Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/f6ryDWDkHVB8UwwXAz0nzV682XA.roa
File: f6ryDWDkHVB8UwwXAz0nzV682XA.roa (raw, json)
Hash identifier: 7/F1q2RasAOSyiM2lfoiMiZ9HlnqB2IPWWMtOLYkhVg=
Subject key identifier: 7F:AA:F2:0D:60:E4:1D:50:7C:53:0C:17:03:3D:27:CD:5E:BC:D9:70
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186B3452D40A3AE4464051DCF1D62C1DD55
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/f6ryDWDkHVB8UwwXAz0nzV682XA.roa
Signing time: Sun 05 Mar 2023 19:35:00 +0000
ROA not before: Sun 05 Mar 2023 19:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136557
IP address blocks: 2.59.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:45:2d:40:a3:ae:44:64:05:1d:cf:1d:62:c1:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 5 19:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7faaf20d60e41d507c530c17033d27cd5ebcd970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:07:9e:e3:56:44:12:a2:34:ba:3a:b1:82:
4c:a2:d1:c6:02:be:7a:a2:61:65:1e:a0:a8:eb:5a:
ed:aa:cc:a8:52:a2:2c:9c:37:9f:8b:f0:5b:2e:8a:
30:fc:67:8f:fe:f6:76:9b:aa:35:f6:52:f7:fe:61:
fc:b5:67:e3:f9:f9:81:83:15:2a:ba:34:49:ff:04:
e7:94:da:50:eb:3f:b1:9f:9d:21:c2:d3:29:6e:e9:
7a:37:81:9d:4a:7e:18:5e:0c:a3:b6:09:a7:49:23:
a0:6c:b1:c0:d0:63:cb:57:a2:97:1c:89:10:f4:d3:
c3:4f:02:c4:96:4a:81:a4:24:e6:2d:bd:d5:fc:54:
b8:37:96:81:74:8c:ae:bb:15:12:a1:e8:d0:2a:a8:
40:91:d1:ea:72:63:b9:ca:b5:8d:b1:5d:af:60:5c:
1b:8e:0a:d6:97:06:ac:a5:df:0a:1f:24:64:38:c9:
cc:ac:09:31:e0:48:32:0b:6d:b8:bc:ec:bc:0c:b8:
2c:01:75:85:0c:01:fe:43:6a:e4:f1:d2:90:b0:92:
d2:88:4d:66:b0:63:09:00:bd:60:86:0c:12:cb:43:
3b:f6:69:d5:8a:40:15:b9:41:47:10:d1:8e:f6:8b:
96:7a:e6:28:68:3f:3b:80:c0:5f:86:c9:ca:df:f0:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:F2:0D:60:E4:1D:50:7C:53:0C:17:03:3D:27:CD:5E:BC:D9:70
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/f6ryDWDkHVB8UwwXAz0nzV682XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a5:ee:82:ec:e1:a2:11:65:a8:5c:d0:dd:8f:47:7b:0c:2a:
de:34:b4:9f:bc:09:08:3f:89:1e:c3:e1:2a:7f:56:bd:ac:31:
be:19:7e:c5:b9:a0:b3:ee:3b:2e:84:60:50:7e:21:a4:72:39:
03:14:f4:39:5e:74:4d:97:9b:bf:b7:c3:da:ae:a0:ec:5f:dd:
ae:76:1a:57:85:26:f8:d0:62:df:98:0b:f4:74:1a:85:e9:ff:
74:08:13:6e:14:e4:ad:a4:b4:f9:4f:37:28:ee:c3:23:4c:c1:
72:ba:19:73:c8:07:3e:95:45:7b:db:e3:03:f2:7c:3f:78:59:
54:e0:8a:d8:db:71:a7:b1:68:af:2f:2c:7f:7e:17:6a:dd:ce:
e1:cc:6d:a0:f0:14:d8:7c:5d:02:7b:d6:56:e2:c5:74:ed:a3:
3b:ad:ae:1e:0c:c2:04:bc:f3:fc:32:bc:5e:22:bc:4f:37:2c:
00:99:c2:7c:86:a9:94:e2:34:64:be:19:ae:01:02:d0:25:4e:
32:e5:a2:79:39:52:39:ae:69:32:81:1c:0b:0f:09:9d:4c:58:
c8:05:64:21:81:b7:95:06:0a:5c:99:75:61:bf:11:9f:f4:7e:
d8:2f:4c:06:9d:ca:0d:be:32:21:aa:de:95:69:c6:aa:48:de:
43:9c:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org