Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/VsN-YecAUCQ2g_ExsM6vd5g2A1Y.roa
File: VsN-YecAUCQ2g_ExsM6vd5g2A1Y.roa (raw, json)
Hash identifier: g55gbCdsvKLFjGlu1kG1V8IkM9JzQzF1bn05JNWU8tQ=
Subject key identifier: 56:C3:7E:61:E7:00:50:24:36:83:F1:31:B0:CE:AF:77:98:36:03:56
Certificate issuer: /CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Certificate serial: 018CC727007D5CAED124F54BB8F483AC2DB4
Authority key identifier: 98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/VsN-YecAUCQ2g_ExsM6vd5g2A1Y.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48577
IP address blocks: 2.59.4.0/24 maxlen: 24
2.59.7.0/24 maxlen: 24
2.59.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:00:7d:5c:ae:d1:24:f5:4b:b8:f4:83:ac:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56c37e61e70050243683f131b0ceaf7798360356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:b4:ae:6b:37:0d:ac:0f:7d:6f:c4:8f:12:
7b:19:4a:51:5e:ed:f6:c7:03:8f:87:15:a2:1a:7f:
84:60:6e:d5:ac:14:46:64:1e:35:d9:d4:ea:21:99:
4e:79:d4:3e:16:ab:d1:b0:ef:4c:3a:52:5f:fb:4d:
3c:16:49:4a:5e:19:25:42:d6:bf:b4:05:4d:17:5e:
3f:d5:26:1a:9b:50:62:3c:22:5f:e3:ce:d5:d1:3a:
09:8b:2f:0a:7f:a0:0b:e8:a5:4b:ad:cc:1a:72:35:
dc:2b:8a:6b:7b:20:14:13:88:60:81:e5:25:2e:bd:
a9:f7:cd:ef:3c:22:7d:84:4e:25:d4:cd:3a:a8:2e:
80:16:75:43:34:bf:57:5b:c3:70:50:ca:a7:f3:b7:
cc:57:ab:e1:40:0e:d8:a1:05:dd:eb:8f:51:9d:5c:
2f:54:89:db:2b:86:db:d7:d3:d4:92:91:56:0e:af:
c9:58:a2:9c:93:4a:54:31:f5:a1:32:83:54:18:91:
22:62:8b:c6:4a:70:71:62:80:2b:d0:29:cd:16:ae:
7c:00:e2:09:2d:aa:25:31:02:87:08:31:e8:f9:01:
94:47:8f:10:76:6f:fb:dc:d3:4b:06:c9:9d:dc:94:
67:0e:a2:1d:fb:65:3d:32:95:8a:e8:6f:d2:7b:45:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:7E:61:E7:00:50:24:36:83:F1:31:B0:CE:AF:77:98:36:03:56
X509v3 Authority Key Identifier:
keyid:98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/VsN-YecAUCQ2g_ExsM6vd5g2A1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.4.0/23
2.59.7.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ea:82:6f:f9:8c:55:e2:d8:e3:16:ee:e3:a3:79:57:ac:91:
2c:e2:38:ed:92:df:57:32:ad:4e:fd:33:27:d9:28:0f:e2:e4:
c7:c4:0d:02:dd:17:8f:40:5d:57:67:c1:c1:29:85:0a:6c:d5:
c2:d5:15:ca:3a:09:aa:6f:0a:3e:00:4e:de:fb:3c:76:3e:5c:
6c:eb:cd:e6:0a:b2:f1:09:d8:da:76:8c:e2:00:8d:2a:e3:22:
1f:26:ea:e0:0b:eb:49:dd:0b:05:ad:23:72:03:64:1a:cd:21:
5b:b8:3a:30:2a:69:5b:86:5d:13:b6:85:7b:e4:be:a9:89:45:
26:af:69:f8:0a:59:49:ca:be:b7:d9:89:7b:f1:43:9e:e9:47:
88:d6:48:af:97:ae:f2:fa:3d:3f:47:8b:ab:e7:5b:5d:3c:e5:
80:28:52:95:88:1f:1d:14:8d:1f:fe:81:b2:80:55:73:55:60:
b6:59:ab:2c:91:4c:43:d1:e7:30:d6:4c:78:81:91:23:5f:51:
ca:0a:76:9f:1c:32:e5:bc:fd:6a:0d:1d:b0:d0:87:8e:11:aa:
0e:01:c0:54:13:1c:36:4f:69:c2:8c:fc:d5:ea:8b:3a:5b:69:
31:6b:8a:3f:b3:e4:d1:54:1c:35:47:3d:1c:97:be:eb:cf:31:
ce:fb:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:32 2024 by rpki-client on console-ams.rpki-client.org