Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EsWEczjIqNrd9siSkarn83vI4xQ.roa
File: EsWEczjIqNrd9siSkarn83vI4xQ.roa (raw, json)
Hash identifier: kQ9CMYwH64zIJsqzjuByezRPaYsXvLA0gbzsMkUCkSU=
Subject key identifier: 12:C5:84:73:38:C8:A8:DA:DD:F6:C8:92:91:AA:E7:F3:7B:C8:E3:14
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D7860EF57F97119C4B91C7BE5171D41
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EsWEczjIqNrd9siSkarn83vI4xQ.roa
Signing time: Sun 01 Jan 2023 13:14:43 +0000
ROA not before: Sun 01 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48266
IP address blocks: 2.59.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:60:ef:57:f9:71:19:c4:b9:1c:7b:e5:17:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12c5847338c8a8daddf6c89291aae7f37bc8e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b4:ab:e6:d8:dc:9c:99:43:3e:04:14:49:
3b:75:f0:6a:42:b1:04:92:0e:04:bf:92:4f:79:da:
8e:46:61:75:39:3e:36:14:c1:71:9d:79:b2:89:db:
7b:50:c7:f8:8a:81:12:3c:87:f2:0f:80:0c:03:2a:
bd:13:77:0b:84:99:08:8f:4b:0f:f7:95:e8:ec:05:
f5:57:8d:c2:df:e4:07:85:6e:af:13:8c:db:60:f5:
c1:21:eb:fc:2a:ac:c2:4a:b4:a5:dc:0e:e4:85:b4:
47:0c:17:af:89:13:6d:ca:4c:aa:a6:ad:65:d6:8a:
9a:33:ad:67:f8:b7:18:f8:b5:d7:db:ae:ef:df:aa:
d9:cf:fa:b5:33:a1:b6:16:0f:d8:ee:8f:0c:2a:eb:
58:98:0d:12:32:d6:22:8b:be:7c:41:be:12:1f:c5:
0f:2f:60:08:36:4a:0e:a8:2b:6b:7d:d5:3a:ca:d7:
62:1b:f9:65:c9:ff:5f:7b:0f:fb:60:e8:a7:94:74:
bf:ff:e0:eb:aa:08:3b:8f:d9:94:b2:48:6c:a7:bc:
42:81:4f:6c:15:48:67:63:75:f9:25:69:6f:f8:a3:
38:b9:cc:f6:62:11:0b:82:16:7f:2b:af:4a:66:2e:
3e:78:06:d9:8a:7e:d6:49:8a:93:fa:02:f1:23:2a:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:84:73:38:C8:A8:DA:DD:F6:C8:92:91:AA:E7:F3:7B:C8:E3:14
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EsWEczjIqNrd9siSkarn83vI4xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.61.0/24
Signature Algorithm: sha256WithRSAEncryption
88:26:f8:46:80:c7:bd:e4:26:2b:c2:39:43:6f:9c:25:da:e2:
f8:40:5f:53:ba:32:3d:ba:4b:0f:a8:06:8a:85:81:72:cb:cd:
61:8b:c4:9c:0d:50:1b:4a:4a:80:00:f1:e5:2b:87:a6:56:30:
d8:1d:83:b8:d8:d6:7d:98:2f:cd:7d:29:f7:50:a0:05:cd:86:
c1:aa:01:de:5a:f9:76:c0:2d:5e:df:9f:cc:8b:27:01:c2:38:
9a:8c:ef:8e:6c:73:95:11:8c:80:3f:d4:dc:f9:73:fc:47:d1:
72:ae:7f:2c:6d:bf:16:9c:9c:0e:a4:80:d0:32:66:92:fb:39:
e4:18:b6:52:f6:d2:19:77:b5:be:ec:e5:4d:21:c3:81:6e:3c:
b4:cd:fc:0f:73:32:d5:1b:66:60:c8:35:4f:2f:82:5c:f6:06:
a2:2e:7c:cc:b7:9f:20:3e:9d:cf:f3:fb:28:ba:e8:6f:41:91:
72:2d:1b:82:35:e2:08:fb:e1:88:2d:8f:29:9d:b6:9e:bd:ad:
06:c5:c9:e1:f3:88:6b:c7:cb:86:da:5d:c7:13:03:1b:8b:14:
40:aa:2a:7b:f0:9f:07:3c:1e:d0:f2:7d:82:5c:d4:2c:76:81:
63:7a:c8:1e:82:02:23:5c:de:da:65:00:80:c6:aa:80:c0:ae:
99:a7:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:49 2025 by rpki-client