Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/PrM6gwBvEQ0A_hJuslUooA6BLK4.roa
File: PrM6gwBvEQ0A_hJuslUooA6BLK4.roa (raw, json)
Hash identifier: 7mhORbgDolU6g1KIz5Y084DnyBNzFLtu8ii7R1cwDkU=
Subject key identifier: 3E:B3:3A:83:00:6F:11:0D:00:FE:12:6E:B2:55:28:A0:0E:81:2C:AE
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 01856FF9566854251EEC775E23AE2DABBC85
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/PrM6gwBvEQ0A_hJuslUooA6BLK4.roa
Signing time: Mon 02 Jan 2023 00:54:49 +0000
ROA not before: Mon 02 Jan 2023 00:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 2.58.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:56:68:54:25:1e:ec:77:5e:23:ae:2d:ab:bc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Jan 2 00:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb33a83006f110d00fe126eb25528a00e812cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:a6:7e:b9:0b:31:98:2f:1c:6b:44:fe:71:
6d:e2:e0:2e:c0:29:76:9b:3b:ad:69:fd:4a:b3:49:
c2:4f:21:28:ba:49:29:8a:a5:1d:fe:19:74:f2:d6:
e4:3c:c7:a0:8c:63:52:6f:95:96:b3:f1:bf:1e:7b:
10:e4:36:d0:a6:7d:7d:f7:99:f8:a8:a5:3b:62:6e:
a1:8a:c1:0c:2a:28:17:92:d4:b7:66:e5:4f:fa:44:
cc:f3:45:b9:d9:a4:62:54:55:ca:70:3f:cd:38:4a:
40:2f:03:3b:2e:c6:01:7e:8e:54:03:a0:82:d2:f1:
6d:5e:2f:60:98:ff:2b:05:8f:82:f2:d5:16:55:b3:
2a:a6:e1:d2:19:0b:e6:9b:13:83:f0:0c:90:e3:38:
eb:13:bc:94:f5:fb:1d:50:63:30:59:da:86:fb:2d:
85:6e:58:2d:6f:d1:1b:08:cf:6a:8a:60:ec:ee:04:
00:93:13:ee:8f:31:ca:e3:ea:03:e9:6e:8a:9c:b0:
df:d9:6e:85:9b:65:13:63:54:e5:a4:50:09:76:3b:
c5:b2:76:05:eb:18:62:44:e1:75:97:bb:22:67:cf:
eb:17:39:e7:fe:2b:3e:b1:77:b4:57:5a:43:1f:d5:
e1:19:c7:6a:f6:41:5e:06:84:46:67:11:d4:df:ec:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:3A:83:00:6F:11:0D:00:FE:12:6E:B2:55:28:A0:0E:81:2C:AE
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/PrM6gwBvEQ0A_hJuslUooA6BLK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.99.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9d:72:da:8e:7d:c9:0e:6d:87:92:b5:c7:70:d4:27:c4:7a:
40:ea:f8:23:32:74:12:d5:53:df:9e:cb:d8:26:3c:77:47:8c:
66:e5:a4:3a:b2:33:cf:8b:7e:47:d0:03:33:26:e9:9a:ea:52:
b3:fa:4d:43:02:66:63:dc:38:cb:08:ce:18:f8:a6:94:9c:22:
c0:31:5d:6c:18:83:48:f8:5f:32:77:ff:1b:63:55:4a:03:32:
54:8a:73:98:f9:06:66:41:74:1c:c6:c9:dc:ac:d5:3b:d8:5c:
21:b0:93:1a:4d:00:97:7c:51:ba:6b:0d:e2:84:cb:75:8e:e2:
20:67:b4:e5:64:ae:32:3e:b6:a5:04:ea:ae:6a:43:af:b7:20:
ab:15:d1:9d:e6:e3:09:52:23:0b:61:c2:9a:17:9d:b7:31:3c:
0b:c7:c3:98:52:0a:67:8d:a1:39:16:55:56:4c:cd:0e:c8:cd:
89:94:17:59:d4:12:31:1d:29:0a:cb:38:a5:26:fb:59:4c:03:
8d:59:07:ea:5b:17:58:69:6a:c7:95:90:9f:1d:01:0b:ae:29:
be:74:76:fe:88:04:70:6c:b3:ae:b3:71:88:40:6c:90:a9:28:
a9:64:0f:63:46:19:f8:56:cd:41:de:5e:03:5c:02:b6:13:aa:
e9:9b:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:20 2025 by rpki-client