Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/gC09PkgxJkmfbRwlp4RJ_-7vGOY.roa
File: gC09PkgxJkmfbRwlp4RJ_-7vGOY.roa (raw, json)
Hash identifier: fvXUbi6oHC0/HTV5W6Jwj8zEqMaWZFNwKWaOiKNX9Ok=
Subject key identifier: 80:2D:3D:3E:48:31:26:49:9F:6D:1C:25:A7:84:49:FF:EE:EF:18:E6
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01093B
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/gC09PkgxJkmfbRwlp4RJ_-7vGOY.roa
Signing time: Sun 09 Jan 2022 02:31:10 +0000
ROA not before: Sun 09 Jan 2022 02:31:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 2.59.152.0/24 maxlen: 24
2.59.153.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67899 (0x1093b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Jan 9 02:31:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=802d3d3e483126499f6d1c25a78449ffeeef18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:ed:4d:d6:80:08:2a:31:44:d4:02:8c:45:
f7:3d:ee:86:43:31:f8:fa:96:20:db:54:04:3d:ae:
8b:59:25:66:f3:8c:53:47:3e:32:cb:a6:f5:7d:49:
ce:9f:ad:6c:8d:1e:28:24:48:5f:1c:8f:d5:fc:b3:
ef:61:bc:da:27:4c:e4:3c:2a:17:fc:42:95:d7:f1:
6c:4e:f6:90:fa:4c:e5:ca:d7:eb:6b:16:fc:8c:21:
f9:6a:23:44:df:27:3d:db:6d:6b:37:41:ad:b1:ab:
bc:92:dc:4b:75:a3:09:13:f4:ad:51:70:01:cd:54:
61:76:0b:66:ee:47:9c:cc:2a:dc:00:06:28:c4:93:
3f:1c:6c:46:2f:d8:98:a1:2e:d0:fb:b0:db:86:6d:
dd:12:70:4c:fb:70:d8:47:03:fe:52:cd:41:4c:b2:
59:27:7c:0e:1c:6f:6a:34:60:4f:14:48:7c:ee:8c:
87:29:f9:7c:da:36:16:02:29:6a:9c:8c:28:21:1e:
ba:a7:ca:fc:1a:3c:7e:8c:74:62:23:ff:8e:e1:10:
58:89:52:33:3d:4a:32:4c:f9:8f:af:06:65:f9:a1:
6d:99:04:6f:99:e6:15:fc:5a:90:81:0b:c4:e5:1c:
55:b1:e6:a3:41:d2:99:77:72:cc:43:63:4b:a3:10:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2D:3D:3E:48:31:26:49:9F:6D:1C:25:A7:84:49:FF:EE:EF:18:E6
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/gC09PkgxJkmfbRwlp4RJ_-7vGOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:a5:20:8f:02:94:c0:cc:40:96:6a:0a:f2:27:27:c1:cf:de:
78:ff:d9:61:63:a6:36:e8:a9:22:76:ce:67:b3:0e:fc:7c:c4:
78:77:83:94:75:3e:54:6f:9a:61:f2:ad:e7:37:39:fb:d6:0c:
c9:b2:98:09:a1:52:3a:77:51:fd:5f:8f:ba:02:85:13:79:24:
a3:ec:11:bb:13:81:20:6e:90:4c:e4:62:c3:ca:e7:d5:52:7f:
a2:71:85:bc:0f:2e:48:a9:3c:6e:e8:82:b6:38:89:98:66:0f:
23:7b:52:24:50:bd:43:dc:06:64:ee:16:3c:a5:87:db:21:3e:
cf:f5:a9:2b:39:94:c9:f1:6f:e8:0f:7c:1f:b5:14:67:89:b7:
11:dd:b5:ea:9e:32:33:fa:25:fe:fc:6e:0a:ce:8c:c9:1a:d1:
af:92:f3:bb:47:d5:30:e2:91:ab:b5:1e:c0:75:ed:a5:8e:fe:
de:1f:77:91:d0:81:b2:52:47:e8:0c:22:f5:93:05:63:31:0d:
68:a8:cd:b1:68:68:e6:27:53:3b:2c:7c:76:6b:1e:b0:c2:15:
b7:e7:46:ff:f7:b9:d5:d1:b3:66:a2:e9:29:62:41:e5:d3:63:
5f:90:df:92:dc:27:5c:5c:a9:41:a9:ee:7d:f3:40:72:66:11:
9e:e0:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:01 2024 by rpki-client on console-ams.rpki-client.org