Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WpjbTtDua2BlH_mzhC3DqiZCaxA.roa
File: WpjbTtDua2BlH_mzhC3DqiZCaxA.roa (raw, json)
Hash identifier: wBMwZhBVsqv/I7gmN5Cv57rBqUyLRBNv3EHqy6ERZpA=
Subject key identifier: 5A:98:DB:4E:D0:EE:6B:60:65:1F:F9:B3:84:2D:C3:AA:26:42:6B:10
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0182FA1343C1C1C98DABEE67AE441FA4C8AA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WpjbTtDua2BlH_mzhC3DqiZCaxA.roa
Signing time: Thu 01 Sep 2022 17:22:22 +0000
ROA not before: Thu 01 Sep 2022 17:22:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 2.59.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fa:13:43:c1:c1:c9:8d:ab:ee:67:ae:44:1f:a4:c8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 1 17:22:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a98db4ed0ee6b60651ff9b3842dc3aa26426b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:76:b6:7f:01:c1:57:58:02:6d:00:f1:29:
12:41:58:6c:8c:aa:07:c1:17:5e:85:18:7f:00:b9:
bc:fb:69:9c:79:0f:0c:d3:d1:fa:49:b1:08:ee:ad:
88:91:5e:cb:38:b2:3c:c6:c0:75:53:f4:d3:f4:d6:
81:34:18:33:ed:58:5f:74:d4:78:0f:ef:11:06:6c:
19:aa:9b:30:d2:59:ab:4a:89:14:5c:2d:f9:61:29:
98:26:91:20:9b:0b:26:88:ee:bf:cd:3f:ba:45:15:
35:bf:c5:a4:23:5b:3a:fc:e6:1a:1c:01:64:5a:a5:
97:f1:51:6c:15:6c:bf:7f:f0:b7:fe:4b:29:da:56:
e8:94:d3:f5:1b:a0:aa:99:6b:69:28:b0:0f:41:71:
6c:9f:d0:7c:b2:5f:1a:84:73:52:62:93:de:7d:2f:
37:47:47:1e:ef:d3:3b:0f:b5:ed:f5:a5:34:7b:dc:
5e:c9:0d:e7:28:c9:93:1b:bb:c5:69:24:57:3b:34:
ea:e8:65:4b:f1:6f:4b:e4:f0:98:3d:87:58:6e:8a:
68:41:2e:5c:65:9b:f3:37:84:58:cc:8b:19:de:5f:
41:09:c9:59:ae:d0:16:7d:ea:f1:d5:48:79:a5:c1:
cb:6f:72:2a:6d:2d:2f:b3:3b:f1:1e:c3:39:73:fd:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:DB:4E:D0:EE:6B:60:65:1F:F9:B3:84:2D:C3:AA:26:42:6B:10
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WpjbTtDua2BlH_mzhC3DqiZCaxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.57.0/24
Signature Algorithm: sha256WithRSAEncryption
51:79:27:91:1d:0b:50:7a:75:84:0a:3d:4e:fd:12:1f:fb:67:
c6:2a:cf:15:18:20:2c:a0:9a:bc:33:22:f6:f9:4e:3e:96:20:
1c:ce:fd:ae:27:f0:2d:98:10:c3:55:3e:2c:13:3c:e4:32:f1:
9c:a3:4e:fd:30:79:50:61:db:a5:d6:7c:85:ef:22:31:56:f8:
b4:1f:f8:9f:6d:b9:d8:80:ee:81:c6:c9:61:a8:7b:bf:60:e9:
49:06:55:a7:35:ff:ae:a8:29:94:5e:b3:32:4a:76:35:52:85:
af:8a:4a:fd:7f:69:a7:48:61:44:9c:85:82:22:64:e4:0c:d2:
46:18:46:52:ee:90:f6:89:95:05:55:31:94:1e:d9:a7:c5:34:
b0:3b:b2:ab:7d:8a:9f:71:f4:42:6d:bc:ea:ec:75:1d:df:c7:
90:40:2f:9c:7c:00:75:05:55:c9:e4:4f:dd:fa:8d:f7:95:9a:
1f:a3:4f:78:13:de:5e:38:1a:bb:db:93:2d:aa:ef:23:c3:fe:
e4:af:f0:6e:fe:5a:f1:87:b8:77:11:5e:4e:71:b3:9d:29:af:
81:d0:3e:d0:de:16:5a:a3:e1:a2:71:66:8f:eb:91:61:0b:b4:
85:e9:6c:aa:8d:0a:0d:3d:9b:ff:98:e8:61:70:42:da:c0:c6:
e3:f1:5d:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL6E0PBwcmNq+5nrkQfpMiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIwOTAxMTcyMjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk4ZGI0ZWQwZWU2YjYwNjUxZmY5YjM4NDJkYzNhYTI2NDI2YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2J2tn8BwVdYAm0A8SkSQVhsjKoH
wRdehRh/ALm8+2mceQ8M09H6SbEI7q2IkV7LOLI8xsB1U/TT9NaBNBgz7VhfdNR4
D+8RBmwZqpsw0lmrSokUXC35YSmYJpEgmwsmiO6/zT+6RRU1v8WkI1s6/OYaHAFk
WqWX8VFsFWy/f/C3/ksp2lbolNP1G6CqmWtpKLAPQXFsn9B8sl8ahHNSYpPefS83
R0ce79M7D7Xt9aU0e9xeyQ3nKMmTG7vFaSRXOzTq6GVL8W9L5PCYPYdYbopoQS5c
ZZvzN4RYzIsZ3l9BCclZrtAWferx1Uh5pcHLb3IqbS0vszvxHsM5c/0jDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqY207Q7mtgZR/5s4Qtw6omQmsQMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvV3BqYlR0RHVhMkJsSF9temhDM0RxaVpDYXhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjs5MA0G
CSqGSIb3DQEBCwUAA4IBAQBReSeRHQtQenWECj1O/RIf+2fGKs8VGCAsoJq8MyL2
+U4+liAczv2uJ/AtmBDDVT4sEzzkMvGco079MHlQYdul1nyF7yIxVvi0H/ifbbnY
gO6BxslhqHu/YOlJBlWnNf+uqCmUXrMySnY1UoWvikr9f2mnSGFEnIWCImTkDNJG
GEZS7pD2iZUFVTGUHtmnxTSwO7KrfYqfcfRCbbzq7HUd38eQQC+cfAB1BVXJ5E/d
+o33lZofo094E95eOBq725Mtqu8jw/7kr/Bu/lrxh7h3EV5OcbOdKa+B0D7Q3hZa
o+GicWaP65FhC7SF6WyqjQoNPZv/mOhhcELawMbj8V3P
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org