Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xTSA0cD8Eku1FH-OCLxG7DIqm18.roa
File: xTSA0cD8Eku1FH-OCLxG7DIqm18.roa (raw, json)
Hash identifier: w/1H7KjdekKWRJSgFfjxvcsrVMcgdBRrP4s82bS+rQw=
Subject key identifier: C5:34:80:D1:C0:FC:12:4B:B5:14:7F:8E:08:BC:46:EC:32:2A:9B:5F
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185BB5A1901344ECC0D4638B3D02D27AD9B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xTSA0cD8Eku1FH-OCLxG7DIqm18.roa
Signing time: Mon 16 Jan 2023 16:12:02 +0000
ROA not before: Mon 16 Jan 2023 16:12:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202704
IP address blocks: 2.56.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:5a:19:01:34:4e:cc:0d:46:38:b3:d0:2d:27:ad:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 16 16:12:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53480d1c0fc124bb5147f8e08bc46ec322a9b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:e0:7d:40:a3:90:19:4d:03:ac:34:5a:97:
a9:66:17:25:07:0b:bb:4d:c4:a5:d5:bd:54:17:56:
7f:8b:3c:9b:2c:8a:c4:47:5a:3e:2f:3b:8b:eb:c3:
bf:25:18:6a:b5:97:b1:74:3a:c5:11:a0:34:f3:06:
d9:84:6b:aa:63:87:a6:06:a8:be:59:5f:d2:61:62:
87:04:a5:ae:a9:ce:55:01:0a:a0:d0:4b:d5:d1:c9:
59:fb:c0:86:b3:0a:71:0b:14:60:72:80:5e:20:66:
70:29:29:8d:ac:2c:b9:3c:ed:c5:26:40:28:57:a1:
15:b7:0c:72:db:51:af:71:53:2d:82:98:46:74:f9:
6d:ab:cd:c5:61:ff:69:3d:a9:92:7e:e6:1f:2d:11:
11:b6:f2:66:08:f6:60:c0:4d:09:d2:9a:4f:17:76:
e9:02:7b:82:02:39:d7:62:71:eb:8d:0f:79:d5:ee:
05:be:4d:6b:1a:dc:2d:0e:5e:e1:92:70:58:c8:30:
06:ee:63:a2:4a:2a:4e:21:19:fc:af:39:5b:ae:7a:
14:43:08:97:d2:04:35:97:20:f1:62:36:4f:e5:3a:
ff:cf:e7:fc:62:b5:68:ec:b4:5c:38:c7:2e:2a:a2:
60:03:4a:cf:9f:29:f1:52:6b:e9:19:02:16:75:80:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:80:D1:C0:FC:12:4B:B5:14:7F:8E:08:BC:46:EC:32:2A:9B:5F
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/xTSA0cD8Eku1FH-OCLxG7DIqm18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:46:24:3b:f6:ac:3c:35:ce:0d:51:74:c4:d9:02:89:35:4b:
0a:9c:4a:66:c4:7c:87:7c:3a:31:45:71:22:42:d2:2f:e0:0a:
50:da:dc:ab:f9:75:cc:81:87:5b:df:a2:db:ab:79:6b:43:fe:
6a:d3:95:da:d7:6e:e2:56:63:be:bf:cd:14:f0:fa:9f:bc:3e:
0a:88:14:5c:b2:0f:8c:23:73:a4:3f:7f:c7:f7:67:1f:1e:ad:
b3:1c:43:95:c3:1f:7e:b3:e6:5f:2a:8b:72:64:18:00:47:59:
ee:c5:30:fc:f1:03:03:de:a3:fb:41:81:fb:12:90:b4:1d:da:
21:09:d5:ee:31:57:99:df:bb:5a:b7:f4:80:df:5f:ec:cc:55:
38:ca:c0:1f:c4:8c:c2:5f:23:4c:f4:50:96:79:28:8a:29:35:
a3:5e:60:4f:56:1d:2c:36:78:f3:53:d4:34:01:bc:d1:53:d6:
05:a4:e1:b2:95:28:c7:5a:11:d0:c8:aa:b8:66:21:23:bb:4f:
f6:cb:e1:f3:90:03:bd:4f:d6:75:42:7b:0f:31:05:fe:91:c3:
0f:06:78:4a:28:88:5f:89:e1:95:02:12:0a:6f:01:27:1a:67:
32:6b:9c:0e:f8:8c:32:32:5f:14:05:b5:1d:5e:a6:56:6c:2a:
95:71:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org