Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/wfByYTk-miEgj-C9pma2zGQ5apU.roa
File: wfByYTk-miEgj-C9pma2zGQ5apU.roa (raw, json)
Hash identifier: D66c7e9EMxrZNdTElmr4EXoRX4b4X5vqCYgIXE+J5Hg=
Subject key identifier: C1:F0:72:61:39:3E:9A:21:20:8F:E0:BD:A6:66:B6:CC:64:39:6A:95
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 018807BF2D1DA0ECD5BEE3B9A3A7C0092BCA
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/wfByYTk-miEgj-C9pma2zGQ5apU.roa
Signing time: Wed 10 May 2023 22:19:09 +0000
ROA not before: Wed 10 May 2023 22:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 2.58.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:bf:2d:1d:a0:ec:d5:be:e3:b9:a3:a7:c0:09:2b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: May 10 22:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f07261393e9a21208fe0bda666b6cc64396a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:85:1a:cf:b4:6b:79:1d:de:2f:5c:92:79:
ae:a3:17:b8:dd:53:d2:f9:af:29:5e:04:95:6e:14:
a3:69:89:01:1c:1e:8a:6d:93:bc:6b:14:40:3d:4d:
b7:63:cc:d5:85:59:7c:0e:f6:7f:32:49:04:52:22:
cf:a7:ed:9c:f5:10:b2:df:a6:62:15:c4:f0:8e:a1:
3d:9c:8d:70:c7:32:ce:c8:3e:66:09:71:ce:48:25:
38:c2:be:d4:81:85:61:b2:76:31:db:3e:db:92:b5:
1a:c3:e9:80:30:c0:32:ad:1b:18:bf:21:db:2a:a6:
36:04:b9:db:90:43:36:d0:1e:74:38:91:bf:cf:44:
bb:54:41:4e:f6:c5:a8:ee:b2:3d:58:79:0a:41:66:
47:c0:e5:99:6a:41:07:a3:c9:a5:f9:96:6c:41:1b:
52:25:da:e6:b4:0b:c8:27:c9:bb:ee:b2:03:fc:9d:
1a:8c:f2:50:31:8d:f1:80:f6:cd:b4:54:2b:60:b5:
c4:fc:16:63:a8:09:85:4c:03:76:dc:15:9b:ff:56:
67:8a:e6:b7:1e:8c:f2:7a:96:c4:ee:75:fc:bb:8f:
16:4e:cf:f8:c7:01:e3:35:88:24:7b:7d:6d:21:84:
ba:d5:63:cd:d4:d1:0c:b8:fd:19:98:a0:d8:fa:5a:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:72:61:39:3E:9A:21:20:8F:E0:BD:A6:66:B6:CC:64:39:6A:95
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/wfByYTk-miEgj-C9pma2zGQ5apU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/23
Signature Algorithm: sha256WithRSAEncryption
10:71:42:80:eb:44:f6:c5:3d:6b:06:4b:c7:9a:84:d6:3b:1e:
d0:71:ef:aa:c8:79:b2:49:c6:e7:8e:ef:b0:c9:26:fc:ff:60:
0b:8c:bc:4a:f2:bb:8c:57:f9:04:9e:d7:90:25:d5:b8:d8:ef:
f0:90:8c:47:cb:0e:0d:21:49:30:fb:cf:f7:0b:63:81:67:ad:
cc:67:0b:a9:cd:1f:93:e5:25:1d:bd:7f:f0:4c:94:a8:e2:c6:
af:ed:0e:e1:95:f5:79:00:6a:05:5a:cb:b0:5a:70:49:69:2f:
04:ae:07:55:f7:34:2c:76:36:e4:80:81:18:62:57:a2:e6:7d:
73:8c:a6:13:83:d4:a0:20:8a:6e:29:ca:2c:cd:d6:e8:37:ed:
b2:5d:74:40:91:af:9a:e9:4b:5d:07:3e:9f:71:49:6a:9e:b1:
2f:3b:e9:39:39:ec:58:6f:35:51:40:3f:f2:ea:7a:95:bd:4b:
5c:4c:fc:58:ff:79:6d:3d:f7:5d:8c:8f:38:62:da:c8:0d:92:
54:0e:bd:bd:2d:c2:77:1d:ca:32:85:eb:41:20:4f:b0:c1:65:
15:cf:d7:67:a4:f1:40:56:b0:dc:a8:ba:3e:50:73:9c:c7:17:
2b:22:b9:8a:0d:2c:96:2a:f6:f4:2d:6b:4c:e7:eb:4f:32:30:
a1:7d:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:37 2025 by rpki-client