Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/nJRwBmtW7iDIyLE-jGJlycL7aNQ.roa
File: nJRwBmtW7iDIyLE-jGJlycL7aNQ.roa (raw, json)
Hash identifier: PqsuEGfzpSqIfkDasdQNKn3xb67KfjT0V4fCJHQQz6Q=
Subject key identifier: 9C:94:70:06:6B:56:EE:20:C8:C8:B1:3E:8C:62:65:C9:C2:FB:68:D4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018433D4BAE1F3D09F099B1A5F7F4CB451A1
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/nJRwBmtW7iDIyLE-jGJlycL7aNQ.roa
Signing time: Tue 01 Nov 2022 15:34:50 +0000
ROA not before: Tue 01 Nov 2022 15:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 2.59.56.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:d4:ba:e1:f3:d0:9f:09:9b:1a:5f:7f:4c:b4:51:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 1 15:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c9470066b56ee20c8c8b13e8c6265c9c2fb68d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:c9:45:09:39:78:77:98:4d:46:b9:f8:e0:
bb:f7:18:a1:f8:24:dd:c8:81:02:43:36:bb:81:84:
59:98:bf:52:4e:2d:ae:47:7a:4d:92:d1:c5:1d:6c:
8f:9c:f0:ec:12:e4:21:d7:ae:7c:92:ec:a2:7e:2c:
c1:46:4d:42:e6:6d:93:e6:27:f8:0b:89:7f:ee:95:
d3:ef:ee:09:ee:5e:d7:c1:ad:52:b7:69:a4:66:c4:
29:29:ff:cd:e6:1f:75:51:43:84:f2:b7:1f:dd:b3:
82:8f:01:11:74:c2:ef:37:0a:4b:1d:45:b2:03:4d:
9b:6e:ac:d0:15:57:ba:15:de:3b:22:b0:41:8f:fe:
dd:f4:28:f6:57:88:fe:a0:68:44:57:72:18:9f:19:
19:80:01:88:74:cc:68:68:26:97:f6:50:2c:bb:6d:
70:be:50:2f:2f:e8:f4:06:30:5f:0a:4c:de:08:89:
65:71:dd:c8:a3:b6:07:27:01:12:bf:21:f3:68:44:
b0:71:40:f0:36:bf:a5:25:45:11:df:6b:cc:79:ea:
36:88:f8:9b:d5:3b:ec:45:b1:b8:67:d6:d1:ff:db:
14:35:b7:ea:38:28:66:03:04:16:02:4d:02:d1:b1:
e5:67:77:32:40:ea:e6:ad:7b:ec:6a:d0:b2:2c:94:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:70:06:6B:56:EE:20:C8:C8:B1:3E:8C:62:65:C9:C2:FB:68:D4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/nJRwBmtW7iDIyLE-jGJlycL7aNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.56.0/24
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:56:32:6f:1d:d0:13:82:ae:d8:a2:d9:f2:61:e4:4f:52:10:
d4:24:5b:e6:f4:43:38:d9:38:c5:1a:79:e8:2a:e2:c7:00:0e:
02:a8:47:10:7d:e1:93:2b:d9:fa:41:9c:c2:7f:1e:c8:9d:bb:
b9:21:48:85:a6:0c:a9:21:a1:a9:1d:69:13:cd:2c:05:a6:c2:
86:44:9d:f7:38:e1:e4:5c:1a:68:12:df:b8:34:e4:01:28:fc:
56:2f:02:98:98:b6:e7:b1:a3:76:c4:87:06:df:6e:e1:64:f1:
42:b1:45:04:41:e8:bb:74:31:7e:7f:3d:0b:39:41:b1:ab:db:
16:05:77:1e:e5:73:a4:ea:f7:44:97:9d:c5:87:f4:af:6c:de:
bf:e9:7c:bf:cf:6d:40:e8:76:95:60:1c:4a:10:87:4e:8a:18:
2e:94:84:93:73:ba:4a:60:d6:15:2f:cd:f1:f4:3f:c8:5c:f1:
28:42:6b:63:f3:c7:85:30:aa:a6:6b:1d:0c:60:90:ec:5a:a7:
41:fb:f0:7c:c4:74:75:96:4c:a2:94:0a:be:93:39:fd:6e:8c:
15:aa:af:75:19:8c:32:0e:d4:4c:ab:c2:5c:10:d2:e5:15:b0:
0c:3b:12:29:10:3b:97:66:71:09:dc:52:db:f7:2f:08:af:55:
fe:d4:25:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org