Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/LtZjwYkAHcZ7e6zCwX6OrM7m9M0.roa
File: LtZjwYkAHcZ7e6zCwX6OrM7m9M0.roa (raw, json)
Hash identifier: A7C+WCVHSOMjJXlVDeMl9ehhYslyBq+Tei0cf/pTEfo=
Subject key identifier: 2E:D6:63:C1:89:00:1D:C6:7B:7B:AC:C2:C1:7E:8E:AC:CE:E6:F4:CD
Certificate issuer: /CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Certificate serial: C7F0
Authority key identifier: B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/LtZjwYkAHcZ7e6zCwX6OrM7m9M0.roa
Signing time: Fri 08 Apr 2022 14:29:33 +0000
ROA not before: Fri 08 Apr 2022 14:29:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 2.59.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51184 (0xc7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Validity
Not Before: Apr 8 14:29:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ed663c189001dc67b7bacc2c17e8eaccee6f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:49:c6:3f:c4:4a:53:ec:b8:8a:95:51:8c:
5f:f4:0c:1b:6c:f0:45:9c:c1:d1:7f:f3:38:11:47:
f4:1b:b6:3c:be:98:74:0d:56:92:c5:ad:19:e5:2d:
76:51:6c:7f:76:56:3f:52:06:e2:8c:ae:35:7e:d4:
ff:a1:d5:b3:0b:0e:03:28:1c:93:91:bf:c7:b1:e2:
38:96:1a:4b:0a:59:77:e8:57:b0:58:4e:65:42:34:
5a:87:a8:ad:3b:b8:d8:05:61:10:77:89:13:37:5d:
85:ae:c8:3d:22:bf:45:ba:88:13:77:61:75:e0:16:
de:17:4e:2e:9a:7d:ed:8f:a3:e2:21:7e:d9:7e:c2:
7b:9d:4b:3a:12:6f:94:ee:60:22:23:be:5d:3c:0c:
33:5f:f3:a9:c6:be:7e:90:bc:5d:c2:05:3f:a9:0f:
5e:f6:85:5f:81:0d:7a:a6:e5:e0:ed:1e:22:51:54:
ad:c4:81:b6:b0:68:2c:14:7d:08:88:4c:92:e4:fe:
63:86:fd:4a:07:e8:68:b9:f7:c6:28:7e:8a:e0:dc:
b4:a7:b0:45:24:07:e1:cb:22:5a:f0:fa:fa:81:c1:
ed:f1:d2:e7:a8:4c:1b:5f:ee:49:f1:6e:8e:1d:a5:
f4:e4:e2:5c:aa:59:7d:e5:60:8a:c2:c4:25:16:0f:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:63:C1:89:00:1D:C6:7B:7B:AC:C2:C1:7E:8E:AC:CE:E6:F4:CD
X509v3 Authority Key Identifier:
keyid:B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/LtZjwYkAHcZ7e6zCwX6OrM7m9M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/uEBKteaS51LsrB-LvE8MVWx7exs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:6f:77:40:9a:f3:87:ca:9f:f6:7a:8b:f9:c1:2c:c1:46:d9:
5a:64:d4:3f:b0:23:43:44:8e:b3:56:77:c5:7d:5d:6a:93:1a:
8d:d6:9e:ca:2f:3c:4e:b6:38:88:02:c3:6c:8c:80:5b:43:00:
cc:1f:f5:7b:57:12:27:62:b5:9f:9c:8d:3d:9a:3a:4c:96:52:
98:9c:af:c9:1e:ac:12:83:ef:1c:4e:5f:9c:fa:ab:f1:f1:e9:
1f:ec:80:e2:15:6f:aa:ad:a3:7a:8a:22:56:73:a7:42:4d:05:
3c:cf:0c:20:e1:b5:c8:09:87:b6:40:de:38:2f:fd:a5:f2:8d:
6b:01:30:0a:bd:fb:cd:09:29:6c:80:02:51:ba:d4:b6:42:52:
d0:5e:ac:03:8c:08:c4:89:cf:e2:92:11:c4:7b:59:2b:59:6c:
19:ec:7a:80:ea:dd:d7:b8:c1:e4:4c:94:4f:a3:1f:a1:6a:02:
39:9d:e4:ba:00:05:0c:e2:dd:3a:fa:37:3d:e6:75:1f:05:b4:
96:30:06:0c:86:f8:3e:c7:2c:cd:36:96:21:66:e9:d9:87:fb:
a6:46:46:af:ef:d7:00:f7:48:f8:86:f4:b5:7a:ce:49:7d:43:
46:c9:89:5f:38:90:9c:15:89:43:c8:6f:e8:50:03:bb:20:ec:
7a:3e:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:12 2024 by rpki-client on console-ams.rpki-client.org