Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bqyv_gXZt7DndI4t1oESdZzgANc.roa
File: Bqyv_gXZt7DndI4t1oESdZzgANc.roa (raw, json)
Hash identifier: soOpWtjZ+g/ipdWbd+C6pyFyMPCVlAVjvudu9zUtzkY=
Subject key identifier: 06:AC:AF:FE:05:D9:B7:B0:E7:74:8E:2D:D6:81:12:75:9C:E0:00:D7
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04BFA1CA
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bqyv_gXZt7DndI4t1oESdZzgANc.roa
Signing time: Fri 18 Mar 2022 17:33:36 +0000
ROA not before: Fri 18 Mar 2022 17:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48266
IP address blocks: 2.59.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79667658 (0x4bfa1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 18 17:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06acaffe05d9b7b0e7748e2dd68112759ce000d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:84:8c:95:de:42:09:8a:8d:5f:67:98:93:
57:0a:d8:99:0c:68:50:64:64:54:20:5c:5f:fb:4a:
8f:10:57:df:cb:33:0b:c1:6f:db:b3:9c:56:bf:1a:
7a:08:af:bd:3d:32:74:36:95:5d:cf:99:27:a5:99:
b5:06:89:58:74:7a:2c:07:71:31:dd:14:11:fb:54:
72:31:1a:3d:80:6f:fd:23:fa:d2:91:38:6d:e6:ca:
68:03:98:e8:1f:2b:d7:43:b7:87:5a:ec:a8:14:83:
f1:c8:fa:66:cd:5d:13:5a:9e:1e:7d:22:d6:3c:80:
1a:d8:17:f5:49:f6:79:26:b5:38:82:30:96:8e:4f:
73:23:90:b2:ab:30:81:5f:96:15:77:77:eb:5e:75:
22:c0:e9:f2:e0:ac:7e:3c:75:ac:7a:3c:99:96:8f:
b5:1f:8a:d7:af:27:5b:d7:d1:71:86:ff:91:0c:5a:
7f:7c:2b:28:64:34:f1:cd:67:ef:72:99:4c:27:81:
14:88:df:75:f2:f3:e9:a7:58:fd:30:29:58:ad:59:
0b:81:cc:e9:fd:30:cf:9d:1d:d9:1a:f8:39:2c:89:
a6:4a:44:2d:ee:84:3d:6a:1e:eb:6d:a4:4a:6a:b1:
cd:e6:8a:a8:62:e2:b1:a1:07:4b:6b:1d:a1:c9:90:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:AF:FE:05:D9:B7:B0:E7:74:8E:2D:D6:81:12:75:9C:E0:00:D7
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Bqyv_gXZt7DndI4t1oESdZzgANc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.61.0/24
Signature Algorithm: sha256WithRSAEncryption
11:71:45:9c:e8:e3:ad:72:66:ba:6d:18:2d:1e:39:83:ad:34:
15:7f:ee:ed:ca:aa:3e:db:d3:15:86:e1:81:48:06:d9:25:5e:
dc:99:ff:a2:b0:b4:51:90:49:fa:85:45:4d:a4:3e:93:d4:5d:
68:48:b7:d6:2b:5a:bf:45:9e:67:dd:e8:78:e2:51:16:86:1d:
c6:7a:1f:c3:ae:04:63:6d:99:f9:28:30:33:9f:a8:24:1f:c9:
16:6e:55:6b:e1:df:b0:3f:f3:8f:3c:68:5c:ad:da:1f:ea:9b:
40:f5:83:b5:ad:cc:33:c6:f4:5e:b8:0b:35:d7:04:41:d5:3a:
e6:bf:9d:18:92:e9:85:2f:2e:ce:97:36:f3:d9:60:2f:71:a4:
01:6e:6a:38:34:7a:68:41:6b:4f:d5:0a:e8:8c:73:11:c9:13:
56:c8:ad:d5:87:5a:43:f4:7f:35:14:d1:f4:30:b6:cc:3b:d8:
75:80:76:1b:b2:8e:94:b3:2b:b7:91:a9:bb:ec:c4:2e:4c:47:
43:dd:21:4c:03:fe:23:52:59:26:9c:5f:fa:aa:70:63:bc:42:
de:2a:71:be:04:d4:ae:0b:15:2f:c6:b8:ad:f7:93:b8:a2:ac:
58:d7:10:1e:36:c7:3f:b6:08:96:e0:60:1b:d0:c3:79:c8:42:
7e:17:e9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:29 2025 by rpki-client