Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa
File: RmPb4cqneBuzJKZh6NfuXqIeWdk.roa (raw, json)
Hash identifier: kgSOS8AEWBOx2C98f4LKvW9ud4TSZ8mN1USmdxaDOe8=
Subject key identifier: 46:63:DB:E1:CA:A7:78:1B:B3:24:A6:61:E8:D7:EE:5E:A2:1E:59:D9
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 0186C1FE98F0B21F17B9EF1B2EBD25F1B289
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa
Signing time: Wed 08 Mar 2023 16:12:13 +0000
ROA not before: Wed 08 Mar 2023 16:12:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 2.58.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:fe:98:f0:b2:1f:17:b9:ef:1b:2e:bd:25:f1:b2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Mar 8 16:12:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4663dbe1caa7781bb324a661e8d7ee5ea21e59d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:d1:5f:cb:b9:20:d1:35:21:e1:0c:35:08:
a4:d2:a9:32:c3:a3:fc:8f:cc:6a:4a:e0:6e:fa:13:
a5:1b:76:ba:0a:56:95:5a:5d:62:4b:0b:b9:c0:cf:
ef:0a:42:00:c8:57:a9:6f:c8:39:25:f8:28:86:77:
34:ae:3b:07:ac:da:66:a6:c1:86:f0:17:2c:48:42:
2d:73:0c:d0:00:17:2a:b5:c0:fe:81:79:3f:73:15:
a3:45:2a:b9:d6:db:e4:9b:d1:d3:d7:5d:88:55:37:
de:da:e1:e2:ba:4f:a7:24:6b:1b:3d:fe:15:6f:d2:
0f:c2:eb:94:c8:d0:b1:89:c0:f1:8a:d8:ec:eb:e1:
89:99:21:a0:d1:d2:85:8b:6e:3e:3f:da:66:55:16:
1d:b8:63:36:79:25:5b:ad:d1:0b:a2:46:5a:a4:0f:
a0:0b:fc:33:21:98:9e:11:a3:a3:20:39:b5:22:28:
78:0d:99:ff:cc:66:12:f9:f2:8d:e2:f7:33:0c:60:
be:5c:82:c1:6b:b6:88:1e:a5:f0:6e:ac:53:e6:30:
3f:11:7f:75:4c:9e:de:90:a7:df:cb:8c:8c:96:a9:
49:31:60:75:b3:94:98:7a:f6:86:c2:4e:a8:d5:bb:
8e:93:fc:e3:c5:73:b5:5a:db:b2:74:4f:7e:ff:e5:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:DB:E1:CA:A7:78:1B:B3:24:A6:61:E8:D7:EE:5E:A2:1E:59:D9
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/RmPb4cqneBuzJKZh6NfuXqIeWdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b8:e0:67:f1:7c:70:79:f3:3d:e3:db:db:8c:0c:ff:05:61:
ff:db:c4:e1:57:a7:36:d7:d6:bc:02:fb:5d:a8:d5:0f:28:fb:
14:9a:2b:4e:91:cb:26:2e:c2:b7:1c:0d:5b:7c:57:2a:00:4d:
7a:0d:26:41:a5:d4:1f:1e:d3:1a:f3:7a:59:e0:07:f2:13:62:
47:05:25:37:1f:cf:63:bc:f3:81:62:10:5a:d1:dd:12:33:67:
09:21:74:64:56:7d:30:73:28:21:cb:61:c1:22:b5:7a:54:d2:
8e:4a:86:16:9f:61:4a:d6:3f:85:3e:94:58:34:9f:a3:b7:0b:
d5:8a:86:36:58:ff:25:d7:30:34:88:de:fd:ea:ab:bf:88:d4:
c5:f8:70:a5:c8:d3:1d:d2:67:6b:52:b7:59:36:6e:66:86:6c:
ae:37:f1:c8:da:e1:77:7b:3f:62:27:01:a4:ac:68:21:60:57:
a5:70:94:bc:a3:7f:9d:7a:4f:78:53:6f:28:46:71:f8:34:10:
17:95:30:32:8f:d1:9a:1e:88:af:e4:c8:82:b0:58:74:55:11:
3c:19:cf:9a:75:87:45:24:a2:b5:94:f3:26:f4:65:30:c9:c4:
4b:50:e6:87:39:21:a9:69:bd:58:46:82:83:17:10:ad:b6:3d:
4b:82:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:32 2025 by rpki-client