Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/A2KKjY__2LYXTokJQ4c3m0pWVrU.roa
File: A2KKjY__2LYXTokJQ4c3m0pWVrU.roa (raw, json)
Hash identifier: kflYL6WnpEruiEasuc3usRRlcL0TVu8Y/C/qhA6arBg=
Subject key identifier: 03:62:8A:8D:8F:FF:D8:B6:17:4E:89:09:43:87:37:9B:4A:56:56:B5
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0185719E87B82377D669244B056ED4A85258
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/A2KKjY__2LYXTokJQ4c3m0pWVrU.roa
Signing time: Mon 02 Jan 2023 08:34:52 +0000
ROA not before: Mon 02 Jan 2023 08:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59631
IP address blocks: 158.172.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:87:b8:23:77:d6:69:24:4b:05:6e:d4:a8:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 08:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03628a8d8fffd8b6174e89094387379b4a5656b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:96:d5:d8:cc:fc:6c:2d:cf:58:1e:cd:f1:
12:dc:e0:cd:3d:5c:98:a2:69:65:6b:a1:6b:a5:9d:
2d:ae:4b:41:8f:79:e1:76:42:bd:80:15:8d:3d:75:
82:b6:18:88:2b:54:0d:c7:3d:b2:d9:e7:fd:85:ff:
f9:9f:19:59:b7:ee:b5:76:7b:ac:2d:0f:de:7b:72:
07:77:6a:33:93:bb:ad:7c:22:ca:75:cd:3d:f8:44:
0f:39:dc:8f:8a:92:d1:32:8a:eb:eb:8d:25:10:c2:
2f:60:77:12:76:1e:b6:a1:79:b6:c9:1b:d7:7d:5f:
8e:01:d6:8b:e6:1a:13:25:e1:63:bd:23:25:3e:8e:
5e:bd:07:c8:cc:6a:2d:61:47:14:8c:8f:77:1c:da:
c0:b2:f9:c9:66:78:00:ed:31:6b:ba:4b:3f:80:10:
76:be:05:21:16:51:eb:56:41:6e:04:c7:7f:b8:3d:
46:9e:ea:7a:ea:1f:16:99:cd:50:e5:72:74:fd:b4:
24:4e:19:07:09:70:44:61:f1:23:51:be:3c:40:cd:
51:cc:5f:96:f0:2a:00:cd:7f:63:5a:2f:3f:43:06:
a8:c1:24:93:7a:bf:3b:b3:6d:19:b0:ef:53:f2:75:
55:b6:4a:50:cc:b9:4c:b4:79:66:3f:c0:9e:73:83:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:8A:8D:8F:FF:D8:B6:17:4E:89:09:43:87:37:9B:4A:56:56:B5
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/A2KKjY__2LYXTokJQ4c3m0pWVrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.136.0/22
Signature Algorithm: sha256WithRSAEncryption
23:be:fb:b2:54:4f:dc:c6:7b:d3:e7:7c:13:64:66:31:fb:3a:
36:59:5e:cb:8e:cb:00:2d:3f:b0:4c:ce:e7:7d:74:3e:15:80:
36:50:59:2e:52:b8:71:cc:50:6b:09:2a:86:a9:96:f0:23:ea:
0f:74:da:be:59:6e:a2:ca:90:ca:00:30:0f:5a:77:d3:a1:f5:
09:2a:4b:d1:a6:68:a8:8d:38:5d:d1:41:b0:c2:71:d3:8f:d2:
e0:bd:a3:8c:b2:4a:39:cf:06:51:11:55:32:c7:35:df:d3:79:
b0:db:e4:63:62:d5:61:d9:55:c1:0d:fa:bb:76:97:88:2b:c4:
1b:44:15:2e:34:09:76:f0:ec:6f:a6:8b:d5:69:0a:e4:14:28:
32:a3:b2:2c:6a:3f:2d:6d:63:bc:6b:e5:c3:c7:77:b6:11:d9:
af:0b:64:18:7f:b6:42:b7:0c:ce:95:ca:79:f3:5a:1b:08:89:
2c:a4:6e:61:d8:11:06:5b:55:3c:e0:3c:e5:46:b7:f4:62:dd:
b9:b0:84:b6:1b:59:93:0f:23:be:e1:1a:ef:56:01:ee:9c:8d:
12:10:13:c5:f1:c1:d3:d7:01:02:eb:c0:3b:15:cb:72:ae:29:
41:7d:4c:ca:90:4f:23:dc:0a:28:56:36:2b:45:f3:aa:b1:94:
32:0f:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:39 2025 by rpki-client