Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DgIa79TBmnxxxvSJYC-z2aYo0y4.roa
File: DgIa79TBmnxxxvSJYC-z2aYo0y4.roa (raw, json)
Hash identifier: +b3yuS5M4pPc3A4PUb/lI8NK+KgFyXPkyfgaGxCrf54=
Subject key identifier: 0E:02:1A:EF:D4:C1:9A:7C:71:C6:F4:89:60:2F:B3:D9:A6:28:D3:2E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184E9C655F498A481F383A0B9FBE325E104
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DgIa79TBmnxxxvSJYC-z2aYo0y4.roa
Signing time: Tue 06 Dec 2022 23:30:00 +0000
ROA not before: Tue 06 Dec 2022 23:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 2.59.58.0/24 maxlen: 24
45.91.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:c6:55:f4:98:a4:81:f3:83:a0:b9:fb:e3:25:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 6 23:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e021aefd4c19a7c71c6f489602fb3d9a628d32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:a3:4c:40:03:e1:2d:6e:4b:55:7d:21:11:
7d:3c:e1:dd:86:23:51:a0:75:c9:63:ad:25:78:45:
89:18:6c:a0:db:24:e6:ce:d9:3f:e5:96:76:4c:20:
cf:24:bf:5b:db:8d:f7:69:ae:0c:a1:5e:6d:c3:83:
a1:77:6a:5b:43:9e:8a:b3:01:38:62:55:77:02:e7:
27:f7:a1:97:00:88:e7:80:66:dd:f6:08:20:02:f4:
40:4b:4b:b6:ac:31:86:34:bd:75:13:b7:6b:62:d4:
4f:de:b2:00:52:d0:4d:93:d3:8c:6c:76:ad:20:c3:
82:60:74:fe:fd:31:f9:35:18:b7:6e:a5:70:1f:4f:
92:6f:f7:f0:ef:4e:46:f6:ec:99:79:9b:95:d2:ea:
09:a6:e8:25:90:39:8e:5c:af:6d:a1:31:d7:06:28:
99:93:74:ca:1b:0a:3b:08:ed:eb:81:2b:ea:3f:04:
e2:5d:07:66:6c:47:68:da:4d:07:7b:46:96:32:0d:
ec:c3:71:f1:7d:35:cb:ea:c6:42:be:66:cb:58:33:
2c:56:92:c7:a6:dd:10:32:3d:56:7d:b7:ac:e4:0d:
e9:ff:8d:67:6a:9d:1e:e9:ab:e8:d8:a3:e0:dc:ef:
36:1f:55:af:12:86:e7:fd:40:52:af:c2:7f:2f:0b:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:1A:EF:D4:C1:9A:7C:71:C6:F4:89:60:2F:B3:D9:A6:28:D3:2E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DgIa79TBmnxxxvSJYC-z2aYo0y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
64:94:c2:9e:62:fe:08:d0:43:27:d4:c3:fa:9c:d9:da:a2:fe:
b1:0f:90:b1:7a:74:23:07:d0:c4:30:03:06:ca:db:b4:52:e9:
ff:9b:c6:bd:a4:b3:1a:74:25:7b:93:62:07:db:37:aa:51:43:
ab:8f:2e:6c:af:b9:1b:be:cf:33:1e:5d:8d:de:e8:8e:4f:99:
58:63:00:58:25:65:58:38:4c:43:77:9a:d4:09:e7:da:b3:e7:
5d:61:39:9c:59:eb:ec:f0:11:bf:77:ce:3e:f6:dd:6e:2b:53:
6d:89:aa:a1:96:21:7d:d3:d8:28:fe:13:28:5b:f8:be:2c:40:
3a:ec:61:6b:2f:79:24:6b:7f:d9:0f:da:74:40:60:cf:31:61:
5b:ce:8b:1e:ba:98:a3:ab:31:b0:40:b7:40:ef:ca:61:75:9f:
ca:30:e1:61:89:dd:65:ff:b4:da:ae:58:26:1a:2c:31:a0:14:
63:84:b8:8d:24:17:ad:2a:d2:c1:45:f6:c5:60:39:29:1e:69:
88:b6:b8:94:57:24:28:79:13:44:da:fd:d1:72:89:f4:a1:92:
a2:95:c8:c6:0d:91:b3:0a:bc:b6:90:02:d6:ff:1d:f7:e0:25:
f9:c8:dd:b7:0c:f1:f3:de:89:c4:99:bc:cd:7f:62:19:98:e2:
e4:e9:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org