Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OHYP2o_lq5jdo-PN9cTphs5t2pQ.roa
File: OHYP2o_lq5jdo-PN9cTphs5t2pQ.roa (raw, json)
Hash identifier: x3nof9a2lZn+HRSzYqF547V/m6PYNMpbpWK/d2JtNpc=
Subject key identifier: 38:76:0F:DA:8F:E5:AB:98:DD:A3:E3:CD:F5:C4:E9:86:CE:6D:DA:94
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 096495DF
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OHYP2o_lq5jdo-PN9cTphs5t2pQ.roa
Signing time: Tue 22 Feb 2022 09:10:56 +0000
ROA not before: Tue 22 Feb 2022 09:10:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.58.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157586911 (0x96495df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Feb 22 09:10:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38760fda8fe5ab98dda3e3cdf5c4e986ce6dda94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:54:ee:e2:e7:14:2e:9a:27:3f:bc:3d:a5:a2:
cc:ff:a4:5a:3a:5f:df:bf:42:ad:da:1e:c1:e2:fd:
ab:79:51:28:3d:9c:65:8f:39:32:63:34:00:28:72:
cd:7c:88:3e:42:ce:79:7f:e7:66:60:d5:d8:ec:a6:
e4:01:f2:53:a4:c0:42:c2:d4:c7:c5:45:a4:f4:4f:
6d:19:6e:77:ca:4e:71:12:61:32:b4:32:7a:99:ec:
ac:73:52:b8:dd:40:bb:58:f5:f7:46:b3:de:66:47:
bc:47:a3:3e:6b:e7:85:cb:1e:f0:5f:f9:45:c8:49:
19:c1:d2:2f:be:88:de:9b:16:b1:df:06:8f:9e:9c:
2b:d1:2f:87:b8:3d:7c:b6:49:1c:91:36:85:4b:fb:
ed:ac:de:62:e5:cc:44:29:6e:a9:63:e9:79:71:00:
4d:f0:b9:76:50:c8:75:65:97:12:ad:67:4e:5a:47:
68:88:d8:2e:45:9c:46:6a:ca:95:3d:cd:dd:45:6a:
9c:8b:10:81:6d:ab:b0:f5:6d:8a:2b:b0:09:92:ea:
86:61:0a:4d:b2:0d:6b:d0:a2:43:15:77:33:1e:15:
10:99:da:d1:c2:7d:7a:8b:00:1f:93:89:95:b6:f7:
e9:48:63:cc:6e:6e:82:08:03:a3:d1:a4:3a:8f:d7:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:0F:DA:8F:E5:AB:98:DD:A3:E3:CD:F5:C4:E9:86:CE:6D:DA:94
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OHYP2o_lq5jdo-PN9cTphs5t2pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:3c:1f:0f:0a:68:b8:61:c3:6f:20:e5:da:51:9e:a5:fa:3a:
93:9e:df:62:0f:ae:fe:8c:68:8c:fb:e4:6e:72:97:fc:1e:2b:
b3:90:ce:d5:cf:6d:79:26:bc:04:37:4c:b4:b8:c0:fb:ef:49:
71:81:07:a3:a1:12:1b:fa:fa:33:9d:52:86:c5:0f:94:79:09:
a7:48:2b:be:45:18:52:a8:f8:a0:5c:5a:45:6e:7d:95:87:6f:
b9:b6:44:a0:a9:d8:eb:df:50:0e:78:b2:41:54:ee:8f:f4:8f:
61:97:ea:27:65:10:e3:f1:16:f1:37:8d:8a:71:0b:1d:2f:1d:
c9:d2:ef:85:f1:53:ae:fc:4c:9c:3a:20:96:b3:b6:15:ac:27:
1b:a9:e9:63:e8:00:48:d4:62:e3:53:6f:f4:22:67:b7:89:78:
a6:33:83:cf:4c:74:55:ec:5d:08:3d:9a:9c:60:ac:e4:35:fe:
e3:a4:92:b4:0f:64:32:76:e1:e2:f8:f8:eb:9d:fe:8f:13:a5:
b2:01:13:0c:e8:ff:c0:0b:c6:c7:58:a0:52:00:7d:c9:bf:8c:
05:6b:8c:74:56:37:0c:cb:7d:71:18:7b:04:ac:a2:eb:e2:6b:
3c:2f:1c:67:5e:73:4b:12:ad:c6:5a:59:4e:0f:8c:40:9e:c6:
88:dd:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org