Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fFNeXcmNghi-wZ8O3KCyeFSQDMg.roa
File: fFNeXcmNghi-wZ8O3KCyeFSQDMg.roa (raw, json)
Hash identifier: w5iIjKxlvec2ftOibB+swSusAKYjfuBoWcySRAxv0gA=
Subject key identifier: 7C:53:5E:5D:C9:8D:82:18:BE:C1:9F:0E:DC:A0:B2:78:54:90:0C:C8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184365942F30E0C880FEC5661A1D6F41DB3
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fFNeXcmNghi-wZ8O3KCyeFSQDMg.roa
Signing time: Wed 02 Nov 2022 03:18:50 +0000
ROA not before: Wed 02 Nov 2022 03:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 2.59.59.0/24 maxlen: 24
85.209.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:36:59:42:f3:0e:0c:88:0f:ec:56:61:a1:d6:f4:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 2 03:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c535e5dc98d8218bec19f0edca0b27854900cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:d4:0e:16:fb:46:09:d5:55:b1:68:62:91:
02:22:93:cc:49:7c:eb:b4:c0:7a:a3:6e:a5:b0:4e:
fd:f3:7e:91:37:d6:fe:d1:12:42:7b:49:3b:16:e1:
c0:07:cc:ed:53:59:db:8a:9a:06:a6:4a:8c:5b:bd:
71:8e:19:aa:b3:88:a8:16:bd:5b:5d:d6:42:0f:43:
fa:40:f6:c9:42:c3:78:98:24:15:79:61:d8:b2:c7:
97:f3:47:2e:2f:d0:cd:3b:15:fe:a5:d6:b8:74:76:
0d:91:14:3f:77:dc:35:8a:3e:21:24:12:c9:95:af:
e0:ce:8f:f9:12:51:85:2e:20:04:5b:8a:fa:17:d5:
6a:63:95:71:02:53:75:af:f8:70:f9:7e:31:af:48:
fa:9f:ae:f7:17:76:a4:3a:81:c5:d1:63:86:b9:ca:
98:54:bf:76:4b:dc:09:33:57:8d:b0:4c:ca:14:b9:
51:f7:d2:11:58:8c:4e:18:96:a9:7c:26:ec:44:b2:
54:74:83:07:29:86:c1:a3:5e:ba:7a:e3:bc:a0:a1:
2f:bc:0a:02:32:85:2c:48:37:51:06:57:9c:61:1e:
cd:c6:93:75:6b:ff:66:61:6d:3e:e8:5d:08:25:ca:
55:6c:cf:0b:a7:f6:63:92:c3:42:71:2b:59:8c:ca:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:5E:5D:C9:8D:82:18:BE:C1:9F:0E:DC:A0:B2:78:54:90:0C:C8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fFNeXcmNghi-wZ8O3KCyeFSQDMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.59.0/24
85.209.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f3:82:b7:43:35:6b:7b:d0:af:25:65:ac:4f:9d:b2:2a:97:
01:a3:89:27:a7:6b:3a:a5:4e:9c:fc:a5:50:a7:81:e2:fb:fd:
b6:19:72:07:a4:9f:a6:ad:07:8f:39:76:91:2f:a7:ef:07:6f:
ee:18:b3:3e:a2:44:d2:c5:f4:c1:ff:e8:d5:c2:88:87:e3:b7:
97:34:99:d1:db:78:ce:bf:b0:5e:77:48:0f:f2:bb:ea:cb:be:
76:56:a2:18:68:2a:72:3d:02:30:13:e1:d0:84:8e:b8:76:74:
e5:5a:b3:68:fe:b3:9f:f7:16:36:c3:e9:92:5d:de:6c:b8:c1:
c0:6d:a6:0a:07:bf:bb:57:4b:e8:2c:1f:7a:41:32:37:42:10:
bb:5c:22:f9:10:44:1f:ed:00:6a:63:70:0d:f6:6a:7f:74:a7:
d2:7d:4e:3b:ce:20:fd:e2:20:c3:81:ff:ae:16:19:c6:41:9c:
20:cd:81:1c:0f:69:9b:5d:da:56:d4:a2:29:89:e3:14:85:58:
2c:f1:ff:d6:00:59:54:90:2d:38:8d:cc:86:e7:be:24:05:10:
b7:71:00:f3:7e:a4:e6:b1:8b:e3:b9:83:98:b2:29:35:63:b1:
15:d4:9c:9a:46:cf:9b:34:ae:b6:88:1e:92:97:1d:00:cf:b1:
77:ce:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org