Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/X0GsElHLGzJBIgvKaWh8Gt12prY.roa
File: X0GsElHLGzJBIgvKaWh8Gt12prY.roa (raw, json)
Hash identifier: R5b5ylyh6VXXjUtmjmbsqjZUJV2iZBjPcLAxLDYITQ0=
Subject key identifier: 5F:41:AC:12:51:CB:1B:32:41:22:0B:CA:69:68:7C:1A:DD:76:A6:B6
Certificate issuer: /CN=80695eb990427a585cf03b22d805878709c910d2
Certificate serial: 05591349
Authority key identifier: 80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/X0GsElHLGzJBIgvKaWh8Gt12prY.roa
Signing time: Sat 01 Jan 2022 15:55:07 +0000
ROA not before: Sat 01 Jan 2022 15:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2.59.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89723721 (0x5591349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80695eb990427a585cf03b22d805878709c910d2
Validity
Not Before: Jan 1 15:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f41ac1251cb1b3241220bca69687c1add76a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:30:7b:29:59:61:50:97:36:b4:33:d2:36:
d3:57:d7:25:ec:ee:2f:04:5e:82:a7:50:c0:e8:1c:
9e:59:f8:bb:ae:ba:49:03:48:fc:4e:a7:b7:e2:d9:
f0:08:1f:f2:b0:24:79:13:71:ba:38:62:ba:f8:db:
be:9d:90:2d:64:17:57:a1:3f:59:ac:ff:bb:40:72:
e8:24:b1:7b:a1:9f:5c:ba:31:0b:7c:65:d8:ed:f7:
42:dc:73:83:db:22:f5:60:7c:c1:b3:df:fd:50:fb:
07:84:4d:6f:38:14:a0:a8:b2:ba:f2:41:bc:55:0e:
51:7e:46:03:84:dd:cf:9a:dd:93:a7:53:af:02:f6:
b8:3e:4d:b2:3f:2a:c7:e6:7d:3a:2a:e4:10:ba:45:
98:10:c5:da:67:a5:89:ef:f0:4f:70:89:b3:4c:86:
34:e8:45:ec:87:34:bd:41:0a:05:36:3d:80:77:70:
91:0c:7e:bc:05:68:5f:88:53:0f:62:ec:c5:21:f1:
5f:bb:a4:89:2e:a9:25:fa:cf:56:d4:00:7f:4d:be:
27:5f:e3:13:e8:d7:0f:88:ba:da:a0:ab:23:51:2d:
f9:f5:60:31:38:37:0b:8c:9c:aa:0e:b3:03:76:bd:
e7:ed:40:32:b9:cc:02:ec:78:e8:e8:82:96:8b:7d:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:AC:12:51:CB:1B:32:41:22:0B:CA:69:68:7C:1A:DD:76:A6:B6
X509v3 Authority Key Identifier:
keyid:80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/X0GsElHLGzJBIgvKaWh8Gt12prY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/gGleuZBCelhc8Dsi2AWHhwnJENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:42:c7:db:10:f1:e9:9d:30:9c:4f:df:36:6c:4d:86:97:88:
c9:d3:75:18:a5:bb:55:e6:af:f7:d0:d6:63:76:aa:7f:5d:f6:
d7:12:a3:66:a4:72:a8:09:1a:ac:a3:24:7e:1c:31:a3:8a:1e:
46:ae:05:e5:eb:2e:7d:e0:17:1c:d0:8f:00:72:c9:7a:a0:b7:
0a:d8:4f:c0:2c:71:38:6c:d9:39:72:86:c7:a2:95:ac:36:cb:
f2:d6:bc:3e:b1:55:e9:8c:ec:80:be:26:b3:5f:3c:fb:de:59:
96:35:4c:9a:a4:43:23:08:f2:76:d4:d5:0c:72:8a:95:64:79:
82:ca:94:35:5b:99:6d:1c:c5:34:3f:42:f9:dc:51:50:99:1f:
b4:12:1c:72:06:f3:5d:04:30:41:a2:e1:6f:d7:15:6f:73:31:
3b:b0:4b:b7:35:75:a3:3e:a9:63:29:17:92:5e:57:60:e8:fb:
b0:3e:a5:ce:e8:ee:a6:d3:0d:43:18:96:96:aa:aa:8b:fa:23:
ad:96:dd:ef:65:ee:ca:df:6a:99:79:9d:e5:a7:00:55:80:98:
a7:3f:77:26:dd:08:c1:7b:4e:f8:bf:ca:f5:0a:d9:aa:49:57:
b0:f6:19:78:6c:08:91:b3:07:ce:f5:b2:69:8a:77:22:fb:8b:
64:9b:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:24:56 2025 by rpki-client