Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/GfHp3zxdppndL68ne-oDS5jnkE4.roa
File: GfHp3zxdppndL68ne-oDS5jnkE4.roa (raw, json)
Hash identifier: 5vb6pTxl8d9oLndJHt8v0V1k7RW6egKcxXKsNaAEcS8=
Subject key identifier: 19:F1:E9:DF:3C:5D:A6:99:DD:2F:AF:27:7B:EA:03:4B:98:E7:90:4E
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01390C57
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/GfHp3zxdppndL68ne-oDS5jnkE4.roa
Signing time: Sun 29 May 2022 10:49:14 +0000
ROA not before: Sun 29 May 2022 10:49:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136526
IP address blocks: 2.59.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20515927 (0x1390c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: May 29 10:49:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19f1e9df3c5da699dd2faf277bea034b98e7904e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:19:93:e4:70:ae:2b:d2:5a:08:5a:e4:f8:
5e:c0:81:00:35:bb:15:12:e6:0c:f7:af:17:ad:01:
ff:68:20:29:4f:ff:81:2d:ed:17:ff:a6:61:c3:c6:
68:43:8a:f8:88:51:37:a7:78:52:66:2a:51:d5:50:
eb:bd:d8:b8:06:2c:18:32:d4:a4:eb:2e:e8:7e:1e:
27:bb:85:59:ea:67:a8:aa:1a:28:66:ac:4a:50:f4:
d6:66:4c:52:99:0c:9d:80:44:58:88:97:88:04:29:
83:65:b0:e4:0d:f9:84:22:b4:b6:c9:42:ac:93:ad:
85:ce:92:11:69:f4:1d:4a:e2:2f:87:8a:a2:91:8d:
8e:ef:0a:fd:f1:15:93:6c:3b:35:42:16:cb:c0:b4:
97:dd:d5:5e:67:d6:9f:cc:ba:64:45:f4:ad:ce:bc:
33:fc:a1:58:be:6c:76:8a:0c:d7:85:9d:45:64:a4:
95:b2:4c:c4:f3:f8:db:4f:a9:10:59:da:e4:6d:c6:
08:b7:ff:af:cd:b7:4e:92:93:0e:06:60:26:78:fe:
c3:8b:c0:bd:67:9c:a0:6c:30:ca:a6:16:5a:4a:50:
e2:4f:da:9b:53:d7:dd:b6:bc:75:9e:7a:76:73:14:
5b:e4:1f:4b:a3:e6:60:67:12:e5:13:ed:04:31:38:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:E9:DF:3C:5D:A6:99:DD:2F:AF:27:7B:EA:03:4B:98:E7:90:4E
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/GfHp3zxdppndL68ne-oDS5jnkE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.154.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a2:70:a0:c3:31:ca:9b:cc:3b:20:11:da:10:81:aa:43:96:
0e:f3:ea:16:fb:17:88:de:0e:cb:ce:b5:4c:45:b1:4c:68:03:
cc:5f:77:4c:79:dd:6a:f3:ca:65:4e:45:e8:ea:fe:e1:5d:69:
9f:b4:a2:dd:6f:23:79:8f:06:1e:95:1c:26:13:55:1d:19:49:
cb:bd:65:f9:72:03:03:64:a9:ef:e6:74:48:cd:c0:a3:9e:c7:
1b:c8:82:e8:75:be:05:8a:98:3d:f1:19:04:87:fe:3b:27:21:
80:eb:8d:c2:b2:c4:01:80:5b:40:94:38:93:8c:77:d8:82:39:
66:90:3b:1a:2e:f9:da:74:0c:71:75:ed:cc:2f:50:2c:91:e1:
ce:25:07:9b:37:6c:fa:a0:a9:7e:96:10:cf:64:22:f2:53:44:
72:e5:d7:10:ec:66:16:16:f7:dc:39:b6:6c:d1:a2:b4:72:a7:
c1:6e:db:39:38:30:d1:ed:60:aa:0d:68:34:a4:01:d4:24:35:
55:8c:5a:98:4f:01:5e:94:d1:a9:9d:c5:23:1b:7a:6f:3a:5b:
ca:c5:d6:be:b3:24:96:70:14:f2:74:71:e6:af:37:7c:65:ea:
4a:6d:bf:81:2e:dd:d1:d6:e9:db:ff:44:38:9d:a2:0c:3b:ff:
eb:d3:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org