Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/AAzGV9rZXWSqHMntPgP_xDEnJIM.roa
File: AAzGV9rZXWSqHMntPgP_xDEnJIM.roa (raw, json)
Hash identifier: eXqSuQRPEqLgijVzaNQkqzQTzjLplG+xFcHrOSDBVCQ=
Subject key identifier: 00:0C:C6:57:DA:D9:5D:64:AA:1C:C9:ED:3E:03:FF:C4:31:27:24:83
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01856E2F832DADEBF6FD680B76E592DD8927
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/AAzGV9rZXWSqHMntPgP_xDEnJIM.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212921
IP address blocks: 2.59.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:83:2d:ad:eb:f6:fd:68:0b:76:e5:92:dd:89:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=000cc657dad95d64aa1cc9ed3e03ffc431272483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:24:5b:ee:69:36:68:4a:0a:f4:91:f2:d7:
bb:81:ea:0b:ea:c1:94:7a:1e:b2:5c:80:3d:4c:c8:
ed:6c:22:4f:b4:82:7f:23:23:90:77:e1:eb:dc:05:
4e:55:d3:74:34:b4:d8:6f:a8:5f:5e:d9:36:b2:58:
8b:b4:b6:4f:08:b4:f1:60:fd:15:49:70:4e:87:9e:
b3:21:e7:86:3c:6e:3a:ff:24:4b:c4:d2:d9:d6:49:
99:e3:1b:92:04:b6:fe:b4:07:6a:e8:cf:c3:b9:11:
b6:ce:25:04:9e:1a:2b:b4:70:40:30:c1:18:8f:8f:
1e:03:72:65:a8:2b:26:7b:66:5d:22:30:06:87:2d:
af:3a:f9:03:5b:48:51:25:3f:fb:fc:fa:d5:97:b9:
50:14:b6:f5:52:97:cc:95:1b:fa:fd:d0:20:65:06:
14:28:a3:28:32:de:c4:74:3c:82:3d:6d:72:d9:a7:
e0:1f:28:ca:c9:91:83:a1:02:f0:90:4a:f2:a1:06:
a4:7b:68:78:83:22:68:db:d7:bd:e6:56:87:eb:70:
f2:26:4b:cd:70:8d:5a:93:da:ad:b5:32:2b:39:93:
d7:45:10:d9:c7:fe:dd:45:b4:05:bc:e3:c7:48:9d:
a1:31:23:fa:de:99:ac:66:39:77:b0:9b:2a:87:31:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0C:C6:57:DA:D9:5D:64:AA:1C:C9:ED:3E:03:FF:C4:31:27:24:83
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/AAzGV9rZXWSqHMntPgP_xDEnJIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.155.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9c:37:80:de:e4:5b:ac:c5:ce:e6:a4:f4:6e:28:a2:64:a6:
cc:21:77:f6:93:a3:cf:62:bd:8e:b6:63:53:4f:03:2f:65:bb:
f3:36:f3:e6:fa:a9:71:25:11:88:9b:30:89:ed:14:68:3a:d5:
0d:88:24:f5:ca:44:3b:bd:66:7c:3e:01:79:9e:22:a4:d1:8f:
a6:d6:26:c9:93:2b:53:b9:aa:de:fb:48:62:cf:24:03:59:03:
56:3d:63:bc:ae:ec:e6:8d:6e:53:15:14:f2:7b:15:2c:93:b5:
f3:f8:d8:f4:b5:96:93:0f:a7:53:58:66:67:b7:2c:d2:03:40:
d4:d6:d1:f8:2e:b2:91:3f:f4:ec:f1:dd:50:01:f3:77:3e:83:
79:8a:38:c7:7f:21:d1:72:13:f1:b4:f6:61:94:91:ac:97:ed:
ec:35:f7:9f:0c:57:c2:d8:29:5b:c4:a9:30:e8:b8:b3:fb:ba:
4f:b7:4a:c0:b0:24:a5:e2:22:8a:7e:5a:74:cc:a2:94:1f:31:
74:aa:9a:52:83:9b:05:b9:49:28:b8:af:86:57:55:1b:d1:9d:
ca:86:80:59:49:3f:86:b3:ff:41:68:5d:cb:7f:97:80:3f:df:
e6:1d:37:ec:b8:b9:fa:8c:10:c9:18:d3:29:99:a5:a6:53:5f:
eb:9f:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:42 2025 by rpki-client