Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UDpX6VHDSmcl0DWxvbA9dX9PQZo.roa
File: UDpX6VHDSmcl0DWxvbA9dX9PQZo.roa (raw, json)
Hash identifier: jTvOqITTQyd5VdH435yZOcyYr6SIS3Rf96f990ij9c8=
Subject key identifier: 50:3A:57:E9:51:C3:4A:67:25:D0:35:B1:BD:B0:3D:75:7F:4F:41:9A
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C56B29F2AE52DCDE8CC6463380712
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UDpX6VHDSmcl0DWxvbA9dX9PQZo.roa
Signing time: Sun 01 Jan 2023 22:55:46 +0000
ROA not before: Sun 01 Jan 2023 22:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 272027
IP address blocks: 2.56.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:56:b2:9f:2a:e5:2d:cd:e8:cc:64:63:38:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=503a57e951c34a6725d035b1bdb03d757f4f419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:a3:8f:d1:46:69:17:33:ed:d0:0a:80:24:
d4:e9:1d:42:73:60:29:3b:7c:d2:8f:c7:08:ee:4f:
4e:bc:c5:1f:74:c3:fb:49:ce:66:99:29:a0:3c:d1:
05:ca:1c:47:42:6e:0a:6b:44:bc:07:b5:10:d6:92:
ec:ae:30:32:07:99:cd:91:f4:61:ac:6a:43:ee:e7:
14:77:30:25:7a:47:92:fc:4b:38:a2:f7:2b:ca:1c:
eb:ae:96:71:e0:7d:ef:34:fe:1d:78:a6:7a:ec:f0:
00:ce:b8:23:e4:68:78:73:d6:95:55:6b:f8:1b:42:
a1:74:16:c7:fa:07:30:7f:2b:9e:a6:f4:dc:1e:02:
66:0e:cb:99:48:e4:af:31:7e:9b:6f:5e:b5:8b:e4:
69:18:4e:66:c9:19:d6:19:96:c6:7c:22:b7:1b:be:
d5:e5:ca:38:0e:d0:9d:53:a2:a0:93:f9:7f:1b:b7:
19:e1:fa:cc:f1:69:a8:4f:40:82:e1:41:0b:34:ad:
9a:ba:07:14:37:72:54:d3:d7:33:f3:21:ed:f5:7e:
77:d0:4e:d7:c7:8e:b7:58:15:ba:9e:8f:b8:00:fb:
2a:74:62:df:60:58:00:b7:a8:fd:f0:84:9d:8e:41:
11:3c:cb:b0:68:09:f8:a9:bb:7c:83:41:5b:9e:c3:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:57:E9:51:C3:4A:67:25:D0:35:B1:BD:B0:3D:75:7F:4F:41:9A
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/UDpX6VHDSmcl0DWxvbA9dX9PQZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.250.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c0:02:a1:e5:a1:57:04:5a:89:44:5f:56:b1:88:b3:d0:fd:
0e:f7:bb:90:7f:b0:5a:b8:dd:3a:ae:24:eb:69:3d:a2:52:92:
fd:cc:8b:71:ce:d0:6a:c8:6e:6e:1f:ac:8b:20:de:56:2e:00:
15:4c:b6:7a:dd:3f:11:9f:02:2e:c9:21:ec:3b:e6:75:05:6b:
31:8b:d4:97:84:58:a1:31:de:7d:27:43:0a:01:87:94:7c:83:
9b:73:76:2b:8b:8a:80:90:89:9f:74:c7:64:3b:b9:92:1d:4e:
6f:82:f0:e0:6b:16:0b:31:e5:ca:0e:28:60:e3:39:64:97:ff:
6c:6c:e5:78:0b:0c:bd:2f:70:fe:f1:27:72:f8:53:5a:f4:a8:
41:a1:50:13:13:51:7c:f0:c8:fe:26:95:5d:9d:aa:2c:5b:6b:
03:b9:4f:e0:a7:cd:b3:fa:c2:46:f0:43:80:9a:97:93:41:51:
0d:be:91:85:a2:a0:36:3f:4a:70:da:13:2b:3d:10:c3:19:06:
b0:66:5c:b5:01:c1:a9:12:90:f8:d0:5b:a2:3e:b3:98:ee:b1:
88:7d:d3:ab:51:ac:49:73:70:6e:d6:0b:02:da:40:f6:a1:86:
2e:2a:09:7e:71:a9:09:ef:8f:8e:c7:e4:3f:95:8f:cf:11:a3:
5b:be:ff:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org