Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c8ee7a-6a84-4533-b7ce-d2b8dd5da3aa/1/LgV92edhWiIWloAdVCHPwh91i-s.roa
File: LgV92edhWiIWloAdVCHPwh91i-s.roa (raw, json)
Hash identifier: rg8X6UR3/JWv7IzkasKdYHPWxNvTMiKe21Sxx1jTbgU=
Subject key identifier: 2E:05:7D:D9:E7:61:5A:22:16:96:80:1D:54:21:CF:C2:1F:75:8B:EB
Certificate issuer: /CN=e5c2b0b5c300af8c2f7ba22f7ad7954919078b35
Certificate serial: 02A57EF6
Authority key identifier: E5:C2:B0:B5:C3:00:AF:8C:2F:7B:A2:2F:7A:D7:95:49:19:07:8B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cKwtcMAr4wve6IveteVSRkHizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c8ee7a-6a84-4533-b7ce-d2b8dd5da3aa/1/LgV92edhWiIWloAdVCHPwh91i-s.roa
Signing time: Wed 23 Mar 2022 07:05:03 +0000
ROA not before: Wed 23 Mar 2022 07:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 2.56.232.0/24 maxlen: 24
2.56.233.0/24 maxlen: 24
2.56.234.0/24 maxlen: 24
2.56.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44400374 (0x2a57ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c2b0b5c300af8c2f7ba22f7ad7954919078b35
Validity
Not Before: Mar 23 07:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e057dd9e7615a221696801d5421cfc21f758beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7a:9b:91:fc:ad:af:78:09:5b:ee:52:e2:b2:
5d:ee:a6:1d:97:df:4d:4c:85:57:a3:01:12:b0:a8:
91:9d:e9:ae:62:eb:1a:b5:e4:82:77:a5:a1:0b:75:
b0:20:eb:d8:f5:af:10:2d:2f:90:7b:b7:82:c0:d4:
92:de:ea:06:2d:a6:23:a0:b3:0e:06:07:a2:d4:de:
42:41:f7:0c:44:70:f7:0e:8c:8c:96:b4:d6:cd:66:
5a:91:0d:11:08:7a:ad:09:6c:2c:9b:40:b7:4a:fc:
8b:9c:03:d6:79:cd:77:9e:09:3c:ef:99:d3:b8:4d:
c6:72:ca:ec:9f:35:8c:f4:3c:72:48:cd:1b:2c:25:
dd:4c:25:ba:a6:9c:bd:33:7f:0d:bd:cf:14:bb:17:
a1:93:cc:58:a2:18:1d:49:21:74:7f:89:9b:08:5a:
c6:f3:2d:ce:4b:3b:31:9d:c1:ac:a7:ad:60:35:b4:
55:ba:5a:ef:27:93:10:66:a1:0e:14:29:2f:41:03:
d3:29:1f:f6:18:dc:28:29:6e:39:01:4f:1a:29:ca:
27:74:d6:68:f8:d5:d6:2e:38:8a:c8:9d:34:35:f2:
bb:d5:a0:5a:ea:56:b8:31:75:15:31:bb:7b:26:de:
f3:2a:a5:f2:48:50:52:45:d6:31:73:27:ee:57:76:
aa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:7D:D9:E7:61:5A:22:16:96:80:1D:54:21:CF:C2:1F:75:8B:EB
X509v3 Authority Key Identifier:
keyid:E5:C2:B0:B5:C3:00:AF:8C:2F:7B:A2:2F:7A:D7:95:49:19:07:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cKwtcMAr4wve6IveteVSRkHizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c8ee7a-6a84-4533-b7ce-d2b8dd5da3aa/1/LgV92edhWiIWloAdVCHPwh91i-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c8ee7a-6a84-4533-b7ce-d2b8dd5da3aa/1/5cKwtcMAr4wve6IveteVSRkHizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:72:ee:c5:68:52:72:d0:d5:0a:0e:52:e6:f7:f9:3b:54:ca:
ef:a8:b1:de:65:6e:d4:b1:7a:bf:f4:e8:bc:5d:1c:28:1c:bb:
06:93:bc:0c:dc:14:76:91:f8:04:ee:39:19:dc:d4:58:5e:0f:
c7:d9:2b:07:3e:e3:15:22:33:99:11:4b:9d:0e:d8:97:0f:a0:
46:af:6d:43:89:a6:08:46:02:31:e1:63:66:6c:c0:82:0d:c5:
18:30:fe:cd:be:64:2c:21:5d:88:6e:5b:be:d7:b6:0e:9e:8f:
cc:4f:54:8f:de:8b:d8:db:68:a6:cf:05:c8:33:9a:34:1c:b4:
f9:92:20:a1:23:00:53:a6:fb:91:09:72:6a:02:af:7b:1a:1d:
26:b5:1a:4e:f2:30:6a:ca:34:c3:7b:40:0c:b7:f8:12:b1:e0:
e7:59:b3:3f:a3:25:5a:44:c2:44:7d:bf:6c:bb:d2:d5:fc:b6:
3c:4a:31:cc:70:e6:cd:02:10:d3:af:e9:2a:d7:b7:f5:e6:52:
1e:22:82:80:ec:58:c7:18:c0:d7:0f:f4:b9:1c:3f:12:3e:5e:
31:3b:c5:8e:08:d3:98:14:f0:69:1e:52:ce:9d:c5:51:55:b0:
e6:e3:99:a9:76:cb:2b:b1:a4:97:d1:37:d0:9a:a5:0d:19:4b:
4c:2c:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org