Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NQ3fcrAkxrfbnjpGRbhl-4fKjE4.roa
File: NQ3fcrAkxrfbnjpGRbhl-4fKjE4.roa (raw, json)
Hash identifier: Z1swlu3810RpXEURVpoCjDtbwcT/2ZsUyhD0yw6UTmc=
Subject key identifier: 35:0D:DF:72:B0:24:C6:B7:DB:9E:3A:46:45:B8:65:FB:87:CA:8C:4E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0182FAD0CD24BCCB00AAF443F8F7E50F6F82
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NQ3fcrAkxrfbnjpGRbhl-4fKjE4.roa
Signing time: Thu 01 Sep 2022 20:49:24 +0000
ROA not before: Thu 01 Sep 2022 20:49:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 2.59.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fa:d0:cd:24:bc:cb:00:aa:f4:43:f8:f7:e5:0f:6f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 1 20:49:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=350ddf72b024c6b7db9e3a4645b865fb87ca8c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:9b:27:72:ce:b2:f1:78:f0:bb:8f:84:79:
af:62:1e:fc:00:96:a7:6e:5e:75:58:5d:b1:d8:19:
73:53:0e:ff:c9:d6:fa:83:1e:09:02:f9:50:f7:60:
9f:72:ce:38:fc:70:aa:65:48:9c:8f:7a:72:9f:5d:
cf:12:ce:94:03:0f:af:db:98:f8:64:15:5b:0a:83:
b3:7d:d6:14:55:f7:20:a3:a9:8d:f2:6c:0d:1b:11:
9f:26:89:72:3e:8d:27:13:0c:27:49:a5:0f:d1:a5:
4e:98:a0:da:2e:8e:b2:4d:56:5c:54:45:8a:55:18:
bb:76:dd:8e:f2:13:92:10:4c:2d:33:c8:d6:fb:4a:
57:d2:83:6c:1c:56:e1:90:f8:43:e0:82:73:d5:b5:
30:59:95:3b:c2:44:22:02:c3:60:53:ed:30:c9:16:
13:4c:75:f3:8b:3a:cc:fe:aa:57:04:81:f4:0b:37:
62:85:27:ee:2d:c5:3d:ed:fc:c6:b5:0f:01:24:d7:
ba:b7:3e:47:66:a0:6d:c4:09:70:91:73:85:0a:0e:
da:b9:67:fa:ca:3d:c9:9c:26:73:8c:fb:f6:b4:d3:
24:e1:e8:33:33:b9:75:7a:41:3d:e8:0a:a6:71:39:
25:ee:31:02:0b:c0:18:c1:0d:b7:3b:bb:23:de:74:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0D:DF:72:B0:24:C6:B7:DB:9E:3A:46:45:B8:65:FB:87:CA:8C:4E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/NQ3fcrAkxrfbnjpGRbhl-4fKjE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d7:3b:7b:a7:07:67:26:fe:88:f1:37:77:5f:f0:4c:6a:27:
e1:d6:1c:db:ef:6f:35:f8:1c:e6:66:d8:cf:e4:92:d8:e9:43:
75:b4:28:93:59:b0:5e:d7:96:a4:13:09:8d:68:df:62:48:c5:
67:c6:bd:4c:db:5f:c0:b7:85:e2:dd:a4:22:82:78:7b:d2:ab:
26:20:97:dd:d6:e6:2e:d0:7b:3c:fa:af:d1:c6:ae:7c:c6:84:
87:84:2b:a6:0e:01:b6:ae:0d:1f:83:65:78:58:86:bd:fa:14:
b4:5b:e2:5c:2f:d7:fe:ad:d6:85:1a:cc:8f:e6:41:16:28:60:
9d:d1:bb:89:b5:2a:7c:5b:fd:c8:3c:b9:fa:d2:ba:4d:9e:55:
3b:db:9a:3e:35:15:a0:f1:f5:48:ab:b8:21:e9:c8:82:dc:7d:
1d:13:32:f8:ef:93:22:35:27:39:54:75:e7:2b:84:3b:78:4b:
69:1c:3d:54:4f:f6:81:1c:1d:2b:ed:09:a2:c1:6c:07:19:3e:
0b:dc:53:01:c3:09:6d:6f:9c:67:a5:61:88:7e:6c:35:0a:2f:
41:52:82:42:2f:ad:99:28:87:7f:8d:31:a8:d9:fc:fa:aa:b4:
2b:1e:ed:e2:b8:69:94:2f:0a:52:de:ca:61:d8:99:7e:08:69:
11:ed:f7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org