Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ErSpIu1qFhXkGSzfpTTimK6ILig.roa
File: ErSpIu1qFhXkGSzfpTTimK6ILig.roa (raw, json)
Hash identifier: /8uo+UmbJ+CMFpG/gFgyFY3TtDPjZahfwJsvgOyoCq0=
Subject key identifier: 12:B4:A9:22:ED:6A:16:15:E4:19:2C:DF:A5:34:E2:98:AE:88:2E:28
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01856E2F80CD6B2595441464559FF1C5F1A9
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ErSpIu1qFhXkGSzfpTTimK6ILig.roa
Signing time: Sun 01 Jan 2023 16:34:44 +0000
ROA not before: Sun 01 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136526
IP address blocks: 2.59.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:80:cd:6b:25:95:44:14:64:55:9f:f1:c5:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Jan 1 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b4a922ed6a1615e4192cdfa534e298ae882e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:d5:c3:c8:2c:bf:70:10:80:ac:52:33:91:
b1:ca:74:c8:f4:7b:a8:06:a2:4e:c6:03:7c:a0:a1:
44:67:1f:de:d9:b2:8c:cb:f2:29:8f:4d:95:46:7c:
92:fc:2e:0f:2e:1f:b0:98:f3:a4:46:26:c0:ed:df:
cb:7e:19:57:7e:3b:54:0f:45:ff:e9:95:0a:92:6f:
e9:8c:84:bc:f1:b6:e2:4a:cf:cb:cf:3f:44:a1:c5:
40:56:d0:ff:94:b7:c8:81:50:67:89:e8:16:8b:0b:
38:9a:d3:aa:9a:ca:6e:fe:fa:a7:5a:02:c3:fe:e0:
1c:18:3b:d7:39:6b:0a:85:3c:d3:77:ed:12:20:b5:
3a:02:61:0c:fa:f2:13:1e:b6:68:2b:98:f5:ff:80:
6e:cc:09:65:43:c7:df:26:16:4d:93:22:90:0d:d3:
54:a9:b1:71:24:6a:47:1c:91:8d:54:32:e4:2e:8b:
7d:e2:80:6b:5a:38:41:75:69:ca:b0:ca:f1:04:6c:
d1:7e:ef:37:2f:e1:b3:19:76:f2:f1:ab:b3:5d:34:
98:06:fc:68:89:24:a8:60:04:ec:c6:07:94:96:8d:
b4:9b:21:f4:d4:ee:ff:f4:81:95:50:ec:65:7f:09:
45:ff:23:fd:90:20:ee:ae:44:45:95:c1:8e:6f:c9:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:A9:22:ED:6A:16:15:E4:19:2C:DF:A5:34:E2:98:AE:88:2E:28
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ErSpIu1qFhXkGSzfpTTimK6ILig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:28:39:bb:76:97:2b:ec:72:4a:0a:e4:0e:4f:09:59:7c:4d:
df:42:ad:2f:0b:36:e2:87:fe:d7:54:41:4a:9c:6a:88:fe:2d:
f7:82:4c:18:64:d4:4b:5e:97:66:01:c7:1e:26:11:fa:49:4b:
1b:72:8f:dd:25:5f:82:60:58:5a:ed:c6:4d:ee:8c:df:81:31:
49:ef:f9:12:d4:78:45:b6:bc:aa:2b:24:b6:8d:24:3a:66:79:
74:6a:22:98:42:ae:61:2c:f9:14:6c:86:b7:ee:37:f2:cc:6e:
a6:c2:90:59:09:90:0c:66:c2:37:76:57:de:1c:91:6c:90:50:
09:d7:5a:dd:79:09:67:51:c0:c7:77:39:db:9d:d6:42:65:f3:
dc:6d:87:71:ed:1d:19:40:0e:af:d7:1e:4d:4b:a6:c4:cb:72:
61:a5:eb:48:45:77:e6:76:58:ed:c8:10:26:b3:13:1e:66:b4:
06:a7:1e:0a:f3:65:1a:bd:73:d7:1e:8f:ee:4a:e1:f5:28:b2:
bd:33:21:cf:4b:e9:41:92:17:d5:13:a1:0f:e2:92:f9:ac:e1:
7a:25:f6:fe:9f:b2:ee:62:01:6c:bb:d8:40:c9:f4:db:ba:47:
c3:b7:7d:33:c7:97:b5:33:09:3b:7b:53:90:38:dc:d7:5c:ed:
d6:ed:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org