Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/g2TotX6ZuD6o5nqGRjr67LCyjaU.roa
File: g2TotX6ZuD6o5nqGRjr67LCyjaU.roa (raw, json)
Hash identifier: XthWe2qqmNhblXAhuIDLZ6fctmw7UMHZSvr48pHNNuk=
Subject key identifier: 83:64:E8:B5:7E:99:B8:3E:A8:E6:7A:86:46:3A:FA:EC:B0:B2:8D:A5
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 018CC8DF2FC927A33C749957EAB741EA9369
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/g2TotX6ZuD6o5nqGRjr67LCyjaU.roa
Signing time: Tue 02 Jan 2024 06:31:59 +0000
ROA not before: Tue 02 Jan 2024 06:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209153
IP address blocks: 2.59.164.0/24 maxlen: 24
2.59.164.0/23 maxlen: 23
2.59.165.0/24 maxlen: 24
2a09:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2f:c9:27:a3:3c:74:99:57:ea:b7:41:ea:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8364e8b57e99b83ea8e67a86463afaecb0b28da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:36:27:08:17:3a:24:40:dc:d4:f4:ea:f2:
54:75:13:28:08:94:31:36:d3:46:0c:ee:99:ce:33:
00:79:a3:a0:6c:fe:91:e3:46:48:15:dc:0e:b0:5f:
24:c8:2e:64:bf:af:b8:5f:ae:23:48:aa:79:c4:95:
c0:ee:1a:a0:18:60:77:d4:d4:4a:64:9e:b1:59:1b:
31:23:97:eb:a6:ae:61:64:b4:88:c3:1b:5f:74:13:
e5:f5:9b:85:bb:d6:10:d5:db:55:23:df:e0:f2:4a:
89:62:f5:5c:83:a6:b5:d3:a2:bb:75:5d:71:5c:68:
26:c9:d5:58:99:61:11:04:59:66:78:f1:0e:65:49:
81:3b:3c:0f:6d:13:93:10:9c:05:ec:b5:42:cd:c8:
68:ba:d9:fd:2b:f1:d8:7a:96:01:ca:57:b9:6d:6e:
14:4f:b7:89:7c:2e:78:42:1c:f9:c3:6e:21:86:9d:
f4:8f:78:f7:d3:7a:31:58:f8:be:73:d9:fd:b7:dd:
6d:ae:b8:8d:b4:be:83:2b:34:e9:02:07:f8:98:e1:
72:cf:11:77:1d:be:63:14:ff:d7:bb:a1:3e:96:0b:
49:66:4c:12:9b:6a:7a:ec:b5:84:a1:40:1f:d0:06:
1e:18:92:1d:b6:5b:9c:e6:ab:36:a8:78:14:3d:13:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:E8:B5:7E:99:B8:3E:A8:E6:7A:86:46:3A:FA:EC:B0:B2:8D:A5
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/g2TotX6ZuD6o5nqGRjr67LCyjaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.164.0/23
IPv6:
2a09:f540::/29
Signature Algorithm: sha256WithRSAEncryption
b2:24:38:51:31:e4:9d:26:dc:25:6a:bb:32:38:33:0e:ea:49:
19:8a:e9:d0:fd:5b:29:76:49:ed:de:44:3c:59:3c:9a:87:95:
96:70:bf:8f:16:00:37:a3:d2:16:db:1f:93:e3:39:aa:17:bb:
09:50:2a:3e:93:61:ed:72:a3:45:72:84:a4:f7:29:70:f5:57:
ad:4c:8a:a6:23:e5:64:c6:29:3f:90:d2:3c:43:a4:fa:de:ab:
b8:af:6d:e0:26:57:1c:2f:49:9f:1c:6d:a9:00:6a:80:b1:20:
5d:61:35:18:96:21:49:0f:f3:17:46:01:77:72:52:6b:b3:89:
06:ac:09:6d:36:09:a8:3d:63:d6:d7:52:53:6e:51:7a:00:de:
14:a2:29:c0:f1:0a:ba:0b:3a:fd:35:78:7a:b9:32:d0:1c:f5:
5e:0c:73:d0:c4:d0:0a:10:f8:20:d1:16:8b:1a:40:53:d0:27:
a4:9f:67:ab:68:40:04:3a:58:a9:aa:2a:d4:8b:8b:54:54:fb:
ca:c3:57:27:72:ae:ff:25:3d:05:15:d3:46:c8:ce:90:ba:26:
d2:f1:a6:7a:0c:a3:be:1b:9a:b2:16:c0:e7:3d:85:9b:3c:8a:
e6:f6:63:39:c4:df:20:df:90:5b:7a:0b:69:79:e4:06:f1:48:
71:79:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net