Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OA5dlqU_6Am9i7vccdmKAzXIbK0.roa
File: OA5dlqU_6Am9i7vccdmKAzXIbK0.roa (raw, json)
Hash identifier: RIDeTl1gX5p8E2zl2SPU6ZPjPwyN/HSt6a+nBgRWr8M=
Subject key identifier: 38:0E:5D:96:A5:3F:E8:09:BD:8B:BB:DC:71:D9:8A:03:35:C8:6C:AD
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01843947FDEAE1FDE8B0D90B1C8A47CC5971
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OA5dlqU_6Am9i7vccdmKAzXIbK0.roa
Signing time: Wed 02 Nov 2022 16:58:50 +0000
ROA not before: Wed 02 Nov 2022 16:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 2.58.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:47:fd:ea:e1:fd:e8:b0:d9:0b:1c:8a:47:cc:59:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Nov 2 16:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=380e5d96a53fe809bd8bbbdc71d98a0335c86cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:5d:98:01:a0:88:8d:14:aa:92:21:dc:33:
a1:e0:06:a6:55:ce:9f:e4:69:d8:06:af:68:33:dd:
30:8f:d5:f6:47:f8:24:b0:61:f6:82:2c:84:39:86:
8d:5e:71:e7:00:18:a1:f3:a3:74:77:25:70:92:a5:
34:fb:ce:05:fd:69:31:99:55:9f:b3:e9:29:c9:56:
6d:c6:50:a6:60:a0:e2:a9:30:26:e0:33:4e:b6:a4:
e8:73:ea:91:44:15:75:c9:1b:b5:b4:b6:8b:8c:c7:
db:16:99:55:25:d3:a2:6c:c8:e2:0f:f9:f5:2f:64:
69:7a:49:65:ca:66:29:db:f5:48:21:d6:25:ce:6c:
2e:bc:58:33:84:bb:e6:e8:9c:8f:77:af:0c:70:8f:
e6:05:be:d9:4f:6c:11:de:9f:a6:77:06:07:de:e1:
a8:c8:6f:44:a4:8c:2a:d5:a4:13:4d:c0:bb:81:08:
6c:f3:dc:00:5b:8f:bb:12:bf:6d:5e:f9:68:56:0c:
d7:a2:a5:04:79:08:89:4d:fd:69:32:59:11:ae:d7:
ff:ae:3d:9b:38:38:9c:21:be:96:90:c5:0b:a7:86:
70:76:83:fc:f9:1d:a6:d6:ca:1b:d1:50:22:16:d3:
f4:3b:f3:f2:f2:13:ab:ef:75:d2:37:bc:01:27:42:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:5D:96:A5:3F:E8:09:BD:8B:BB:DC:71:D9:8A:03:35:C8:6C:AD
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/OA5dlqU_6Am9i7vccdmKAzXIbK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.86.0/24
Signature Algorithm: sha256WithRSAEncryption
81:15:8d:b7:bc:7a:9b:75:13:b4:47:37:04:01:ec:9d:e4:ac:
ca:f0:64:fa:99:72:7f:8f:1a:2d:e5:9b:f6:d5:fa:d1:db:48:
2e:ca:af:5f:24:78:82:d7:00:63:d1:7d:68:55:39:a4:8b:45:
06:f1:9f:3a:3c:d6:d5:9f:ab:02:9b:1c:a0:d0:77:3c:f0:28:
ae:6d:0a:27:5a:4a:11:05:93:17:46:0e:85:24:3d:a1:0a:99:
b0:35:53:c0:54:ad:e9:01:fc:1c:0d:63:6b:2d:bb:1e:9b:78:
10:50:7d:b6:6b:83:87:16:bd:8a:8b:37:8c:94:81:0b:23:2a:
56:a3:a2:52:7a:a7:78:16:6a:e9:57:7d:c5:73:36:cb:c7:79:
0d:84:f8:45:49:28:f1:b1:33:3e:f0:7d:25:c1:07:5c:f5:cd:
ec:bc:ad:0f:7e:9a:da:5e:c6:4b:6f:c1:d7:44:95:c6:31:c4:
49:12:f8:52:3f:d0:4e:1d:cf:99:ab:2c:70:7d:78:c0:00:cf:
60:34:d0:85:19:c4:8c:ed:0a:bd:ea:60:1d:27:15:f2:59:4e:
cf:cf:a4:b4:47:d9:e4:a1:ec:ba:9f:86:b0:d9:d2:98:28:14:
55:2a:ca:8c:62:63:78:1d:ef:04:b2:16:32:d5:64:df:01:a5:
4a:b9:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org