Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JtFMwAmIg7CDEyZYauosB6Ddhso.roa
File: JtFMwAmIg7CDEyZYauosB6Ddhso.roa (raw, json)
Hash identifier: ofHxPAG4HkcJQ7SjO/a3UA8P/6lnKLtvQ2XBtOCvJko=
Subject key identifier: 26:D1:4C:C0:09:88:83:B0:83:13:26:58:6A:EA:2C:07:A0:DD:86:CA
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C54BBE7E4FF7FF3AB3E4473F68B63
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JtFMwAmIg7CDEyZYauosB6Ddhso.roa
Signing time: Sun 01 Jan 2023 22:55:45 +0000
ROA not before: Sun 01 Jan 2023 22:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 2.59.59.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:54:bb:e7:e4:ff:7f:f3:ab:3e:44:73:f6:8b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d14cc0098883b0831326586aea2c07a0dd86ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:9b:85:a4:e0:01:d5:ba:a7:11:f7:47:9b:
55:76:87:b8:78:98:90:46:93:37:5d:e9:73:cc:10:
10:58:8f:06:c4:99:93:45:11:8f:c1:28:89:18:5e:
14:9f:45:ca:08:a2:cd:1e:50:c9:14:47:f9:5b:b9:
f7:67:f4:c1:bf:34:bf:50:6f:a3:3f:8a:87:76:bc:
c7:92:33:f4:ae:db:aa:b5:ec:fb:a3:12:2c:3c:83:
42:f5:9c:f3:cb:bf:fa:0a:b4:81:7e:cd:e7:05:74:
11:1f:f2:09:52:ac:93:35:af:46:60:55:71:ee:22:
4a:74:a0:c7:44:d3:16:42:7f:b3:e3:1e:3e:db:80:
ea:5c:b3:4d:17:bb:27:12:ca:46:ae:18:ea:9c:62:
5e:67:e8:24:f0:a9:83:37:58:e6:c9:b6:5e:b3:91:
64:5d:59:22:3b:a9:21:be:2e:be:d9:98:98:a7:21:
f2:8e:09:2f:a2:fb:b5:6d:47:6a:c7:da:3d:c2:70:
72:d8:18:85:a1:e2:55:ce:19:c1:93:e5:f6:48:95:
75:a9:16:f2:da:3d:81:a9:4a:2b:9f:d1:5f:48:04:
07:19:95:eb:c6:8d:39:77:66:c7:65:82:34:21:ac:
b7:90:f4:da:c0:93:bf:a8:24:8f:c0:ff:8f:59:02:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D1:4C:C0:09:88:83:B0:83:13:26:58:6A:EA:2C:07:A0:DD:86:CA
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JtFMwAmIg7CDEyZYauosB6Ddhso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.59.0/24
85.209.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4b:a1:5c:3d:f3:d7:3e:93:59:92:b5:21:e4:10:d3:0e:ec:
0c:b2:3a:b7:cf:59:da:6e:80:d7:6c:dd:27:b2:13:6d:12:ed:
47:35:2a:cf:03:b7:ec:f9:3a:2f:96:01:aa:bb:d8:04:6f:38:
c5:ed:08:9e:f5:37:b4:af:a3:1f:d1:36:06:09:d2:37:08:2d:
4c:7a:02:ae:b4:2d:c7:ac:e4:c7:21:ee:70:1f:10:b7:8b:22:
78:eb:bf:b8:8d:7d:b3:8f:a2:9c:1b:d6:41:d2:d4:da:fe:9f:
01:f9:9f:93:66:17:d3:40:c5:9c:36:b1:1e:26:a5:f5:b3:4d:
76:54:45:04:19:ab:36:86:98:0d:09:1c:58:da:2a:16:9c:59:
1d:dc:e2:93:47:75:a6:a2:ed:d1:6c:88:83:3e:55:20:65:5d:
36:61:dd:2f:af:e9:90:b2:1b:11:ab:59:cd:a0:c7:95:64:5d:
5e:c3:ca:d3:2e:51:c0:3a:e0:1d:a4:13:9a:72:ac:c0:10:ec:
f4:42:5b:d2:de:22:cb:47:d1:c3:ce:3c:65:31:d3:25:9e:17:
27:65:d9:ea:88:ba:f7:4e:bf:db:e0:7d:2f:4a:2c:d4:8a:1a:
c3:4a:27:65:63:24:87:05:09:88:44:db:c7:ef:9f:70:c1:42:
3f:f6:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org