Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/0yRcA7WJem7sK2_BpO50PWLQJOw.roa
File: 0yRcA7WJem7sK2_BpO50PWLQJOw.roa (raw, json)
Hash identifier: s4rnvaciGGWk0TsWDfmEGTgQ78MFtpc7DJHcYsH7wiA=
Subject key identifier: D3:24:5C:03:B5:89:7A:6E:EC:2B:6F:C1:A4:EE:74:3D:62:D0:24:EC
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01856E2F824C9B464EE3BC47918B712BF173
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/0yRcA7WJem7sK2_BpO50PWLQJOw.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205960
IP address blocks: 2.59.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:82:4c:9b:46:4e:e3:bc:47:91:8b:71:2b:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3245c03b5897a6eec2b6fc1a4ee743d62d024ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:39:0d:31:d7:49:98:32:96:df:d4:23:48:
40:d4:fc:3e:ae:72:a2:2d:a0:9b:c9:f5:02:4a:86:
b8:dc:1c:5d:59:4a:ba:b4:63:ce:f0:70:82:6c:85:
65:d2:93:76:07:80:eb:51:8c:6a:14:f1:73:3b:27:
66:e7:27:34:3c:f7:06:05:8a:3f:f4:77:da:59:5c:
d3:6b:f4:ac:ac:ad:cf:63:5e:9b:a5:b3:9f:12:e9:
92:3b:f7:bc:f0:2b:41:de:92:37:84:44:70:bf:cc:
65:75:f7:d2:7e:24:ce:e0:52:44:40:d3:fe:d0:99:
95:15:6d:0b:9d:c2:ca:5e:fa:e8:68:c4:46:59:c8:
4e:5f:ee:9a:70:94:ee:eb:e2:30:f2:60:86:6d:e3:
3d:40:bf:15:a0:d4:3b:b6:66:c8:de:1e:5f:b5:35:
d0:46:9f:42:37:a0:b6:23:fb:31:8c:9e:fb:79:7f:
b2:1f:a7:65:34:db:ed:cd:7e:ce:f9:ab:fc:ea:44:
6b:74:51:76:c2:d6:7b:a7:df:cc:39:5c:b6:fa:34:
91:90:19:c4:50:89:84:2d:96:3a:30:bc:bc:7c:d3:
c9:ce:b3:f5:27:a9:34:db:8f:13:1c:7b:d6:e6:ec:
72:62:fe:83:13:04:56:d6:08:74:e7:37:e3:cf:58:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:24:5C:03:B5:89:7A:6E:EC:2B:6F:C1:A4:EE:74:3D:62:D0:24:EC
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/0yRcA7WJem7sK2_BpO50PWLQJOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0c:a5:30:43:86:63:51:0b:7b:31:f5:9a:73:cd:28:ee:31:
bd:4d:d2:e9:cd:3a:44:9b:e6:77:04:eb:3a:57:d0:66:8b:09:
2f:8d:03:a2:ad:2b:aa:82:dd:61:8d:ae:1e:84:02:6a:72:8b:
99:e6:83:47:ab:92:24:ae:bc:d3:8c:57:6e:c0:2b:e4:62:9b:
5c:81:e2:26:6a:f3:b4:8d:2a:58:a9:d3:df:b1:c2:8c:3c:f8:
79:1b:63:2f:7a:7a:1d:be:df:5e:63:37:e2:c6:1a:52:46:c7:
ce:7f:78:71:07:8f:89:9b:3f:db:65:7d:6c:a9:65:f7:10:23:
d9:21:77:91:1a:40:af:53:c6:d4:4b:65:6e:7b:7f:de:50:d7:
2f:32:11:2c:49:ce:48:bf:b2:f8:7f:44:b5:a1:0e:6d:27:85:
7f:82:ca:65:61:24:3f:20:63:f6:8f:fa:9b:f2:d9:bb:e5:58:
c0:83:e2:cc:f5:d5:4f:9a:63:51:21:99:44:db:2d:b9:b2:47:
8c:b8:cf:4f:74:32:52:02:d3:29:f4:b2:7a:39:bc:12:db:0e:
db:a0:72:a8:89:12:64:17:f8:30:cd:d7:e4:74:4c:0b:32:8a:
ca:87:5a:35:b9:72:9d:33:79:6c:4a:ee:0f:1d:78:53:4a:8b:
18:44:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org