Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/sEihH2G70TQ6SHhyqSkwGxk6xCY.roa
File: sEihH2G70TQ6SHhyqSkwGxk6xCY.roa (raw, json)
Hash identifier: 3Tx7z0ocz55EPF8eiwW8ZePI/v6hs5Un86MfKlnSyGk=
Subject key identifier: B0:48:A1:1F:61:BB:D1:34:3A:48:78:72:A9:29:30:1B:19:3A:C4:26
Certificate issuer: /CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Certificate serial: 0184333CC1B77ECBAA3435CFCF719E166EEC
Authority key identifier: 98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/sEihH2G70TQ6SHhyqSkwGxk6xCY.roa
Signing time: Tue 01 Nov 2022 12:48:50 +0000
ROA not before: Tue 01 Nov 2022 12:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42425
IP address blocks: 2.59.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:3c:c1:b7:7e:cb:aa:34:35:cf:cf:71:9e:16:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c11fd034eff9157554f55ee2834db3b29fcc35
Validity
Not Before: Nov 1 12:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b048a11f61bbd1343a487872a929301b193ac426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:58:9e:e9:40:b2:0e:0a:cd:39:71:ec:18:
eb:24:64:10:f8:9b:5a:87:2a:43:3e:50:a2:66:35:
87:6c:2a:a1:cf:77:c5:91:7f:5a:b1:1e:13:29:c8:
52:fa:2e:ed:7a:0a:fe:30:5b:fb:fb:1d:86:88:83:
34:f6:a8:a7:59:db:24:a2:bc:06:68:04:67:e4:95:
1d:d9:68:43:45:9f:cb:1a:26:7f:31:e9:72:b4:c6:
4e:d3:3f:05:ac:55:d4:2c:62:fc:15:78:a7:2a:39:
26:b7:e7:58:e5:3f:fd:5e:65:e3:96:92:3f:4e:db:
6a:f0:2c:ae:ae:bc:f5:37:ff:70:9d:10:16:6a:53:
0b:4a:16:bd:b9:cc:f5:0c:9a:62:89:fa:33:90:22:
fb:63:bb:b2:ca:ef:e5:26:0c:9f:ae:0c:2a:86:c3:
da:ea:c8:c8:75:6f:f7:e7:81:06:28:b3:7e:a9:1f:
1b:74:01:5e:e4:1d:8f:e1:2e:5f:dd:91:dd:e5:39:
95:d3:fe:5a:1f:9e:2d:fc:c7:ab:cd:e8:6e:31:55:
3d:9a:58:2f:8b:a2:10:85:e4:14:f4:90:a7:63:f0:
c7:e2:46:6a:ac:e3:0a:06:d7:15:be:38:6a:db:24:
fa:d9:56:78:61:f0:8b:62:10:ae:5f:7d:28:6c:80:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:A1:1F:61:BB:D1:34:3A:48:78:72:A9:29:30:1B:19:3A:C4:26
X509v3 Authority Key Identifier:
keyid:98:C1:1F:D0:34:EF:F9:15:75:54:F5:5E:E2:83:4D:B3:B2:9F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMEf0DTv-RV1VPVe4oNNs7KfzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/sEihH2G70TQ6SHhyqSkwGxk6xCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/53fcaa-b721-462a-a607-3740507a2601/1/mMEf0DTv-RV1VPVe4oNNs7KfzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.6.0/24
Signature Algorithm: sha256WithRSAEncryption
05:40:39:39:12:a7:52:59:e3:de:f1:b2:27:35:26:4e:e1:15:
