Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8w4N1SlnZ4PH5YizXEESJcBKWwA.roa
File: 8w4N1SlnZ4PH5YizXEESJcBKWwA.roa (raw, json)
Hash identifier: eMWjF/Qa548DB2cztBaEUCvkoYbY3NLCDFcDwn220MA=
Subject key identifier: F3:0E:0D:D5:29:67:67:83:C7:E5:88:B3:5C:41:12:25:C0:4A:5B:00
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C503E7008C68E2737D5617701317D
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8w4N1SlnZ4PH5YizXEESJcBKWwA.roa
Signing time: Sun 01 Jan 2023 22:55:44 +0000
ROA not before: Sun 01 Jan 2023 22:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.58.0/24 maxlen: 24
45.91.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:50:3e:70:08:c6:8e:27:37:d5:61:77:01:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30e0dd529676783c7e588b35c411225c04a5b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:53:e8:18:53:e5:7a:09:fc:70:ef:35:db:
e9:dd:1e:b0:a1:8c:35:cb:63:3a:60:3b:88:6c:e4:
63:e3:4d:4f:3d:7d:60:0c:d3:25:f3:65:a5:a1:e5:
2e:47:e8:fa:e5:ae:a9:07:77:31:ec:da:f0:12:4e:
17:85:eb:b0:aa:64:62:b3:f3:48:f3:5d:d5:c0:fc:
1c:f8:74:1a:fc:51:3b:49:f4:8c:cb:47:e2:7d:9c:
b8:d1:d3:db:6f:b0:7e:fc:50:c6:2a:5e:d5:25:f0:
23:16:48:e0:9a:0b:8f:d8:56:56:3b:0b:19:5d:df:
e7:25:5e:92:d0:43:6c:bd:9d:91:4a:68:1b:9d:dc:
2c:7c:9e:f6:fa:a0:ad:dd:6a:d5:6e:38:4b:f3:d9:
55:78:14:89:1d:fd:07:40:08:e6:1f:54:db:65:c0:
ad:91:54:55:81:d6:19:93:b2:7f:26:e2:bb:3c:92:
90:a6:49:f1:ce:14:3f:81:09:99:33:f6:75:d1:9e:
a8:02:76:ea:32:5d:62:eb:57:ec:4f:c6:99:10:01:
18:ba:b0:3b:17:b5:db:30:30:2e:d1:ab:25:08:6b:
a9:ca:db:20:be:35:c6:a4:b0:07:be:33:df:5e:3c:
16:6c:02:aa:23:07:5d:86:3d:86:f6:90:61:fc:93:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:0D:D5:29:67:67:83:C7:E5:88:B3:5C:41:12:25:C0:4A:5B:00
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8w4N1SlnZ4PH5YizXEESJcBKWwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c2:e8:99:fb:24:2a:79:bc:d2:1a:9a:84:5c:e3:b4:b1:49:
4c:b2:1a:7a:6d:66:16:28:58:8d:01:43:c0:99:c5:7d:a6:36:
88:44:a1:16:c4:ac:09:48:bf:6d:93:7a:cc:b5:66:bd:4d:95:
dc:39:f8:aa:de:6a:b9:cb:22:81:cb:eb:fb:96:74:16:6d:49:
b9:a9:a9:0f:4f:5d:6e:c1:fb:f0:c0:75:59:c8:1b:9b:1e:1c:
31:39:4f:b7:0b:6a:06:04:d9:ad:1f:83:7a:e1:7c:ec:29:ca:
3e:ed:de:52:ee:af:33:58:87:7b:e2:81:11:46:eb:0f:cc:5c:
ca:31:b6:f2:77:da:40:a5:fc:c6:96:6b:47:d2:a7:6c:bb:bd:
88:ce:89:bf:5c:c3:e6:8a:53:3f:18:8b:26:f7:62:fb:15:c6:
38:a3:11:b1:fb:9f:a4:24:53:e7:6e:23:3a:46:f8:4c:0e:6a:
e2:6c:29:af:98:9e:07:e1:b9:3f:bb:81:53:0c:05:76:35:5a:
3b:43:32:31:c5:6b:04:32:cf:a0:d4:83:7a:e8:3f:18:80:9a:
c3:91:19:63:c3:b1:7f:dc:a1:e9:0a:82:25:f4:7d:55:0a:d9:
97:a5:54:5e:8b:5f:80:82:d7:47:66:45:6f:18:23:c1:3f:78:
25:a1:ce:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvjFA+cAjGjic31WF3ATF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjMwMTAxMjI1NTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzBlMGRkNTI5Njc2NzgzYzdlNTg4YjM1YzQxMTIyNWMwNGE1YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6lT6BhT5XoJ/HDvNdvp3R6woYw1
y2M6YDuIbORj401PPX1gDNMl82WloeUuR+j65a6pB3cx7NrwEk4XheuwqmRis/NI
813VwPwc+HQa/FE7SfSMy0fifZy40dPbb7B+/FDGKl7VJfAjFkjgmguP2FZWOwsZ
Xd/nJV6S0ENsvZ2RSmgbndwsfJ72+qCt3WrVbjhL89lVeBSJHf0HQAjmH1TbZcCt
kVRVgdYZk7J/JuK7PJKQpknxzhQ/gQmZM/Z10Z6oAnbqMl1i61fsT8aZEAEYurA7
F7XbMDAu0aslCGupytsgvjXGpLAHvjPfXjwWbAKqIwddhj2G9pBh/JMnAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPMODdUpZ2eDx+WIs1xBEiXASlsAMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvOHc0TjFTbG5aNFBINVlpelhFRVNKY0JLV3dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjs6AwQA
LVuIMA0GCSqGSIb3DQEBCwUAA4IBAQCCwuiZ+yQqebzSGpqEXOO0sUlMshp6bWYW
KFiNAUPAmcV9pjaIRKEWxKwJSL9tk3rMtWa9TZXcOfiq3mq5yyKBy+v7lnQWbUm5
qakPT11uwfvwwHVZyBubHhwxOU+3C2oGBNmtH4N64XzsKco+7d5S7q8zWId74oER
RusPzFzKMbbyd9pApfzGlmtH0qdsu72Izom/XMPmilM/GIsm92L7FcY4oxGx+5+k
JFPnbiM6RvhMDmribCmvmJ4H4bk/u4FTDAV2NVo7QzIxxWsEMs+g1IN66D8YgJrD
kRljw7F/3KHpCoIl9H1VCtmXpVRei1+AgtdHZkVvGCPBP3gloc7b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org