Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WM9TK9DYcyHpTX0ylU7BUiL6Gks.roa
File: WM9TK9DYcyHpTX0ylU7BUiL6Gks.roa (raw, json)
Hash identifier: LUmmt95iewW5FUvOMb2kFhPD1nnVEbVqXFruZwebi/s=
Subject key identifier: 58:CF:53:2B:D0:D8:73:21:E9:4D:7D:32:95:4E:C1:52:22:FA:1A:4B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09E17B4E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WM9TK9DYcyHpTX0ylU7BUiL6Gks.roa
Signing time: Fri 25 Feb 2022 06:20:45 +0000
ROA not before: Fri 25 Feb 2022 06:20:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 5.181.176.0/22 maxlen: 24
45.158.58.0/24 maxlen: 24
2.56.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165772110 (0x9e17b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Feb 25 06:20:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58cf532bd0d87321e94d7d32954ec15222fa1a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:48:3a:e9:b4:4e:b0:d2:23:60:09:5c:26:
37:21:8d:1c:d5:8c:2c:f3:75:70:f7:3d:d8:1f:4b:
1b:bf:23:2c:63:5a:72:f1:f4:d2:ee:12:33:db:93:
68:3b:6b:8e:c1:76:65:93:1f:a6:7b:59:f3:d6:bd:
65:ae:f9:29:09:48:a1:f1:d4:65:d9:48:98:ee:2c:
ea:e8:cd:42:57:de:0c:34:58:4e:1c:c6:df:87:e5:
67:2d:0d:c8:33:dd:62:9b:04:bd:78:10:2e:68:7b:
88:da:fb:b2:0a:43:e9:e5:81:c9:bf:11:f6:78:61:
28:6c:b8:93:00:8a:4f:d2:b7:62:1e:30:74:0c:5a:
0d:9b:9e:bc:f5:e8:51:20:8d:db:ab:c2:67:66:b3:
2e:e7:1f:67:98:b8:29:a5:b7:9b:d4:d4:7e:7f:cc:
33:ac:7f:ee:8d:e7:9f:82:2d:0a:a9:a1:8c:f2:d6:
7a:d7:4a:8f:14:3e:cc:4c:c4:c2:b1:a1:38:93:08:
5d:56:93:5b:54:f1:b6:4a:02:a9:5d:f0:33:95:19:
7f:01:d9:a9:59:25:36:cf:6c:fe:a8:04:94:75:94:
57:f9:eb:e8:1d:d3:e1:c9:0e:ba:9a:09:48:9a:22:
0e:7a:0e:43:37:88:b8:b3:60:d6:f6:46:93:9b:87:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:53:2B:D0:D8:73:21:E9:4D:7D:32:95:4E:C1:52:22:FA:1A:4B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WM9TK9DYcyHpTX0ylU7BUiL6Gks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
5.181.176.0/22
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:e4:aa:1c:d6:15:5c:08:8c:78:83:01:17:08:ae:32:2c:
1e:26:2a:3c:53:5e:5f:23:14:2a:8d:eb:50:f2:7e:ac:04:08:
52:76:ee:31:f3:26:3a:03:fa:48:59:b3:05:30:81:56:b4:a3:
91:3e:3b:20:5b:25:34:f0:3c:ef:28:6a:3e:f0:b9:88:e8:f7:
0c:1e:56:40:c4:4d:ac:95:06:c7:c5:bf:31:9e:b0:f4:57:96:
25:24:03:95:c6:46:fc:ad:d7:8a:a7:fb:04:e5:f7:ef:73:9b:
e6:f2:03:dd:7e:03:c7:1d:d3:12:e5:b0:90:7e:29:2e:e1:a5:
7c:1e:5c:f4:19:a4:ea:b0:d5:4f:89:29:7b:47:00:e4:fa:a9:
ab:4a:31:01:23:d8:33:94:a4:b4:15:75:d9:c1:02:a5:26:26:
73:66:07:19:50:46:54:1a:04:4a:c2:39:15:c7:3a:b4:c6:90:
a4:44:3f:77:d2:c5:18:cb:ee:da:c2:bb:df:4b:c4:91:c3:7b:
d0:94:63:ad:81:cd:a8:ca:c2:9c:00:96:8d:c5:53:f5:72:b6:
da:65:08:8a:66:8a:5c:8a:cc:79:c6:48:54:f1:18:a2:f8:bf:
22:27:da:f1:a7:0e:c7:ad:77:1f:28:a7:36:fd:d0:e5:78:be:
45:09:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org