Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/cccHVC7g5cCcHp5tnV54mQl4gjs.roa
File: cccHVC7g5cCcHp5tnV54mQl4gjs.roa (raw, json)
Hash identifier: nthl1s6DwxRih3zD1SZNixOj3WYN6l04l1huUmD6Q+I=
Subject key identifier: 71:C7:07:54:2E:E0:E5:C0:9C:1E:9E:6D:9D:5E:78:99:09:78:82:3B
Certificate issuer: /CN=80695eb990427a585cf03b22d805878709c910d2
Certificate serial: 018CC2DAB5E1CFBA5192A0CA0E9151B740AC
Authority key identifier: 80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/cccHVC7g5cCcHp5tnV54mQl4gjs.roa
Signing time: Mon 01 Jan 2024 02:29:22 +0000
ROA not before: Mon 01 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2.59.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b5:e1:cf:ba:51:92:a0:ca:0e:91:51:b7:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80695eb990427a585cf03b22d805878709c910d2
Validity
Not Before: Jan 1 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71c707542ee0e5c09c1e9e6d9d5e78990978823b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:66:17:b8:e6:97:f4:b8:7f:51:84:97:42:
f5:dc:e6:7a:c4:0b:72:70:40:af:38:0d:cf:82:db:
11:bf:83:bb:e4:34:d3:10:bc:b0:64:b3:63:e2:c1:
e1:49:32:fa:d0:fd:e2:38:91:5e:2e:36:bd:51:7f:
75:cf:72:25:54:f3:93:88:03:5f:3d:10:ff:71:51:
7b:14:08:61:93:ad:b7:09:a3:db:be:74:3b:6a:7b:
4d:92:ec:ec:3a:b9:f8:3f:f3:d9:e9:e4:30:f4:0f:
91:11:52:a1:69:bd:38:bd:8d:de:59:51:53:89:ee:
0c:84:ab:67:2e:d0:8f:e2:3f:d6:fd:22:a2:da:d4:
e2:fe:3e:0d:b6:57:43:c4:10:a6:b8:16:f9:8a:dc:
e5:d2:b8:bd:30:7d:5a:9d:7d:d4:5b:7e:6d:56:b0:
42:32:be:57:77:13:c8:9b:f8:44:cd:2d:e7:1b:a2:
b1:b7:a7:0d:e6:bb:f9:65:21:53:fa:5c:96:a6:45:
9c:b4:4c:fc:68:12:39:66:3f:e9:c2:29:b8:5c:51:
4d:e5:33:24:0c:95:75:83:0d:b0:2b:c3:d3:2a:61:
8f:83:fe:58:76:f3:2c:86:00:fb:03:f2:85:52:03:
71:db:29:59:81:03:3a:38:26:27:70:d4:2c:42:2b:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:07:54:2E:E0:E5:C0:9C:1E:9E:6D:9D:5E:78:99:09:78:82:3B
X509v3 Authority Key Identifier:
keyid:80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/cccHVC7g5cCcHp5tnV54mQl4gjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/gGleuZBCelhc8Dsi2AWHhwnJENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f7:94:e2:32:38:94:85:e5:f9:a2:77:66:ee:2a:e3:89:3e:
60:60:27:e6:68:47:3f:f5:b3:77:c1:af:7e:d9:2e:80:8b:fc:
0b:e2:38:f9:db:3c:9e:ba:95:93:e2:06:64:93:da:30:85:89:
23:01:6c:0c:d0:f5:d3:4b:13:0b:81:1d:5a:b6:b4:28:1e:14:
49:a0:13:df:9a:4b:98:ed:76:5d:de:84:61:9e:a1:1c:fa:17:
95:e4:be:ce:eb:59:47:f0:f8:81:ff:a8:65:26:23:cf:a9:63:
2b:3d:b4:d6:61:f2:41:4a:25:3a:c2:59:28:8e:95:87:3b:33:
0d:48:87:bb:23:ee:48:a5:5e:81:4e:e7:c8:11:28:1d:1f:39:
e2:b4:c9:31:30:b6:48:7f:b6:40:ca:5e:ce:80:7b:5b:49:fa:
e1:4d:6f:b4:fa:b9:1a:1e:ba:42:5e:a1:2e:43:36:bf:79:6b:
78:db:52:53:c6:31:60:36:3a:d2:e5:07:cd:74:d2:d4:3d:e5:
28:30:5a:6e:7e:2f:9f:3f:3e:3d:f8:c8:9d:40:51:8c:aa:53:
be:f5:08:b4:1c:68:8a:da:0e:ff:2d:e9:8f:51:42:ff:c7:80:
4a:10:a7:d3:0d:39:68:cb:61:eb:01:51:23:5e:fe:d0:59:b3:
dd:0c:96:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2rXhz7pRkqDKDpFRt0CsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjk1ZWI5OTA0MjdhNTg1Y2YwM2IyMmQ4MDU4Nzg3MDlj
OTEwZDIwHhcNMjQwMTAxMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWM3MDc1NDJlZTBlNWMwOWMxZTllNmQ5ZDVlNzg5OTA5Nzg4MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgudmF7jml/S4f1GEl0L13OZ6xAty
cECvOA3PgtsRv4O75DTTELywZLNj4sHhSTL60P3iOJFeLja9UX91z3IlVPOTiANf
PRD/cVF7FAhhk623CaPbvnQ7antNkuzsOrn4P/PZ6eQw9A+REVKhab04vY3eWVFT
ie4MhKtnLtCP4j/W/SKi2tTi/j4NtldDxBCmuBb5itzl0ri9MH1anX3UW35tVrBC
Mr5XdxPIm/hEzS3nG6Kxt6cN5rv5ZSFT+lyWpkWctEz8aBI5Zj/pwim4XFFN5TMk
DJV1gw2wK8PTKmGPg/5YdvMshgD7A/KFUgNx2ylZgQM6OCYncNQsQiuOmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHHB1Qu4OXAnB6ebZ1eeJkJeII7MB8GA1UdIwQY
MBaAFIBpXrmQQnpYXPA7ItgFh4cJyRDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dsZXVaQkNlbGhjOERzaTJBV0hod25KRU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80ZTQzMjAtYzM4NC00ODQ3LWIyMzgt
ZWU2N2E5NjZiMDkyLzEvY2NjSFZDN2c1Y0NjSHA1dG5WNTRtUWw0Z2pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80ZTQzMjAtYzM4NC00ODQ3LWIyMzgtZWU2N2E5NjZiMDky
LzEvZ0dsZXVaQkNlbGhjOERzaTJBV0hod25KRU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjuAMA0G
CSqGSIb3DQEBCwUAA4IBAQAe95TiMjiUheX5ondm7irjiT5gYCfmaEc/9bN3wa9+
2S6Ai/wL4jj52zyeupWT4gZkk9owhYkjAWwM0PXTSxMLgR1atrQoHhRJoBPfmkuY
7XZd3oRhnqEc+heV5L7O61lH8PiB/6hlJiPPqWMrPbTWYfJBSiU6wlkojpWHOzMN
SIe7I+5IpV6BTufIESgdHznitMkxMLZIf7ZAyl7OgHtbSfrhTW+0+rkaHrpCXqEu
Qza/eWt421JTxjFgNjrS5QfNdNLUPeUoMFpufi+fPz49+MidQFGMqlO+9Qi0HGiK
2g7/LemPUUL/x4BKEKfTDTloy2HrAVEjXv7QWbPdDJYK
-----END CERTIFICATE-----
Generated at Fri May 9 19:36:06 2025 by rpki-client