Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/TELukCDtED3g3lJGl6WPtIlCWro.roa
File: TELukCDtED3g3lJGl6WPtIlCWro.roa (raw, json)
Hash identifier: bEOWQ5+YyLUmP0syFMUsfSkKAhIFURUQiwzSW5hStIU=
Subject key identifier: 4C:42:EE:90:20:ED:10:3D:E0:DE:52:46:97:A5:8F:B4:89:42:5A:BA
Certificate issuer: /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial: 018CC7274BE3454A8165188F7BC80764C45F
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/TELukCDtED3g3lJGl6WPtIlCWro.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210574
IP address blocks: 2.59.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4b:e3:45:4a:81:65:18:8f:7b:c8:07:64:c4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c42ee9020ed103de0de524697a58fb489425aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:11:0e:36:72:f7:7a:e3:ce:a2:c6:23:e3:
d0:bc:84:1e:11:58:3f:1f:da:be:5e:83:eb:09:bb:
04:95:08:d8:7f:77:97:82:e3:08:50:8b:af:f4:5d:
ee:b3:60:c6:df:50:dd:cd:c0:3c:90:70:96:80:e4:
b2:b1:f9:3f:91:92:51:5e:9a:aa:32:f2:72:c0:60:
6d:8e:1d:7e:2d:af:4a:ee:9c:dd:5d:3a:f9:93:46:
a4:5d:10:dd:35:18:bc:0e:26:c8:92:98:6c:1d:df:
88:1b:88:db:89:5d:d9:2a:68:22:86:e6:a9:cb:69:
6c:e5:b1:e0:5c:85:4b:fd:ca:68:49:c7:41:62:95:
02:a8:de:2f:e7:7d:7f:74:a6:48:42:77:c8:5d:08:
ef:d7:91:a4:a7:b8:a0:dd:36:f5:6f:73:08:1a:54:
53:dc:ab:19:38:11:42:50:a9:2c:82:2f:1c:b4:e4:
d6:e1:d7:a9:a3:bd:78:d9:56:e9:f9:c1:2a:9e:2f:
5c:5a:7e:3d:22:60:f9:83:a7:d7:ef:8b:48:cb:cd:
ef:3f:96:14:ca:45:ad:41:55:40:ac:3a:08:90:85:
d5:66:93:f5:cf:57:61:7a:43:82:2e:c1:56:0a:cd:
49:31:b0:41:d7:aa:46:b8:c1:7b:a7:e2:5d:21:14:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:EE:90:20:ED:10:3D:E0:DE:52:46:97:A5:8F:B4:89:42:5A:BA
X509v3 Authority Key Identifier:
keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/TELukCDtED3g3lJGl6WPtIlCWro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
Signature Algorithm: sha256WithRSAEncryption
88:26:78:b5:57:ac:78:16:ff:8f:12:bf:6d:3b:ab:a8:39:e1:
73:bb:c7:c5:69:83:26:61:a7:67:29:67:27:52:8e:c9:7c:e4:
5f:df:b4:c7:e3:47:c1:87:70:53:81:44:0c:bc:58:76:19:3d:
59:dd:9f:67:5f:ce:fd:b8:f3:bb:4e:0e:60:4d:3a:35:63:68:
4f:72:80:78:8c:96:22:76:2e:7f:9f:a7:3f:e1:96:fb:93:c5:
45:b4:4a:b7:5a:f1:59:d4:b1:df:64:d0:40:d7:c5:48:36:a5:
ed:c8:56:fb:96:87:24:26:a8:bc:58:9a:3e:0c:f7:60:69:63:
d3:41:3f:40:8b:cd:78:b3:6d:60:85:9a:18:be:2e:22:0c:34:
b9:9a:00:2c:5e:83:a3:d8:1d:f2:d9:62:ef:2f:77:d7:b6:5a:
3a:43:61:05:77:9a:f7:47:03:95:a4:dc:0a:da:9f:a7:92:32:
7f:a5:60:67:b3:c9:7c:99:cd:49:51:68:9a:2b:d4:8d:5c:37:
e9:c4:db:49:d9:b5:f0:8d:36:99:d6:29:df:9e:6d:1c:f1:a6:
c6:6d:1a:56:68:34:d3:1f:98:ff:88:96:20:cf:27:8f:87:c7:
22:1d:22:20:a6:8a:3c:43:fa:57:09:01:04:74:d8:4d:7d:09:
3b:23:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org