Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/erPdzolEQb-_WSAccuC2D_OPezc.roa
File: erPdzolEQb-_WSAccuC2D_OPezc.roa (raw, json)
Hash identifier: eArFr3+nu0V3teUULZa25J13S9REfqkWrjEW+eVJxWo=
Subject key identifier: 7A:B3:DD:CE:89:44:41:BF:BF:59:20:1C:72:E0:B6:0F:F3:8F:7B:37
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184D9945E2E19BAD0D2C6706A8D7DFBBE89
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/erPdzolEQb-_WSAccuC2D_OPezc.roa
Signing time: Sat 03 Dec 2022 20:01:30 +0000
ROA not before: Sat 03 Dec 2022 20:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 2.59.56.0/24 maxlen: 24
45.12.82.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:94:5e:2e:19:ba:d0:d2:c6:70:6a:8d:7d:fb:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 3 20:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab3ddce894441bfbf59201c72e0b60ff38f7b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:45:1d:01:35:0d:d1:47:c0:6e:06:8b:d0:
27:00:9d:19:6a:89:ef:a9:f7:ea:3b:00:3f:64:f8:
8d:b8:75:89:94:64:8c:d3:52:c1:34:7a:b6:0a:e8:
6f:cb:ac:45:8c:ee:60:7c:f5:cd:d4:bf:6a:13:22:
ff:91:42:b5:74:a6:66:61:db:c9:b2:35:d3:b8:e9:
8b:5a:07:6d:05:94:9d:de:27:07:41:b8:f1:f1:83:
a6:da:22:37:f5:8f:ab:59:fb:3f:3a:08:62:25:0c:
72:21:6d:64:41:4d:88:de:15:fd:e1:f7:3b:69:3b:
08:7f:ce:28:9b:d8:82:b8:37:93:71:68:f5:43:a0:
f7:51:90:5a:f9:5f:93:d9:6d:b7:7f:c7:eb:56:c4:
7f:10:a0:36:41:7f:f8:41:79:72:ab:76:da:03:32:
c2:46:df:93:68:c3:6d:3d:1b:72:a7:8b:b5:1d:b6:
05:bb:1a:34:ea:46:03:b1:c7:0b:6c:06:09:4c:c8:
87:41:59:4b:a4:95:ea:dd:a8:ff:ac:13:81:80:e0:
67:39:1b:e8:98:87:8e:ea:ad:90:4e:9b:ba:20:7c:
39:6e:2b:e9:3d:bb:54:e0:51:39:d8:ee:f9:54:cd:
ed:8a:a4:98:65:fc:5e:25:9e:04:5c:92:35:82:0f:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B3:DD:CE:89:44:41:BF:BF:59:20:1C:72:E0:B6:0F:F3:8F:7B:37
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/erPdzolEQb-_WSAccuC2D_OPezc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.56.0/24
45.12.82.0/24
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4a:d2:d3:03:e2:d9:22:96:6d:45:2a:bf:ff:df:1e:c6:ab:
d7:32:a2:fe:77:2e:81:22:cd:24:6a:05:fc:67:a2:8d:85:a8:
44:ba:b5:b8:e3:60:5b:de:93:70:6d:18:db:a1:7a:53:cb:e8:
62:4c:91:cd:81:48:7c:62:69:fb:17:90:5a:17:b3:de:10:dd:
78:c8:1f:67:4d:14:b5:0e:bd:95:fc:ab:60:01:c5:97:82:77:
4d:2f:20:cb:3e:5a:cc:2a:c5:34:d3:d8:81:38:69:a5:77:2d:
ae:81:55:fb:8f:9a:a4:00:44:ea:78:a7:9a:50:fd:94:50:b1:
d3:f9:e8:ac:72:73:a9:85:a6:5f:54:3a:e1:8a:1b:02:21:fe:
f7:da:7a:b8:91:21:bc:79:62:34:7e:c1:33:d9:1f:9d:b9:8d:
85:1b:2d:91:58:9c:d2:f0:38:10:72:84:f9:28:1c:71:e8:2c:
16:f3:b9:27:7a:73:25:4d:30:27:1a:92:82:eb:4c:46:90:ab:
6f:e3:ef:83:22:49:d2:b2:9b:f4:a2:6f:6d:26:63:fc:74:a6:
59:1b:c7:24:1b:bd:d9:35:f1:49:76:ba:e4:c5:2e:aa:84:c2:
fd:d8:77:25:fe:3c:da:4c:7d:a3:1e:84:a1:07:ea:70:b7:7a:
bc:3f:4d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org