Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rFz-OkDvgvwuaZJDPMh59NM0r6Y.roa
File: rFz-OkDvgvwuaZJDPMh59NM0r6Y.roa (raw, json)
Hash identifier: 5euVbWT4ECvSUEzvmKhnqS5aKAbWPC90aP/BnhJGPb4=
Subject key identifier: AC:5C:FE:3A:40:EF:82:FC:2E:69:92:43:3C:C8:79:F4:D3:34:AF:A6
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A477B9A
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rFz-OkDvgvwuaZJDPMh59NM0r6Y.roa
Signing time: Tue 29 Mar 2022 20:27:07 +0000
ROA not before: Tue 29 Mar 2022 20:27:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 2.59.56.0/22 maxlen: 22
45.91.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172456858 (0xa477b9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 29 20:27:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac5cfe3a40ef82fc2e6992433cc879f4d334afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:f2:02:e9:4b:59:8e:f7:dc:2b:ee:9b:54:
34:9b:b3:17:73:50:e4:9f:fc:d5:d0:7c:82:5d:00:
75:34:a3:0f:0f:f5:13:fc:1e:7e:04:82:d9:3f:43:
a5:2e:fb:28:a8:82:96:fd:52:32:26:80:68:68:ae:
e9:16:1d:33:7f:28:45:4b:c8:b4:30:6d:b5:93:16:
47:f6:87:74:80:aa:c9:94:b8:3f:54:61:d1:b8:75:
ec:93:bc:43:52:96:2d:37:0b:a5:ae:90:84:c6:c2:
0e:6c:f8:e9:99:d9:f9:b1:d7:8d:85:56:63:eb:76:
7f:11:73:9d:67:ca:17:6e:4d:24:50:cf:4f:46:31:
00:62:cf:93:b6:84:e1:0a:f8:45:ee:2c:af:8d:14:
83:f6:39:83:b2:09:f5:43:22:84:8f:91:67:c0:27:
bf:f9:ef:98:1e:5d:77:87:dc:8f:9e:e3:ee:cb:a9:
eb:1c:a8:07:78:81:bc:5a:c7:72:31:96:1e:11:21:
ec:d7:e6:68:24:ed:46:9b:c9:bc:63:79:47:29:87:
5f:dc:fc:32:4f:ac:5f:28:f6:35:80:87:bc:06:15:
9d:86:99:79:cf:ac:90:59:22:0f:90:0b:31:19:15:
02:e8:64:80:0a:42:75:1d:30:af:a0:e0:cb:22:36:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5C:FE:3A:40:EF:82:FC:2E:69:92:43:3C:C8:79:F4:D3:34:AF:A6
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rFz-OkDvgvwuaZJDPMh59NM0r6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.56.0/22
45.91.136.0/22
Signature Algorithm: sha256WithRSAEncryption
79:2e:0c:22:d8:a8:2f:5d:e8:1e:2a:1f:5e:fb:1b:10:26:6a:
4d:67:e9:72:7f:72:7d:52:c6:98:a4:5f:4f:ac:2d:81:a0:2b:
5a:19:6c:02:52:77:62:81:23:ea:46:aa:64:8a:50:f6:4f:8d:
42:cc:3f:20:18:78:a1:e5:72:ee:9d:6c:24:10:56:10:83:0a:
98:91:06:35:fa:73:86:24:7a:ec:48:b7:57:af:22:b9:99:b0:
5f:47:c6:df:9d:16:af:49:4f:9f:ec:66:3f:49:01:b7:b4:13:
20:de:01:6e:10:97:75:bf:f5:1b:d9:54:9f:41:83:d9:95:fc:
3f:9c:e9:81:0c:f7:6a:3c:1b:93:53:c4:71:b0:8f:bd:0b:73:
8d:03:90:6b:60:fb:a1:ec:68:b2:53:2b:c6:8f:b9:75:46:c5:
40:2f:18:4b:b7:67:5e:52:6d:74:09:e6:10:07:2b:9a:a0:4b:
40:cc:f2:cb:e4:a6:b6:c1:fb:f7:65:2a:79:9c:e9:4e:b6:11:
0c:94:5a:0c:a3:f8:ee:ba:47:ff:71:2e:3f:e3:ee:08:df:8b:
57:b8:2f:d8:30:b0:48:33:6b:56:50:cf:48:56:02:94:a0:e3:
a3:0d:fc:50:e5:20:6e:0c:9b:65:85:b7:f5:f4:26:0b:3d:e1:
85:28:19:46
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECkd7mjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDRjMjY3ZmE3NTRjZDY1MDllOWY4MDcyNzMxMjNiZWU5NmM1MjVkMB4XDTIyMDMy
OTIwMjcwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWM1Y2ZlM2E0MGVm
ODJmYzJlNjk5MjQzM2NjODc5ZjRkMzM0YWZhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALll8gLpS1mO99wr7ptUNJuzF3NQ5J/81dB8gl0AdTSjDw/1
E/wefgSC2T9DpS77KKiClv1SMiaAaGiu6RYdM38oRUvItDBttZMWR/aHdICqyZS4
P1Rh0bh17JO8Q1KWLTcLpa6QhMbCDmz46ZnZ+bHXjYVWY+t2fxFznWfKF25NJFDP
T0YxAGLPk7aE4Qr4Re4sr40Ug/Y5g7IJ9UMihI+RZ8Anv/nvmB5dd4fcj57j7sup
6xyoB3iBvFrHcjGWHhEh7NfmaCTtRpvJvGN5RymHX9z8Mk+sXyj2NYCHvAYVnYaZ
ec+skFkiD5ALMRkVAuhkgApCdR0wr6DgyyI299MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSsXP46QO+C/C5pkkM8yHn00zSvpjAfBgNVHSMEGDAWgBSkTCZ/p1TNZQnp
+AcnMSO+6WxSXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BFd21mNmRVeldVSjZmZ0hKekVqdnVsc1VsMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvYWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8x
L3JGei1Pa0R2Z3Z3dWFaSkRQTWg1OU5NMHI2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
YWIyNmE1LTY3YjktNDY2Ny04NTViLTQ4YWYwODAwNGI1Zi8xL3BFd21mNmRVeldV
SjZmZ0hKekVqdnVsc1VsMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAgI7OAMEAi1biDANBgkqhkiG9w0B
AQsFAAOCAQEAeS4MItioL13oHiofXvsbECZqTWfpcn9yfVLGmKRfT6wtgaArWhls
AlJ3YoEj6kaqZIpQ9k+NQsw/IBh4oeVy7p1sJBBWEIMKmJEGNfpzhiR67Ei3V68i
uZmwX0fG350Wr0lPn+xmP0kBt7QTIN4BbhCXdb/1G9lUn0GD2ZX8P5zpgQz3ajwb
k1PEcbCPvQtzjQOQa2D7oexoslMrxo+5dUbFQC8YS7dnXlJtdAnmEAcrmqBLQMzy
y+SmtsH792UqeZzpTrYRDJRaDKP47rpH/3EuP+PuCN+LV7gv2DCwSDNrVlDPSFYC
lKDjow38UOUgbgybZYW39fQmCz3hhSgZRg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org