Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/LC25lilL-l6crKYe24oBvR_eLvA.roa
File: LC25lilL-l6crKYe24oBvR_eLvA.roa (raw, json)
Hash identifier: OxXE2ttuX4MYmtNnoSkb7CFWjh3Ro63ickQ6PLjyMPk=
Subject key identifier: 2C:2D:B9:96:29:4B:FA:5E:9C:AC:A6:1E:DB:8A:01:BD:1F:DE:2E:F0
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 018B9463E3219482A8B118073E5D9B1A4567
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/LC25lilL-l6crKYe24oBvR_eLvA.roa
Signing time: Fri 03 Nov 2023 08:54:15 +0000
ROA not before: Fri 03 Nov 2023 08:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212921
IP address blocks: 2.59.152.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:63:e3:21:94:82:a8:b1:18:07:3e:5d:9b:1a:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Nov 3 08:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2db996294bfa5e9caca61edb8a01bd1fde2ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:a8:1d:2b:aa:ea:8d:29:51:a6:73:92:c7:
1a:fc:0e:a6:67:35:d1:24:9e:29:01:55:e2:da:de:
a6:1b:1b:c4:6f:f3:fd:e0:99:d4:ff:92:bc:f1:33:
f6:f2:e7:2d:12:8e:53:cf:18:02:00:14:2f:19:5d:
19:af:f4:c3:7d:25:6b:69:47:1e:19:f7:00:4d:93:
6a:af:60:28:c6:67:41:90:c8:24:91:7a:a4:b7:9a:
40:54:5c:a4:40:6e:b2:d1:f2:de:ef:ff:59:e4:41:
6f:12:d4:dc:ff:5c:f0:48:12:94:83:e2:7a:82:36:
3c:72:fa:f9:c5:6b:34:dd:79:b8:08:5e:87:52:2f:
15:e8:da:6d:3d:ef:e6:dd:76:2a:22:c8:6e:a2:17:
7e:a7:c7:07:90:05:71:df:fb:16:7d:9a:54:e9:96:
89:22:52:65:4a:60:65:8f:82:e3:19:43:8e:ff:24:
66:25:68:dd:21:80:c4:49:79:8e:4d:f9:49:62:21:
67:33:1f:47:57:ca:9a:f1:08:c3:fb:53:a2:db:33:
46:ac:76:c3:8c:5c:1e:0e:fe:f3:a4:a1:28:d8:51:
49:2b:83:e4:e5:29:21:44:c7:86:03:7d:c5:10:15:
a8:49:c4:9a:0c:83:40:12:59:b4:15:8d:aa:9c:db:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:B9:96:29:4B:FA:5E:9C:AC:A6:1E:DB:8A:01:BD:1F:DE:2E:F0
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/LC25lilL-l6crKYe24oBvR_eLvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/24
2.59.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4e:b3:68:08:35:4d:10:52:0c:64:27:6e:61:b5:79:da:2b:
af:b7:f9:79:72:71:4d:78:1a:77:ba:1e:0c:e5:53:76:13:d8:
84:b6:51:ea:01:c5:f2:c2:75:ac:58:8b:98:5a:24:9f:f6:d0:
09:b2:17:ff:f7:84:0c:63:5e:88:58:57:41:c7:5c:ee:5a:f9:
ff:61:a5:c6:53:81:4e:56:49:52:f1:6f:c9:ef:27:ee:15:38:
0c:21:27:9c:8c:2f:ce:6a:c6:e2:ba:2e:d3:ee:eb:30:68:63:
f3:11:e0:ee:fe:d2:b4:3e:0e:8c:87:f9:82:19:37:51:fc:16:
8f:cc:22:38:6a:61:80:e5:72:14:b3:55:64:28:53:d7:45:f5:
4a:9b:29:21:e4:ab:ad:90:3e:1b:60:8a:ed:e5:78:4b:78:5f:
0d:1a:ef:ca:83:8c:66:c7:68:17:be:39:a9:35:cd:ef:5c:f0:
76:fc:07:5e:52:0d:80:c4:ab:dd:79:17:65:ba:e8:1d:56:9b:
33:04:5e:d1:30:66:fc:3b:cb:f1:97:d5:15:88:9d:45:41:d2:
24:3a:ba:ef:ca:3f:2c:76:73:f4:3a:a5:03:30:53:c0:cc:a9:
aa:f5:fd:35:07:5c:76:4c:4b:50:04:ef:be:96:ca:48:2f:65:
57:86:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org