Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LCFYyyhvwdXRMG-jTA_x3jdqUQU.roa
File: LCFYyyhvwdXRMG-jTA_x3jdqUQU.roa (raw, json)
Hash identifier: 4Y2q2WAY/JWSl8VXdaxAJNiXRNezkYBgSUp+jK15d70=
Subject key identifier: 2C:21:58:CB:28:6F:C1:D5:D1:30:6F:A3:4C:0F:F1:DE:37:6A:51:05
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4FC3C4ECA8DF976C1CF8E733A766
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LCFYyyhvwdXRMG-jTA_x3jdqUQU.roa
Signing time: Sun 01 Jan 2023 22:55:44 +0000
ROA not before: Sun 01 Jan 2023 22:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202532
IP address blocks: 2.56.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:4f:c3:c4:ec:a8:df:97:6c:1c:f8:e7:33:a7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2158cb286fc1d5d1306fa34c0ff1de376a5105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:69:ba:b9:27:1d:83:43:f0:51:c3:97:7d:
00:64:52:cc:66:a2:8f:08:2c:82:c3:6a:e5:7b:3d:
ea:95:9c:5f:48:c4:7b:a9:a8:7c:26:1b:d5:68:61:
49:30:a9:03:92:b4:9a:67:8f:bb:d2:ec:7d:f8:95:
8f:42:d1:93:6c:db:44:02:41:a5:e6:5b:fd:17:ff:
5d:cd:af:b5:0d:df:f0:0f:42:aa:5b:08:4d:2e:85:
0a:d6:b8:ed:f2:ed:bd:c0:29:3d:0f:b0:ae:48:fe:
4c:ac:48:4f:57:13:b6:19:0f:80:76:bb:14:6e:57:
7d:6f:64:68:c4:2f:59:f9:27:2c:fb:a5:c5:0c:c4:
4c:fb:2e:42:04:6b:4a:35:ab:43:ec:85:42:51:d5:
7e:b8:b9:d7:a5:d0:66:a4:71:04:af:93:31:46:b7:
ee:28:09:ff:5b:31:15:6c:f5:de:0a:bc:e0:5b:6c:
d8:56:22:3b:10:b6:6e:78:23:84:75:c1:fb:39:d2:
23:2c:99:c9:c1:c6:22:43:99:63:28:f4:fb:97:10:
c3:79:e5:e4:3d:cc:38:f9:a5:69:f4:9c:85:b4:8f:
41:48:fe:2d:02:9f:87:e9:23:8f:2e:6d:4f:97:11:
0c:80:df:47:e0:7d:c5:d2:60:2d:0b:11:25:1f:8d:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:58:CB:28:6F:C1:D5:D1:30:6F:A3:4C:0F:F1:DE:37:6A:51:05
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/LCFYyyhvwdXRMG-jTA_x3jdqUQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
Signature Algorithm: sha256WithRSAEncryption
30:90:b8:ea:bd:2e:d0:f6:58:bf:75:fc:72:2a:2c:79:6c:12:
71:ca:6d:46:6e:ef:5c:83:5e:11:c2:ca:19:9e:cc:4e:62:89:
41:04:25:d8:85:08:36:5a:a4:23:e9:47:79:59:33:de:69:5a:
64:41:fb:ab:45:e1:52:ad:8b:bc:f2:e9:de:1c:45:77:b5:64:
3c:9b:db:e5:1c:c6:f4:43:4c:b2:d1:6e:32:13:00:03:18:a3:
10:ac:d6:5e:ac:bf:36:27:f1:3a:d0:df:1e:14:88:b0:7b:18:
7d:d3:a6:50:b9:9a:b4:2f:39:84:1d:11:35:51:d1:4a:17:c7:
79:ef:d1:e7:87:a5:f9:76:c2:9e:a2:78:b1:2a:d6:c0:ab:da:
24:42:a2:af:8a:cb:98:94:d9:e2:ab:6c:1e:c5:f4:27:78:6d:
01:cb:6f:a7:39:e3:85:74:3c:b0:3b:64:37:63:03:90:ec:0d:
fc:00:ca:44:66:a0:8b:ae:56:9c:de:50:ff:28:d7:25:ad:df:
b5:ad:96:64:0d:cb:c4:8f:f4:54:bd:13:24:7d:92:2c:4c:37:
40:2b:7d:57:bb:3a:b2:4a:2a:1e:79:0b:74:88:6c:43:2c:a7:
d8:5a:0f:71:4e:12:36:26:bf:47:56:c8:4d:03:22:ff:c7:0e:
ee:17:f1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org