Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WrKve-w2wNL5dU0dHpMaBowwG3U.roa
File: WrKve-w2wNL5dU0dHpMaBowwG3U.roa (raw, json)
Hash identifier: Q3qK05EIwn6jYcKJTeo2DYcCbej1WqI5PyDxoQAcbR4=
Subject key identifier: 5A:B2:AF:7B:EC:36:C0:D2:F9:75:4D:1D:1E:93:1A:06:8C:30:1B:75
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C459F320015FEA90BB5B65487D3F8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WrKve-w2wNL5dU0dHpMaBowwG3U.roa
Signing time: Sun 01 Jan 2023 22:55:41 +0000
ROA not before: Sun 01 Jan 2023 22:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.56.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:45:9f:32:00:15:fe:a9:0b:b5:b6:54:87:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab2af7bec36c0d2f9754d1d1e931a068c301b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:62:9c:4f:6c:4d:2a:ed:e3:00:74:50:6e:98:
66:21:f8:78:b9:36:c0:5b:8c:38:18:0c:b6:46:c0:
26:57:d5:5f:60:8a:61:16:dc:e8:c8:db:f2:5b:ad:
85:72:e8:60:da:3f:f8:ae:84:39:cb:92:7d:5b:98:
7e:db:58:6d:85:92:02:35:34:d4:3d:61:fc:cf:29:
7c:f9:4d:2f:9a:df:55:1c:17:d7:d3:33:5b:9e:ee:
6d:f5:52:05:b7:c4:8f:23:6c:ab:8e:e7:36:fe:d3:
23:13:8b:87:47:57:84:17:0f:7d:f5:d3:73:39:60:
a5:52:0f:be:b3:c0:b0:d1:62:6f:51:d0:b4:03:6c:
41:a6:9b:8e:bf:e6:1c:e1:c2:4c:66:b4:bc:8c:26:
77:ba:22:8b:8a:e8:91:ae:bc:ae:aa:df:78:9f:d4:
cd:bf:ed:33:f7:63:0b:a3:d6:40:07:d8:85:9c:5a:
c4:45:e8:ca:5d:8f:82:9a:73:0a:5e:03:be:45:27:
26:d3:20:2b:eb:81:1c:1e:57:55:a9:0b:79:10:a7:
a9:c9:83:2c:6b:e5:c5:88:65:80:f8:d6:d3:93:d8:
84:66:9a:84:de:8e:13:4d:30:ab:90:1c:53:aa:8e:
9f:20:78:70:ed:01:05:fd:8a:c3:02:96:09:70:bf:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:AF:7B:EC:36:C0:D2:F9:75:4D:1D:1E:93:1A:06:8C:30:1B:75
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/WrKve-w2wNL5dU0dHpMaBowwG3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c5:10:ca:0b:78:86:9a:1e:ad:15:23:f8:35:91:fd:f4:76:
b4:60:cf:5e:1d:ca:55:a7:0d:72:ef:de:70:f5:b9:bf:9a:9e:
1d:07:a1:96:c3:54:a0:40:1d:03:20:3a:3c:ba:c4:a3:b6:6a:
c8:77:e6:39:c1:b2:3f:30:82:ef:5b:41:b2:43:4d:16:d9:ac:
da:43:bb:79:54:63:58:a8:e7:7a:28:96:43:c9:c0:fd:fd:b9:
2a:20:23:18:75:da:47:23:ad:e3:24:90:d0:2c:ae:a1:57:1c:
21:68:3f:36:5a:57:f9:c9:95:43:b3:b6:b6:2b:e5:0b:63:e3:
ef:92:ec:7e:0f:a1:27:f4:75:f2:05:42:cb:94:25:24:b8:89:
0a:45:7c:50:ec:92:1a:a6:53:00:c2:67:d0:01:e6:09:a7:b6:
f1:54:d5:89:1a:16:c2:f7:78:fb:53:97:da:33:bf:0e:a1:7a:
27:98:07:3b:eb:3f:58:83:49:31:87:4f:fe:ef:60:82:68:26:
11:70:3a:84:fe:1b:07:2f:37:97:01:ce:8e:5f:63:56:0f:15:
0f:01:b1:91:b3:3c:03:39:28:e4:8e:ce:42:18:fc:5b:b9:3f:
b6:0d:ae:01:81:a0:99:eb:86:73:4a:1a:c1:6f:fb:75:a0:ea:
2d:f1:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org