Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7YzmVT47vtb3fOCCqhaxThSgvFg.roa
File: 7YzmVT47vtb3fOCCqhaxThSgvFg.roa (raw, json)
Hash identifier: xh/Q1VReXffDxxYXHMj21IpXMhV3RDtc9yfo1wSjtNg=
Subject key identifier: ED:8C:E6:55:3E:3B:BE:D6:F7:7C:E0:82:AA:16:B1:4E:14:A0:BC:58
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018450374614B902C1527D29C5379A05CB4C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7YzmVT47vtb3fOCCqhaxThSgvFg.roa
Signing time: Mon 07 Nov 2022 03:51:50 +0000
ROA not before: Mon 07 Nov 2022 03:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 2.56.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:50:37:46:14:b9:02:c1:52:7d:29:c5:37:9a:05:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 7 03:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed8ce6553e3bbed6f77ce082aa16b14e14a0bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:38:a5:da:6d:9b:b9:42:66:f4:53:90:20:
96:b8:82:11:a6:ab:eb:76:be:2a:7e:d5:2c:1c:f0:
64:19:19:5d:c9:0a:0b:03:64:5f:d1:bc:9f:a4:bc:
79:20:0e:81:43:3a:79:e3:d4:d6:e6:40:a3:49:7a:
ef:c8:f4:5b:a7:28:1c:9d:0f:06:e1:3e:86:d8:ea:
aa:f8:21:f2:6d:25:d3:a6:3d:3c:65:09:34:e7:69:
f5:b3:f0:87:f0:eb:1e:f1:89:2e:d4:33:b1:10:91:
8c:5f:10:2d:19:e7:e7:e2:2b:51:82:42:4f:52:e1:
fa:a9:3b:67:bf:16:8a:94:23:f8:1f:2c:03:f9:f9:
bd:46:87:ae:9a:eb:15:7d:dc:6f:95:aa:48:79:23:
9f:9a:e1:a9:8b:4c:a2:b4:35:cf:f8:2b:b7:ce:c9:
50:4d:ca:06:e9:0d:4c:44:01:84:59:92:7c:d8:6c:
b0:ac:61:8d:39:82:16:47:f0:3a:c4:8b:68:e1:f2:
c3:81:33:60:b4:0e:df:47:88:66:e0:23:10:ca:6f:
84:a8:b9:4d:df:41:3d:8d:dc:98:09:2a:f2:24:fc:
dd:eb:a8:33:f9:cd:9e:97:57:7f:11:b4:48:09:11:
30:a2:10:98:43:df:f2:78:13:5d:ef:b0:31:3c:2f:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:E6:55:3E:3B:BE:D6:F7:7C:E0:82:AA:16:B1:4E:14:A0:BC:58
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/7YzmVT47vtb3fOCCqhaxThSgvFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:38:cc:56:c9:e6:72:a5:4a:97:df:e9:3e:a3:9f:9c:e0:95:
96:6c:55:7d:da:ac:c7:53:27:4e:97:0d:71:26:9b:4c:b2:47:
14:fd:b7:61:89:92:b6:45:4e:1d:14:b6:91:13:49:0e:f0:09:
92:45:12:a2:5b:28:1c:30:e9:c7:17:5a:f8:d0:95:4f:6c:3e:
32:63:c6:2e:66:07:f5:5e:8b:67:47:61:80:cf:82:28:14:82:
7c:b8:7a:67:4c:60:fd:99:41:45:ac:15:d8:3f:22:83:db:c0:
97:26:15:8c:35:bb:e9:7f:34:e0:c1:e7:d0:f0:c4:a9:7e:9d:
cb:6f:4b:33:b9:43:8d:f5:8d:b0:39:0a:b5:bd:d5:d1:cb:65:
a2:97:c2:77:79:0b:a4:d0:b6:04:39:b9:26:48:06:4f:ac:b7:
45:b2:ff:b0:03:53:13:ac:79:a7:89:ea:e5:9d:d8:30:a3:a9:
69:22:80:8d:a7:07:1b:a3:bf:83:3b:ec:17:4f:3a:a6:3a:68:
a0:e9:6a:79:59:36:20:d2:a5:d9:83:d0:45:61:25:c1:7f:8d:
83:c8:53:e0:9c:73:40:55:8e:bf:a0:03:a8:2e:4b:4c:ed:6f:
3d:c9:bc:e6:d6:bf:6e:95:58:09:a2:04:aa:7b:ca:54:7a:07:
92:f1:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org