Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/SODHzMr5BsJ_RWgPvubPtwb_VzA.roa
File: SODHzMr5BsJ_RWgPvubPtwb_VzA.roa (raw, json)
Hash identifier: LQ4m3JxwiGMuaP0f0FI+QhAN/m570Rz0ynzTFNReUPY=
Subject key identifier: 48:E0:C7:CC:CA:F9:06:C2:7F:45:68:0F:BE:E6:CF:B7:06:FF:57:30
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CB593E74E08D16F6F39C5D3F4DC32FF92
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/SODHzMr5BsJ_RWgPvubPtwb_VzA.roa
Signing time: Fri 29 Dec 2023 12:36:58 +0000
ROA not before: Fri 29 Dec 2023 12:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 2.59.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:93:e7:4e:08:d1:6f:6f:39:c5:d3:f4:dc:32:ff:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Dec 29 12:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e0c7cccaf906c27f45680fbee6cfb706ff5730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:da:55:15:8a:4e:f5:2d:29:b0:23:7d:93:
3c:f8:29:d3:20:fa:4b:08:cf:7d:ce:aa:65:d7:32:
0f:9a:d3:57:20:00:da:53:bf:3b:d1:79:1b:af:3e:
c8:d4:06:59:df:c3:00:87:f5:6c:0c:c7:a2:f4:63:
f3:06:31:4a:1b:c8:c7:52:5f:78:09:50:e8:3d:78:
9b:bb:9a:19:63:fc:3d:1c:b0:b3:61:6e:21:a9:e3:
ba:81:10:90:3b:fb:4e:70:3f:7c:08:c2:eb:bb:68:
eb:01:ca:9a:cb:82:4e:0b:03:05:85:99:43:7d:e0:
91:53:e8:bb:ff:53:43:f8:09:bd:6f:c5:dc:d5:f5:
5e:7a:6c:74:95:9b:c2:ac:42:41:8d:b2:c1:37:0c:
9f:d9:e8:8b:f8:ed:ae:00:71:77:41:6c:68:f1:48:
5a:bd:a6:c2:51:2b:44:60:80:e6:ce:83:f8:2a:73:
26:d8:fa:43:86:c1:cb:9a:1a:1e:8a:3d:78:10:d1:
24:1d:76:4e:02:3e:c5:81:79:df:5c:b9:7d:ad:9d:
c9:52:7a:b3:aa:32:1b:88:b7:8a:38:92:d0:81:5f:
c7:32:83:1d:9d:7b:eb:f1:51:b3:f7:b1:42:3b:fa:
40:b0:14:ec:62:2e:38:d0:17:ec:5a:c9:3b:4f:06:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:C7:CC:CA:F9:06:C2:7F:45:68:0F:BE:E6:CF:B7:06:FF:57:30
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/SODHzMr5BsJ_RWgPvubPtwb_VzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.119.0/24
Signature Algorithm: sha256WithRSAEncryption
43:31:44:45:1d:ea:99:29:a9:cc:e1:0e:8a:c0:63:d2:e9:42:
86:27:0c:50:48:0e:0f:dc:cc:11:c0:a3:cb:f2:56:ef:4e:f6:
35:07:a3:d2:02:9d:6f:68:af:2f:2d:cd:a5:f0:96:fb:c0:f2:
ed:5c:c9:b0:e2:35:0a:4e:dd:bd:b9:c3:37:8a:0d:9a:6e:b9:
43:fa:0e:6c:e2:aa:66:05:de:70:08:f9:3d:d4:90:3f:da:5e:
87:51:2e:6d:16:34:3f:53:d2:01:ed:7c:44:7b:66:0e:ad:86:
97:c8:8c:ec:3c:e9:bc:a4:cb:b4:9d:62:20:2d:fb:46:f4:48:
65:07:6e:10:aa:18:e1:01:4b:f9:ad:f8:a3:a4:05:95:39:a9:
5d:0d:db:78:e0:5e:21:6c:cd:92:3f:50:c7:95:87:dd:dd:cb:
71:19:cc:d9:c9:c2:f6:ca:80:2f:25:94:f7:16:63:2a:cc:46:
2c:04:1d:91:7a:d5:be:70:43:13:7e:e2:d6:fb:ad:c2:90:83:
81:d4:28:28:8f:08:83:d3:ec:9c:ee:85:86:f4:13:8a:3f:b8:
1e:0a:3c:cf:68:ce:ec:42:3f:e3:03:1c:bd:17:3a:21:9b:2e:
60:aa:02:2c:74:17:73:27:ee:7e:f6:13:45:ee:43:e5:6d:fb:
ef:81:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org