Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cIMit-bNzhG5Sn-Lqv-a5C-5C3M.roa
File: cIMit-bNzhG5Sn-Lqv-a5C-5C3M.roa (raw, json)
Hash identifier: sGJHCtUsh0rowJ8VhEltVBjhNzofBBRYcPk2vG5GUHY=
Subject key identifier: 70:83:22:B7:E6:CD:CE:11:B9:4A:7F:8B:AA:FF:9A:E4:2F:B9:0B:73
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4AC610A6BB05B1A2A001B1626666
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cIMit-bNzhG5Sn-Lqv-a5C-5C3M.roa
Signing time: Sun 01 Jan 2023 22:55:43 +0000
ROA not before: Sun 01 Jan 2023 22:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45671
IP address blocks: 2.59.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:4a:c6:10:a6:bb:05:b1:a2:a0:01:b1:62:66:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=708322b7e6cdce11b94a7f8baaff9ae42fb90b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:46:8c:80:1a:f2:3d:1d:d3:f8:a5:b4:4e:
00:40:b3:d1:a7:36:98:a7:02:f9:ac:5d:9d:71:46:
75:55:7b:e2:57:df:2b:a3:17:21:24:0a:7c:28:db:
8d:fa:d1:e7:46:9f:2b:86:52:2d:f2:91:b0:b9:5a:
fb:e5:51:69:78:6d:bb:f5:c2:13:71:c8:fb:9b:5a:
e4:3a:6a:3a:b0:78:55:44:28:f3:73:19:54:1b:3f:
0f:d2:84:83:9f:6f:d7:f8:80:15:e4:f2:fa:e4:f7:
52:e2:1d:dc:46:39:81:0c:47:69:72:8d:80:aa:54:
a8:a6:b2:50:29:4f:cc:a0:98:7a:cc:9e:e0:0c:7b:
1f:68:28:7a:66:9c:05:d9:53:16:1b:73:3a:a2:6b:
b4:e8:e7:8f:3c:e8:36:16:52:11:40:64:8d:ec:67:
60:3b:31:c8:1a:d9:33:c5:06:f2:9d:e6:62:47:4f:
9d:80:0a:5f:8e:ca:31:df:2f:24:23:c9:dd:9f:06:
b6:5c:9b:e2:a7:88:29:6d:e8:66:17:d4:f3:d3:86:
7d:8c:ba:56:d5:b5:bb:35:96:bf:89:23:62:be:f7:
bf:a6:61:92:1d:4c:ae:2d:05:43:bf:5a:e6:e7:62:
69:db:78:db:87:ca:40:93:ae:6f:1a:9b:80:41:91:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:22:B7:E6:CD:CE:11:B9:4A:7F:8B:AA:FF:9A:E4:2F:B9:0B:73
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/cIMit-bNzhG5Sn-Lqv-a5C-5C3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
Signature Algorithm: sha256WithRSAEncryption
26:e1:63:fb:d3:8d:37:35:39:a8:a3:46:9f:94:6d:7b:e9:fd:
08:88:8a:7b:2c:3c:f6:a8:69:b6:0a:4f:b2:6f:4f:23:14:dd:
e9:e5:37:96:3c:f3:5c:a5:84:44:f5:b9:06:9c:90:cd:41:b7:
8d:66:5f:7f:78:52:1b:29:1f:63:a6:cc:56:f8:48:17:0d:fe:
98:8e:4c:ea:6f:06:76:3a:1b:dc:3e:b3:c2:64:66:b1:b3:90:
a6:f0:b0:f7:da:f4:b0:dc:50:95:46:2e:6d:6f:6e:f3:b7:8a:
e2:5a:03:4c:91:53:57:0d:b5:15:85:16:cc:f5:89:4b:29:64:
9a:35:92:b3:c6:e0:36:ff:75:a3:1b:14:87:b8:17:e9:86:8a:
cc:01:92:4a:2c:80:33:18:0e:eb:47:c3:3e:02:da:78:49:b3:
27:20:e0:4b:49:e6:2b:e9:30:4d:73:ce:d8:3e:1b:2c:92:7c:
03:9f:f2:0e:d1:08:34:34:5f:57:dc:3b:93:64:42:f2:76:1b:
20:c4:1d:0c:96:99:f9:24:a8:4f:01:69:b9:86:bb:a5:33:f1:
dc:41:8a:48:d7:c8:ea:0a:8d:d3:18:74:5f:be:58:d3:1b:eb:
1f:55:a0:b6:e4:3c:cd:da:2d:d2:41:05:b3:89:3a:1f:48:a5:
a0:b0:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org