Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/leFxfQ8ric27zIfBoyOXm5X5EKo.roa
File: leFxfQ8ric27zIfBoyOXm5X5EKo.roa (raw, json)
Hash identifier: kgxvknUejLIGyO7tsxMUCqYBjf+pXOU/A/UHdER+Zvg=
Subject key identifier: 95:E1:71:7D:0F:2B:89:CD:BB:CC:87:C1:A3:23:97:9B:95:F9:10:AA
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 833846
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/leFxfQ8ric27zIfBoyOXm5X5EKo.roa
Signing time: Tue 08 Mar 2022 15:58:22 +0000
ROA not before: Tue 08 Mar 2022 15:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 2.59.152.0/24 maxlen: 24
2.59.153.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
2.59.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8599622 (0x833846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Mar 8 15:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95e1717d0f2b89cdbbcc87c1a323979b95f910aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:fb:8e:e9:92:e8:f3:34:10:d4:a2:e9:f7:
59:22:04:b4:56:e8:fd:e4:aa:a2:34:a0:0e:cb:ab:
12:5e:19:8b:ad:68:d5:57:57:43:c9:b4:3a:8a:5c:
37:bd:01:7e:c7:f7:84:6a:4d:11:a9:57:61:50:a6:
6b:67:2f:42:72:77:a6:ba:7e:69:e3:25:0c:57:79:
e7:89:73:eb:84:b0:05:1e:1e:b1:b1:8f:d9:dc:a1:
e7:01:6e:f2:49:cf:0f:1f:ab:27:96:70:aa:69:b3:
d3:49:46:c7:21:b8:6a:1f:12:45:fc:93:8a:e0:70:
1e:e6:73:fa:3f:11:9f:e0:57:bd:e1:97:6a:5c:00:
db:0d:2c:0c:2f:9d:4c:c8:60:55:20:89:2a:e5:21:
ab:75:11:c1:78:99:b3:f7:fa:bc:ac:77:a3:ce:8d:
07:6c:fd:a4:b7:bf:09:8a:e4:fb:63:7c:89:c8:f1:
2a:05:04:a7:ec:06:2f:0c:4d:ab:7f:71:36:1b:f3:
4f:60:fa:23:1c:cf:89:d8:19:6b:ac:df:c2:91:f5:
40:4f:a2:06:c5:9c:78:d7:56:39:05:10:f8:d6:d6:
bc:b9:b0:89:f1:1c:01:2b:8e:f2:61:3e:a5:f8:8a:
9a:82:df:c5:94:a0:4e:b1:fc:29:ea:d8:ce:97:9d:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E1:71:7D:0F:2B:89:CD:BB:CC:87:C1:A3:23:97:9B:95:F9:10:AA
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/leFxfQ8ric27zIfBoyOXm5X5EKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ad:dd:74:b4:90:4a:78:49:aa:76:20:5f:ec:c6:26:a8:bd:
70:90:c5:63:78:6a:eb:da:ef:c4:3c:6e:3c:84:67:f6:0a:00:
bb:bf:42:5a:22:5f:2d:b6:e8:28:d4:8e:22:3d:6b:ff:26:18:
69:d2:a9:4a:51:0d:80:ae:64:35:1d:b1:ce:16:4d:bc:93:07:
70:1a:48:33:09:23:41:89:db:37:ec:63:9b:a6:d0:dc:e3:2c:
42:a7:83:b4:16:7b:ae:58:e5:48:09:6f:bc:f1:df:cf:11:e2:
4e:b9:6f:36:32:1b:bd:3f:27:67:fb:36:4b:70:bb:b9:0d:48:
99:7c:47:95:e8:f2:af:84:b2:78:ac:d9:a9:99:70:db:60:0b:
5c:55:f8:32:e8:69:0d:1c:a5:e9:29:ae:61:f8:f3:e1:6b:72:
9b:be:2b:69:51:cc:81:50:63:ff:dd:26:d3:d0:a1:30:9f:6e:
c9:5b:47:0c:a2:bb:12:7f:3a:00:c5:4b:6b:da:4d:f6:0f:aa:
4e:5f:04:60:53:42:ce:91:e6:63:3c:44:ba:e7:d2:c9:bc:14:
5f:4c:ee:2f:5d:de:83:e1:7a:77:41:86:a2:3e:d3:5f:d2:55:
ba:d0:74:66:cb:06:c3:f5:15:59:e4:69:98:28:e3:86:40:65:
2a:d1:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org