2e:ff:83:72:fe:7e:45:45:71:77:25:
bb:bb:fb:a5:28:13:21:b3:1d:95:f6:b9:ef:bb:14:
07:f8:0d:b5:92:a2:b2:0c:60:46:9c:ce:bc:fa:96:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:2F:C5:72:7F:31:07:A3:2D:B3:5C:A5:3C:5D:E4:E1:42:E0:10
X509v3 Authority Key Identifier:
keyid:98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/5MovxXJ_MQejLbNcpTxd5OFC4BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.4.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6b:39:28:e9:4c:0e:e5:62:4a:b6:5d:0c:fd:dd:48:62:2f:
40:9e:64:7b:9c:5d:4c:a1:83:af:37:40:d8:c5:c2:87:a6:63:
e9:79:89:fe:67:30:6f:f7:a9:d7:c2:51:76:ef:b9:b2:f7:6c:
eb:0d:2d:25:e0:1b:e4:e2:04:e3:22:a3:85:21:f4:e7:3a:b9:
c9:12:f9:e4:28:21:b5:03:3b:da:fa:7d:cc:0f:6c:b6:73:8e:
83:1d:8b:ed:1b:54:2c:9d:16:f7:04:d9:f6:4a:7e:51:6c:c4:
cb:32:91:74:52:10:00:5a:e7:8d:83:fa:a3:ba:70:a1:dc:29:
27:b3:f9:55:98:b2:4b:49:25:73:4e:1e:1c:e8:08:23:2e:55:
61:a4:82:4a:00:0f:1c:57:4d:8b:fd:ac:c7:5d:a6:bc:ea:86:
35:16:c5:3c:f8:ef:18:7a:d8:b2:8f:42:9f:a8:af:96:e2:a7:
81:8f:00:2e:b6:c6:45:d8:c7:bd:6a:35:b3:3b:80:b3:29:46:
d0:3b:2f:27:3e:0f:39:13:5b:fb:f9:af:82:e2:9c:02:1d:47:
e5:f1:6e:0c:62:b8:8a:00:e4:e5:0c:f7:c7:f6:2b:34:d5:47:
a8:d8:2e:e4:85:cb:6d:4f:eb:5f:ea:0a:7d:20:e3:37:9b:c4:
5b:14:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:32 2024 by rpki-client on console-ams.rpki-client.org