Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/oB5rLX6Ovo_yi3wBQWnAZagqgok.roa
File: oB5rLX6Ovo_yi3wBQWnAZagqgok.roa (raw, json)
Hash identifier: mx3pW6AtB47I+5shXAebbTjleVyRnNNe0YV4ERAJJTo=
Subject key identifier: A0:1E:6B:2D:7E:8E:BE:8F:F2:8B:7C:01:41:69:C0:65:A8:2A:82:89
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 04A44DC3
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/oB5rLX6Ovo_yi3wBQWnAZagqgok.roa
Signing time: Fri 04 Mar 2022 16:39:24 +0000
ROA not before: Fri 04 Mar 2022 16:39:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 2.59.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77876675 (0x4a44dc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Mar 4 16:39:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a01e6b2d7e8ebe8ff28b7c014169c065a82a8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:eb:1c:0a:1c:ca:96:c0:ff:1b:c1:e4:41:
40:4f:37:0a:3f:61:93:6d:06:ff:61:84:4d:9b:c6:
9c:c3:ef:7b:1f:7d:bb:bf:d8:ce:c8:a4:55:03:9e:
9f:0d:76:5e:3f:0f:14:ba:a4:02:c2:70:ca:11:1d:
52:62:90:59:45:c0:dc:76:46:35:74:65:21:39:fc:
53:ec:7a:43:ca:3b:a0:3a:52:37:84:bf:35:92:29:
86:31:96:e9:f2:b8:fa:e5:33:06:ab:b4:87:cc:a9:
82:fd:51:d7:72:6e:81:d4:8e:96:1d:23:ce:24:2c:
6b:63:99:ae:d2:ee:08:51:30:05:ff:68:35:2d:2e:
72:e1:ed:05:78:3f:8b:4e:ba:da:ee:9a:82:4c:aa:
76:10:1a:a6:88:6f:b1:87:b3:19:bc:af:60:7e:1f:
bb:41:90:5d:6b:2e:3b:7e:cd:ba:d4:0d:8d:de:2e:
f0:b2:f6:fa:e9:c0:cf:70:60:5c:51:c7:35:35:7b:
8f:df:60:9d:00:9f:74:80:a8:d5:a8:cd:91:a4:e7:
1a:15:69:09:a2:4e:53:77:4c:bb:cf:7b:62:d7:d3:
ff:07:f0:a5:a3:83:a6:a3:c8:86:85:75:ce:a5:ba:
1f:59:c3:2e:a4:fe:b9:36:bc:68:a7:1f:a0:8a:8d:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:6B:2D:7E:8E:BE:8F:F2:8B:7C:01:41:69:C0:65:A8:2A:82:89
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/oB5rLX6Ovo_yi3wBQWnAZagqgok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ee:bc:d4:9d:06:d2:78:60:f4:3c:23:97:7c:9e:2d:00:a5:
bf:39:a5:e3:c7:85:60:13:17:fd:f3:3e:b7:7b:b5:6f:57:32:
53:46:eb:bf:d4:30:6c:08:20:0b:7b:75:43:11:ba:6c:24:c9:
8e:0d:34:54:d9:dd:12:1d:a4:dc:a2:b2:a1:03:d6:44:36:1b:
57:cc:ca:b0:ee:d6:d2:8b:ab:87:0e:6b:0d:55:13:ae:69:4d:
46:c7:21:55:4a:b2:57:a6:5b:6e:fe:be:52:45:02:d9:60:50:
d8:02:b5:7a:01:bf:46:2c:4a:5f:36:55:d0:98:0d:a4:9a:90:
e7:2e:0d:36:86:de:65:26:53:fb:42:b9:dd:9c:a9:5d:29:63:
ff:a6:1c:32:c3:1a:6f:dd:a6:28:fb:e1:13:06:2a:88:ab:c4:
7b:f7:0b:c1:87:77:39:95:cc:40:6a:ce:a5:8c:9f:31:ce:58:
82:31:76:a0:bf:f5:a7:d1:5f:3f:e3:8c:f6:9f:83:d5:c8:72:
ed:83:fe:80:be:0b:e2:75:e4:bb:38:97:07:a9:a0:12:12:68:
43:62:79:93:b6:37:99:18:09:c6:7c:c3:cd:5b:a1:57:f7:fd:
7e:1d:bd:93:a7:96:e5:9d:af:d5:af:0a:7b:4f:db:0c:27:1d:
10:0a:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:38 2025 by rpki-client