Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WWhQnTXHezUwyaceGGhtNFi3oGQ.roa
File: WWhQnTXHezUwyaceGGhtNFi3oGQ.roa (raw, json)
Hash identifier: cbGSTbFSvlitx7xUtpt//rPxSRZ58ifLA7h5iR/Ub6Q=
Subject key identifier: 59:68:50:9D:35:C7:7B:35:30:C9:A7:1E:18:68:6D:34:58:B7:A0:64
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183D251D99F86994DDB7520CC214A2BA08A
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WWhQnTXHezUwyaceGGhtNFi3oGQ.roa
Signing time: Thu 13 Oct 2022 17:08:42 +0000
ROA not before: Thu 13 Oct 2022 17:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45671
IP address blocks: 2.59.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:51:d9:9f:86:99:4d:db:75:20:cc:21:4a:2b:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 13 17:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5968509d35c77b3530c9a71e18686d3458b7a064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:7b:69:2d:9c:3e:0c:60:10:72:03:18:d1:
64:b2:5a:08:49:10:26:8a:1a:f3:df:db:c5:96:9a:
51:08:eb:2e:f3:24:31:f4:b2:63:d9:5e:a1:d3:91:
9c:d3:cf:ae:2f:61:3a:93:12:a4:62:86:f1:8f:76:
42:27:15:a1:1a:eb:30:43:db:2c:bd:32:c6:6a:f9:
28:fd:44:6e:54:af:10:5b:8c:f9:da:f0:e7:22:37:
d4:28:dc:bc:8c:2e:6e:3c:70:98:f4:9c:42:2c:e5:
e6:68:ce:09:50:79:9d:10:85:bb:5f:8c:ab:32:1e:
03:7f:0e:23:0d:aa:38:e1:57:ca:3d:0f:58:f2:af:
99:43:67:42:2e:78:b4:cd:2b:81:04:6b:18:14:50:
23:84:fb:ca:73:8c:2f:5d:4a:5a:c8:4c:cc:95:f9:
06:0e:ca:a6:f2:71:0f:d6:bc:e3:50:19:e0:df:18:
3d:9e:c0:d6:02:1c:10:03:d5:4e:31:f2:f7:09:57:
48:cf:84:b0:d9:34:a9:49:64:a7:31:95:37:cc:52:
f6:a0:d8:83:c6:10:64:ef:49:40:56:6e:3f:a2:0e:
e8:32:fd:92:b0:8a:81:e3:83:df:24:4f:fd:55:16:
3b:68:90:eb:ab:7b:9c:3e:b9:1c:8f:b5:36:60:97:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:50:9D:35:C7:7B:35:30:C9:A7:1E:18:68:6D:34:58:B7:A0:64
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WWhQnTXHezUwyaceGGhtNFi3oGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
Signature Algorithm: sha256WithRSAEncryption
db:5a:8c:e0:4b:0f:62:4a:20:fd:b2:b8:9b:f8:d4:bb:0a:24:
7b:a9:a4:0d:41:63:28:f5:10:7d:89:a6:a0:2b:0a:bc:c6:56:
b5:04:b0:fe:fe:cc:87:25:8a:a4:21:a7:92:45:c4:9d:1e:c1:
d4:46:7c:5b:74:eb:7d:76:7d:0e:64:10:f2:59:bf:29:43:fe:
28:db:7c:aa:18:22:33:a4:92:9e:96:ae:17:08:c4:e0:c2:d2:
2c:49:19:09:62:47:3e:f0:c8:7e:69:66:ef:ae:82:05:73:74:
de:a8:10:fa:25:8c:c8:52:cf:d0:d2:9a:fa:80:de:ce:ec:c2:
dc:87:05:cf:e5:67:32:7d:86:a5:2e:c0:06:03:44:78:d9:f4:
27:1a:67:6e:cb:74:01:0f:26:13:2c:d6:54:62:a7:b5:02:06:
cd:84:ad:1f:19:b6:f7:58:07:82:3e:c8:03:d8:2b:f2:9a:91:
54:a2:b7:f3:d8:39:9d:41:76:29:42:a9:68:fc:09:84:a1:32:
7e:e0:b6:b1:f9:1d:1d:56:49:9b:ba:76:66:2e:a6:6f:9a:1f:
70:d2:ce:35:99:bd:6b:7d:4b:da:1e:da:a7:1b:e8:a4:00:95:
b9:3b:59:32:9e:52:ee:a1:85:99:52:58:16:c4:ac:46:2b:82:
e4:75:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org