Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa
File: D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa (raw, json)
Hash identifier: IXS+DO5EWBVU/nTs1xcB2/dikj2ArzVLa22YB4JxJl8=
Subject key identifier: 0F:9F:B2:4E:06:16:A2:93:23:40:6B:10:4D:9B:3D:66:07:19:FC:5B
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857EDD794388521DC3EDF77AECE9D4D5CE
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa
Signing time: Wed 04 Jan 2023 22:18:41 +0000
ROA not before: Wed 04 Jan 2023 22:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 2.58.87.0/24 maxlen: 24
2.58.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:dd:79:43:88:52:1d:c3:ed:f7:7a:ec:e9:d4:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 4 22:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9fb24e0616a29323406b104d9b3d660719fc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:56:4d:94:01:c5:91:63:b6:9a:6b:52:5a:
3f:b6:2d:4f:9f:6c:e9:ab:d8:61:f3:23:fe:d6:3e:
6e:8b:a2:91:4a:f2:76:a7:b4:d8:de:46:b9:77:9c:
ed:0b:3a:9f:ca:39:16:87:92:9a:a7:bb:35:a2:b4:
bf:69:e1:54:5f:39:24:f0:c0:c8:40:22:86:22:96:
ca:76:81:4a:88:92:e6:98:72:c7:01:c2:5c:b6:f1:
10:e3:37:5d:5e:15:e4:54:4f:50:db:43:4d:68:57:
fa:40:15:03:03:75:98:53:36:6f:f3:84:7a:5b:2e:
07:f7:db:75:51:d8:d8:31:4d:0d:74:3d:0e:97:25:
d5:19:ec:db:27:29:4b:dd:7a:cc:46:f7:46:dc:b2:
fe:45:0e:e8:98:08:6f:c1:73:92:a7:ce:cc:2a:dc:
57:cf:b6:bc:c3:88:d8:79:1f:29:29:0b:90:6a:f6:
99:84:e7:32:bf:59:b6:e0:d4:b3:22:f0:79:c3:cc:
27:79:77:40:9a:50:8d:e2:fd:ce:d2:4b:ab:c9:c4:
ad:5d:93:b6:7b:f2:67:f8:eb:53:82:f9:84:32:c3:
c9:03:14:6b:9b:02:8b:14:31:8e:50:33:c8:b0:7e:
ed:0d:9f:d4:b8:00:30:8b:0b:5d:11:c6:4b:76:dd:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9F:B2:4E:06:16:A2:93:23:40:6B:10:4D:9B:3D:66:07:19:FC:5B
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/D5-yTgYWopMjQGsQTZs9ZgcZ_Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.86.0/23
Signature Algorithm: sha256WithRSAEncryption
58:68:14:9e:52:f5:00:f8:e9:55:8b:0a:4d:fb:85:aa:19:bd:
ef:5e:61:2f:90:50:b7:c8:58:85:d0:a2:ec:a1:fe:fb:26:6f:
9a:f5:a5:a0:7c:63:11:d1:47:b9:7b:6c:0e:01:13:75:44:f2:
3e:8f:68:7e:05:5e:27:1a:0b:70:3f:d3:cd:3d:65:ab:2f:3c:
41:de:2f:96:d0:8d:1b:a2:5c:ee:47:93:bb:21:2d:89:0d:4b:
64:8e:55:45:82:d7:6d:04:c1:06:6c:13:7c:95:d0:04:5f:14:
fb:40:85:7f:e1:94:b9:1e:bb:fe:ee:18:b0:b4:c7:c4:0f:57:
8a:2c:24:1f:91:64:35:ff:6d:7e:1f:33:84:aa:8d:1b:e6:85:
ce:41:82:70:21:8e:6a:ea:11:fd:66:73:59:f9:37:32:e6:26:
de:d2:ad:50:09:02:52:b6:ba:6d:a5:12:7e:4d:c3:35:43:fb:
76:23:07:45:5f:35:c7:f2:34:61:e2:dc:33:4b:ac:f8:aa:07:
96:57:68:be:72:5d:42:71:62:66:4b:49:04:0a:f5:19:89:c9:
dd:aa:3b:c3:ce:5d:f5:23:1e:76:2f:aa:43:c3:f5:05:94:bc:
c9:5d:6e:80:81:1f:a0:47:fb:44:2b:e3:93:94:ce:75:59:3b:
91:c7:47:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org