Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/sK_wuOxn99Ry3u7FbW6IjscxWfc.roa
File: sK_wuOxn99Ry3u7FbW6IjscxWfc.roa (raw, json)
Hash identifier: QfcW+yKYQHS6+q4AyYDK+Hp6Gg5Ie7zK/E0BPkC9VY4=
Subject key identifier: B0:AF:F0:B8:EC:67:F7:D4:72:DE:EE:C5:6D:6E:88:8E:C7:31:59:F7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0182F9B7A1C692330EDFD8E644488FCA6BCE
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/sK_wuOxn99Ry3u7FbW6IjscxWfc.roa
Signing time: Thu 01 Sep 2022 15:42:17 +0000
ROA not before: Thu 01 Sep 2022 15:42:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 2.59.58.0/24 maxlen: 24
193.38.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:b7:a1:c6:92:33:0e:df:d8:e6:44:48:8f:ca:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 1 15:42:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0aff0b8ec67f7d472deeec56d6e888ec73159f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:bb:30:5b:ee:7c:e9:ca:e2:c1:df:82:8b:
ab:77:3d:a9:50:a8:41:ce:40:b1:c0:a0:fa:b3:ef:
7c:0c:9e:7e:6e:39:30:86:3a:70:8c:48:d4:31:c8:
84:f3:e5:20:2c:35:c6:98:3f:78:61:9e:a2:23:f7:
d3:f7:b0:11:2a:b7:fa:d5:c4:3a:83:e1:17:b5:45:
bd:fa:fe:45:82:04:c3:9f:f3:3f:bd:ad:df:dd:d6:
c4:8e:e4:9d:43:4e:7a:40:cf:0e:b1:6c:48:c3:e1:
f6:77:21:fa:4b:b9:a4:f5:f2:4e:65:d1:de:67:f7:
b5:12:b6:96:59:89:a7:ae:bb:e9:71:7d:66:f3:57:
39:8c:84:51:2c:f2:f5:13:ca:e8:3f:06:93:19:2e:
af:e6:e7:2d:07:e1:bb:b5:20:5d:a0:ba:a2:92:0c:
a5:83:13:43:4e:65:e4:22:fa:90:ef:d4:6b:ed:fa:
d6:22:9f:ce:57:93:24:ca:a8:9a:7f:2c:2c:64:40:
49:7b:cb:1d:6d:fc:64:39:d2:14:5c:39:a4:74:7d:
ef:21:0f:5f:31:b9:2d:59:cf:8a:e0:b3:7e:b1:5b:
bb:0f:46:17:db:ba:9b:86:22:a7:5e:9c:90:63:ec:
b1:24:8f:22:07:27:81:6d:ca:8b:0c:41:42:86:40:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AF:F0:B8:EC:67:F7:D4:72:DE:EE:C5:6D:6E:88:8E:C7:31:59:F7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/sK_wuOxn99Ry3u7FbW6IjscxWfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
193.38.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:0d:9c:8b:a6:f4:84:36:33:4a:62:e7:8e:b9:96:6c:a9:
51:5a:02:03:ec:e7:28:3b:32:d4:a2:89:a3:81:25:98:3c:08:
7d:5c:c1:27:de:7f:cb:fe:27:a9:79:d0:e8:a6:fc:e9:ed:6a:
cf:c6:33:ce:55:27:ca:32:62:40:40:76:de:5f:cf:55:b7:b0:
6f:1d:e8:ee:70:80:e1:e6:12:34:e6:d0:46:df:f3:a8:73:be:
8e:38:ea:a7:2a:2c:3d:13:b5:5f:4b:16:36:1a:a4:b6:c2:5f:
89:55:21:25:48:c7:00:0f:de:8c:33:fe:72:72:fc:d0:e1:03:
92:fa:a9:8a:95:ca:02:89:3d:e3:ea:68:d2:d7:56:51:f6:86:
d2:dd:16:42:05:70:b9:3d:31:f1:db:eb:3d:bb:16:55:8b:42:
63:ad:1f:79:f4:8d:66:43:44:4c:29:0f:e9:10:28:e4:a2:cd:
e2:f5:17:85:31:d0:68:0e:37:c2:5d:a7:6d:2b:21:0b:3f:80:
8d:18:ba:35:a3:21:51:a6:cc:6d:c6:67:37:dc:12:07:76:a7:
11:7b:4f:7d:33:c0:d4:92:a5:4e:d3:fd:cc:89:fb:f1:d2:84:
da:8c:be:26:6e:77:49:2d:de:68:38:9e:aa:f6:6b:0c:64:cd:
12:17:67:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org