Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/WfHOE0i1C_xw_cYOTYO0tXZ7dFk.roa
File: WfHOE0i1C_xw_cYOTYO0tXZ7dFk.roa (raw, json)
Hash identifier: JnU85b134jqdko94+pFv8TJilYT7zSFs77CvbNPLKrI=
Subject key identifier: 59:F1:CE:13:48:B5:0B:FC:70:FD:C6:0E:4D:83:B4:B5:76:7B:74:59
Certificate issuer: /CN=80695eb990427a585cf03b22d805878709c910d2
Certificate serial: 018570B98547A809940B159DE7699FA22EDE
Authority key identifier: 80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/WfHOE0i1C_xw_cYOTYO0tXZ7dFk.roa
Signing time: Mon 02 Jan 2023 04:24:44 +0000
ROA not before: Mon 02 Jan 2023 04:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2.59.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:85:47:a8:09:94:0b:15:9d:e7:69:9f:a2:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80695eb990427a585cf03b22d805878709c910d2
Validity
Not Before: Jan 2 04:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59f1ce1348b50bfc70fdc60e4d83b4b5767b7459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:f7:d9:f9:fc:a7:bc:b9:e3:4a:5e:ee:3d:
91:94:73:e2:90:8e:68:96:0a:82:a8:83:f5:6f:74:
72:cb:e7:bf:08:f8:e1:5b:1a:82:ae:f4:23:db:28:
d1:63:64:ed:64:95:71:b0:05:fd:f3:e0:7b:4d:58:
b4:7d:54:59:38:72:8f:0e:20:b0:37:ca:67:b5:cd:
8b:41:c8:c9:0d:8b:79:33:bd:63:4c:93:ff:19:f2:
8b:0c:23:3d:de:d8:85:c4:e6:e2:fe:5e:08:86:fe:
bb:48:9c:a8:74:46:8b:86:f4:76:ec:ad:00:36:d5:
45:98:bb:be:77:52:91:d8:c9:07:8e:f3:34:fb:f3:
ec:33:48:c0:0b:9a:77:5f:be:78:b9:ee:a5:fd:9f:
71:02:3d:b8:15:34:52:ff:a7:91:7f:3f:83:16:90:
23:37:94:f5:77:32:3d:65:de:19:d4:ae:32:d2:8f:
41:bb:9d:22:fa:02:66:10:36:55:1a:a0:b6:45:e0:
30:82:c3:1d:62:9d:43:76:7c:91:d9:d8:14:53:6d:
b3:7f:8c:86:e0:98:aa:e0:f9:c9:6f:9c:6b:5e:1d:
06:9f:75:67:a6:d4:cd:94:46:1c:a2:99:16:ae:4f:
66:f1:bc:dd:36:ec:c8:16:bf:cc:7e:b7:7a:85:c4:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F1:CE:13:48:B5:0B:FC:70:FD:C6:0E:4D:83:B4:B5:76:7B:74:59
X509v3 Authority Key Identifier:
keyid:80:69:5E:B9:90:42:7A:58:5C:F0:3B:22:D8:05:87:87:09:C9:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGleuZBCelhc8Dsi2AWHhwnJENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/WfHOE0i1C_xw_cYOTYO0tXZ7dFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/4e4320-c384-4847-b238-ee67a966b092/1/gGleuZBCelhc8Dsi2AWHhwnJENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:5f:76:6d:cb:80:39:18:2e:9c:ee:96:c9:a5:8e:83:cd:90:
24:1f:1d:c2:7a:74:dd:3f:00:28:64:45:10:22:4b:3d:96:f3:
7b:42:ee:ee:3f:fd:71:5e:f7:67:d5:03:29:1e:28:a9:7a:da:
a5:75:11:04:f3:c5:cc:e9:3a:7f:23:5c:29:d6:63:6e:89:36:
f3:b7:dd:15:26:01:d7:65:2e:73:42:a8:5a:64:67:b9:93:be:
cc:1f:90:82:28:42:a3:74:9d:38:c9:85:63:ca:03:2b:45:e1:
4c:9e:49:a8:9b:3f:4f:90:38:38:35:1d:fa:6c:6b:9e:62:ee:
20:0d:26:b2:ff:3b:e2:26:fd:9a:ae:50:6a:00:99:81:62:f0:
9a:26:4a:2c:31:53:51:52:3a:e4:2b:02:49:d3:5d:f3:23:65:
06:6c:25:50:19:6d:6c:fe:1a:5e:a8:1c:76:0b:ab:c5:4f:18:
f0:af:e2:b0:18:f7:52:7b:bb:41:34:b5:98:ed:4a:b4:31:9e:
55:14:8d:a0:a7:14:63:c3:5a:74:64:09:f7:30:81:4d:70:4f:
e6:c7:b2:76:a9:3f:0f:1a:55:ca:11:30:c3:1d:1e:e4:8c:38:
b9:d6:0f:f2:eb:ad:8e:df:90:1a:7a:93:ff:99:2f:e6:de:78:
50:d4:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:16 2025 by rpki-client