Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/srMAjDezGjqCyeiegumFpReGt1I.roa
File: srMAjDezGjqCyeiegumFpReGt1I.roa (raw, json)
Hash identifier: uk1rjwzJ4vyohxpvy6PuBa+/9fi51d9tMGBAHzwAprk=
Subject key identifier: B2:B3:00:8C:37:B3:1A:3A:82:C9:E8:9E:82:E9:85:A5:17:86:B7:52
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018357063FF507F6EE569D15DAE0B99DB8F7
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/srMAjDezGjqCyeiegumFpReGt1I.roa
Signing time: Mon 19 Sep 2022 18:32:50 +0000
ROA not before: Mon 19 Sep 2022 18:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 2.59.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:57:06:3f:f5:07:f6:ee:56:9d:15:da:e0:b9:9d:b8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 19 18:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2b3008c37b31a3a82c9e89e82e985a51786b752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:a2:fa:12:cb:c4:0d:27:81:98:27:5d:95:
6c:65:9e:79:20:49:4a:d9:08:ce:43:03:f9:fc:e8:
21:73:7a:66:89:34:62:25:97:0a:24:95:fa:1a:b2:
46:f7:e0:f6:6f:32:90:5a:fc:c4:9a:70:00:17:61:
96:25:04:2b:cb:33:61:55:49:34:79:d0:35:03:32:
74:d0:d3:ea:f1:f9:52:fe:21:0a:e8:b9:15:54:f0:
b6:19:ca:c9:96:c5:48:83:fb:8f:e6:48:50:cd:13:
de:45:09:40:b0:14:7b:37:76:a1:75:19:36:23:f2:
82:85:19:29:4e:85:a1:d8:99:fb:b9:d2:87:4e:99:
78:3d:e8:ec:5f:56:9d:50:1e:7d:84:69:46:f4:89:
22:de:1e:7f:f2:44:22:a2:cc:9f:dd:6f:c7:d9:cb:
52:04:a6:99:9f:2f:48:3c:80:98:26:64:84:fd:d6:
ae:32:66:e8:a0:c3:ce:f2:9a:9b:57:76:4a:b3:43:
f9:fc:e8:8a:5a:a1:57:45:0f:d5:c4:e5:2d:cb:aa:
b2:92:00:95:91:a9:60:33:97:8d:e7:5a:f5:9f:21:
89:88:b8:27:f5:87:d7:62:70:16:29:12:97:e0:f6:
82:7d:d2:05:b1:36:fc:e2:7c:3a:87:70:fb:23:5d:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:00:8C:37:B3:1A:3A:82:C9:E8:9E:82:E9:85:A5:17:86:B7:52
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/srMAjDezGjqCyeiegumFpReGt1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.58.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ba:4c:88:fb:b7:48:52:4b:d9:9d:6f:52:ea:0b:fe:25:9c:
36:e1:36:c4:64:1a:da:86:e3:19:f0:0e:84:c3:97:24:ac:93:
a3:89:89:c8:af:04:e3:e5:77:76:2c:f4:dc:d1:a3:6c:8d:62:
c8:8a:e0:0f:95:17:b3:ba:6f:07:0d:b1:5f:d9:34:cc:c9:60:
5c:2a:f8:71:f0:2b:88:b7:73:ff:e3:a2:54:dc:bd:d0:50:88:
59:d7:8b:2c:1a:77:c3:06:52:cd:b3:15:4b:cc:f5:64:12:02:
94:19:09:d6:a2:84:a2:90:42:e4:68:b4:9c:2f:a2:79:ff:b3:
ba:8e:2d:bc:25:5e:93:c5:8d:0a:40:2a:81:bd:10:ef:6c:40:
10:8e:3b:3e:54:f0:fa:dc:d9:38:92:c3:6d:ea:23:46:0f:2b:
f3:9b:b3:69:8a:5c:56:8a:fc:dc:cb:ee:aa:8b:38:5e:99:03:
0a:1f:c9:a4:23:b2:9c:f4:06:9d:49:83:70:f9:dc:59:cf:b6:
e9:40:87:29:12:ce:8c:58:a0:98:ed:b5:71:ee:9a:e2:ee:19:
11:80:86:3e:fc:f1:e0:26:2d:45:c9:71:97:a8:7b:29:40:68:
f5:5d:af:0d:ec:1e:7f:64:8b:b6:3f:0b:3c:ab:4a:c7:10:2d:
99:5c:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org