Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/mhFQHeTPyN09ufnL2pkXsJ2I2rA.roa
File: mhFQHeTPyN09ufnL2pkXsJ2I2rA.roa (raw, json)
Hash identifier: VLFxBVYxp7Sjt4e5KS5Y0+TAnS3A1Jl96w3StbYusSM=
Subject key identifier: 9A:11:50:1D:E4:CF:C8:DD:3D:B9:F9:CB:DA:99:17:B0:9D:88:DA:B0
Certificate issuer: /CN=298074ad430476574d86d2d56c54f76be2a86a17
Certificate serial: 01857355EE7527B9F82DE4B3A39AE84441D6
Authority key identifier: 29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/mhFQHeTPyN09ufnL2pkXsJ2I2rA.roa
Signing time: Mon 02 Jan 2023 16:34:49 +0000
ROA not before: Mon 02 Jan 2023 16:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50129
IP address blocks: 2.58.116.0/24 maxlen: 24
2.58.117.0/24 maxlen: 24
2.58.118.0/24 maxlen: 24
2.58.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:ee:75:27:b9:f8:2d:e4:b3:a3:9a:e8:44:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298074ad430476574d86d2d56c54f76be2a86a17
Validity
Not Before: Jan 2 16:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a11501de4cfc8dd3db9f9cbda9917b09d88dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:11:63:97:1d:6d:be:e3:19:4e:3e:6a:d7:
66:72:20:bf:d5:63:9a:54:fb:4f:0c:d5:94:34:86:
f6:0b:84:d7:91:23:69:ad:c2:71:a7:85:18:e1:80:
90:e4:7d:35:ac:47:cd:b3:16:e2:a3:83:55:0a:83:
2e:6d:14:b9:67:3b:80:9c:50:48:2a:91:cc:46:b8:
28:ee:26:7d:c3:85:75:ab:47:f7:56:39:2c:a9:7e:
ae:96:85:ab:0c:67:41:7e:21:6f:9b:5c:75:5b:0b:
4e:ee:42:a4:91:00:b1:12:2d:e3:1a:21:cc:06:03:
d2:49:be:ec:52:fb:93:9e:9a:91:4d:ed:23:7d:d7:
6a:8f:00:23:29:a7:c5:f1:e9:24:29:f0:16:4e:90:
61:da:b8:5d:43:a0:81:e8:d4:58:5c:3a:ac:12:a0:
b3:03:b0:bb:ad:ce:4f:d9:5b:76:79:11:b5:70:24:
df:a8:0d:ce:69:2a:bc:2d:fc:81:91:54:66:11:42:
aa:aa:b3:d2:f8:2b:8b:e2:c8:38:29:80:e9:1d:83:
e4:93:5d:ac:df:53:28:2c:06:6f:a0:5f:59:e4:0d:
ba:9b:8e:1a:8b:c6:2c:04:80:0e:0d:88:b5:f5:0d:
6e:21:af:dd:c1:f9:38:94:36:76:16:aa:b5:50:44:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:11:50:1D:E4:CF:C8:DD:3D:B9:F9:CB:DA:99:17:B0:9D:88:DA:B0
X509v3 Authority Key Identifier:
keyid:29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/mhFQHeTPyN09ufnL2pkXsJ2I2rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.116.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e9:d1:b4:02:91:e9:62:0d:0a:27:0e:b3:e2:3c:23:9e:f9:
fd:f3:af:fb:a9:84:04:73:cd:09:46:e2:27:aa:6d:77:2f:ab:
92:87:7d:3b:c9:25:5f:87:2a:bc:38:79:32:f4:da:be:51:20:
10:74:52:e2:7d:f5:d7:a7:36:eb:25:59:4c:08:dd:4b:9a:27:
b5:94:5e:79:2e:36:b3:0a:86:2c:99:b1:02:0d:7e:b9:96:fd:
77:78:91:8d:54:19:9e:6c:7f:c9:4d:33:47:ae:cc:e1:de:af:
33:e2:9a:a3:10:69:ce:2e:24:d6:15:f0:3e:9f:33:87:a4:3e:
c0:99:4b:2a:f3:33:8a:0b:83:bd:15:dd:58:99:4a:2d:b0:66:
37:b8:af:44:67:80:b2:63:86:32:e7:00:e6:0c:8d:9f:1c:03:
c6:69:27:46:61:57:82:27:3f:b2:a3:f9:ee:07:8f:e5:05:c7:
a0:f0:4d:43:5d:5e:73:04:43:18:0b:6a:72:fc:44:fd:e4:d7:
d6:22:2b:96:84:11:12:fc:25:c2:c0:c1:26:50:5d:b1:de:36:
f6:9e:19:7f:5b:45:75:46:4b:38:01:67:d4:4d:d5:bd:23:f5:
26:3a:34:b5:3d:e4:24:7d:65:43:16:5b:6b:a3:76:2e:ed:a0:
b4:2f:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org