45:0d:ed:66:d1:77:b5:f0:75:3e:4f:32:d7:4f:03:bd:bf:0b:
d2:56:1c:0a:16:46:db:e8:d7:10:e6:eb:95:0b:86:be:bd:65:
c0:51:87:4b:dc:29:14:f5:29:fe:b2:87:45:7c:ca:38:fa:92:
14:c0:e6:07:22:22:7d:97:55:3a:fe:66:b2:3b:68:08:80:0c:
7e:eb:e9:de:ba:b8:3e:4b:3e:04:b3:66:19:7d:85:4d:09:01:
31:74:d4:9d:9f:31:04:f9:ee:e0:80:a7:b0:35:7e:66:d8:60:
7c:c6:a4:ca:c0:7f:41:71:79:a4:82:29:bb:be:95:d9:27:42:
fe:48:06:a1:23:67:c5:a1:f7:68:65:c4:72:ef:41:ec:72:3e:
db:ab:8f:82:a4:b8:aa:82:78:4e:62:50:97:e0:51:b7:72:24:
bb:8f:bc:b1:cf:d5:8a:0e:e1:e1:d3:81:a8:bc:f3:34:89:63:
f0:2b:9b:69:0d:19:fc:8c:4d:32:fd:a3:1c:ee:dc:12:f5:61:
d9:18:69:2c:58:87:91:a2:e2:45:68:79:39:ff:61:e3:38:50:
a3:39:8c:2b:bd:79:8b:43:52:a9:7c:09:85:b0:f1:36:91:e6:
4f:1b:b6:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQzPMG3fsuqNDXPz3GeFm7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzExZmQwMzRlZmY5MTU3NTU0ZjU1ZWUyODM0ZGIzYjI5
ZmNjMzUwHhcNMjIxMTAxMTI0ODUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDQ4YTExZjYxYmJkMTM0M2E0ODc4NzJhOTI5MzAxYjE5M2FjNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8NYnulAsg4KzTlx7BjrJGQQ+Jta
hypDPlCiZjWHbCqhz3fFkX9asR4TKchS+i7tegr+MFv7+x2GiIM09qinWdskorwG
aARn5JUd2WhDRZ/LGiZ/MelytMZO0z8FrFXULGL8FXinKjkmt+dY5T/9XmXjlpI/
Tttq8Cyurrz1N/9wnRAWalMLSha9ucz1DJpiifozkCL7Y7uyyu/lJgyfrgwqhsPa
6sjIdW/354EGKLN+qR8bdAFe5B2P4S5f3ZHd5TmV0/5aH54t/MerzehuMVU9mlgv
i6IQheQU9JCnY/DH4kZqrOMKBtcVvjhq2yT62VZ4YfCLYhCuX30obIDvBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBIoR9hu9E0Okh4cqkpMBsZOsQmMB8GA1UdIwQY
MBaAFJjBH9A07/kVdVT1XuKDTbOyn8w1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1FZjBEVHYtUlYxVlBWZTRvTk5zN0tmekRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81M2ZjYWEtYjcyMS00NjJhLWE2MDct
Mzc0MDUwN2EyNjAxLzEvc0VpaEgyRzcwVFE2U0hoeXFTa3dHeGs2eENZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81M2ZjYWEtYjcyMS00NjJhLWE2MDctMzc0MDUwN2EyNjAx
LzEvbU1FZjBEVHYtUlYxVlBWZTRvTk5zN0tmekRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjsGMA0G
CSqGSIb3DQEBCwUAA4IBAQAFQDk5EqdSWePe8bInNSZO4RVFDe1m0Xe18HU+TzLX
TwO9vwvSVhwKFkbb6NcQ5uuVC4a+vWXAUYdL3CkU9Sn+sodFfMo4+pIUwOYHIiJ9
l1U6/mayO2gIgAx+6+neurg+Sz4Es2YZfYVNCQExdNSdnzEE+e7ggKewNX5m2GB8
xqTKwH9BcXmkgim7vpXZJ0L+SAahI2fFofdoZcRy70Hscj7bq4+CpLiqgnhOYlCX
4FG3ciS7j7yxz9WKDuHh04GovPM0iWPwK5tpDRn8jE0y/aMc7twS9WHZGGksWIeR
ouJFaHk5/2HjOFCjOYwrvXmLQ1KpfAmFsPE2keZPG7YI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:32 2024 by rpki-client on console-ams.rpki-client.org