Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/l5g_9w7EOwoeFazmISF_sNUGlPM.roa
File: l5g_9w7EOwoeFazmISF_sNUGlPM.roa (raw, json)
Hash identifier: va3ECoj4OtSEswgvVTzj2cJnl8iM4ojIqC+c7PULIcM=
Subject key identifier: 97:98:3F:F7:0E:C4:3B:0A:1E:15:AC:E6:21:21:7F:B0:D5:06:94:F3
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01398C69
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/l5g_9w7EOwoeFazmISF_sNUGlPM.roa
Signing time: Sun 29 May 2022 10:49:15 +0000
ROA not before: Sun 29 May 2022 10:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205960
IP address blocks: 2.59.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20548713 (0x1398c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: May 29 10:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97983ff70ec43b0a1e15ace621217fb0d50694f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:c5:59:78:99:7c:31:2b:7f:95:8a:22:8c:
8e:5e:1d:ee:a5:93:32:7c:90:d6:1d:91:93:ed:a6:
c7:56:3b:ba:61:5e:76:6b:3b:27:20:66:7a:75:f2:
d7:60:c9:b5:16:56:0f:2c:c9:42:7b:d9:dc:b9:01:
16:48:24:92:e0:48:88:72:97:c4:dd:8b:2a:4c:c2:
a8:74:1b:ac:02:47:3c:c1:a7:1f:7d:c9:d2:7c:21:
84:a0:01:d8:88:78:5d:ca:9d:2e:8e:f5:25:6a:03:
4b:a7:ec:f2:e7:a1:dc:5b:b9:1e:cf:51:45:b0:a4:
be:5d:f2:16:ab:28:b5:e1:de:c7:6d:cc:b7:87:8e:
eb:5e:d8:7f:e7:9b:d4:a7:b7:c7:78:90:5a:ab:6f:
c8:7c:3d:2b:cd:c6:5b:57:cc:e1:07:a2:b2:20:a3:
53:5f:91:dd:38:1f:39:b5:66:0b:b0:20:45:57:84:
bc:e8:b6:78:f0:da:15:07:4b:2f:33:ef:55:e0:b3:
a9:f9:68:4d:e6:bd:e2:0c:c6:a2:dc:2e:69:a6:2a:
b8:34:72:b5:da:43:72:c3:f7:f2:02:32:ac:77:96:
ac:b6:78:cb:91:67:ff:74:9f:81:bb:14:b8:9c:80:
ff:68:fc:b2:93:f2:7f:a7:68:c2:fc:98:1d:95:bd:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:3F:F7:0E:C4:3B:0A:1E:15:AC:E6:21:21:7F:B0:D5:06:94:F3
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/l5g_9w7EOwoeFazmISF_sNUGlPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d2:80:d1:6b:9e:b8:78:ca:82:ce:66:eb:ff:40:21:d8:17:
1d:c5:e2:51:d1:2b:2b:fa:81:28:dd:e5:7a:9b:4f:86:1d:d1:
5e:81:9f:95:f1:6c:f6:1a:30:9d:7e:fd:ac:14:d0:55:a0:ee:
47:6f:af:93:61:d3:2e:61:65:86:44:ef:99:39:0b:96:9b:47:
0b:d8:c8:c8:5a:6d:23:1e:31:33:d9:c7:61:af:09:c0:78:7c:
bf:01:0a:d4:ed:14:15:45:1e:21:d5:ef:7e:eb:2b:85:45:bf:
bb:57:47:a1:7f:bb:73:f2:b0:bd:4b:01:fd:88:42:ca:59:8b:
8b:3a:c6:d0:a3:d5:54:6f:2c:24:b1:44:3e:30:14:9e:a6:b7:
91:c7:eb:92:99:6d:91:79:06:8e:fb:da:09:ed:03:ed:90:29:
d5:b6:b2:a9:c7:40:7f:88:76:3e:d9:c5:fa:73:72:07:b7:2e:
da:35:d1:86:9c:18:cd:94:1a:49:ab:46:f0:8c:0e:22:6a:8d:
b5:47:62:29:29:98:d3:02:63:b0:0a:5e:c6:f6:ad:e2:e3:98:
9b:50:7a:42:c8:67:08:60:58:37:f3:14:75:26:72:77:c1:1f:
b8:d1:92:7a:7d:2d:18:9a:76:fe:fd:0e:63:d3:da:3a:7b:6b:
a6:b1:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:21 2025 by rpki-client