Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/ciHO4lGr0LV4cRSVP_Bs8v4oyns.roa
File: ciHO4lGr0LV4cRSVP_Bs8v4oyns.roa (raw, json)
Hash identifier: MvNk3Rwce+AluzpCySYJGcxGXrK58sctVBspdou5HFY=
Subject key identifier: 72:21:CE:E2:51:AB:D0:B5:78:71:14:95:3F:F0:6C:F2:FE:28:CA:7B
Certificate issuer: /CN=d9a96d76e9b45abb245788a9da2b82c5758b3e10
Certificate serial: 0185718338CA1068647688BEDC705373A99B
Authority key identifier: D9:A9:6D:76:E9:B4:5A:BB:24:57:88:A9:DA:2B:82:C5:75:8B:3E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2altdum0WrskV4ip2iuCxXWLPhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/ciHO4lGr0LV4cRSVP_Bs8v4oyns.roa
Signing time: Mon 02 Jan 2023 08:05:03 +0000
ROA not before: Mon 02 Jan 2023 08:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207821
IP address blocks: 2.59.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:38:ca:10:68:64:76:88:be:dc:70:53:73:a9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a96d76e9b45abb245788a9da2b82c5758b3e10
Validity
Not Before: Jan 2 08:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7221cee251abd0b5787114953ff06cf2fe28ca7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:b7:54:7f:6d:d5:4c:98:25:6a:66:f8:06:
92:fc:67:96:73:2f:e6:87:88:ab:74:24:cf:15:0d:
37:a0:63:71:e5:28:b5:71:0b:ef:12:c7:c3:03:5f:
b4:5b:ad:58:86:b7:13:44:71:5e:16:27:f8:0e:c4:
14:a7:83:db:fb:74:37:ed:88:19:97:0d:d4:0f:82:
7e:8f:49:e4:06:ac:94:03:34:5e:d4:67:7b:b2:87:
9e:e1:8c:9b:5f:56:2a:c3:49:15:22:22:9a:8b:a1:
32:22:e1:e7:cb:80:55:1f:57:5a:1a:70:dc:ba:77:
bd:d9:b2:26:6f:71:db:41:3b:40:4e:e6:48:d7:95:
9d:e4:9c:9d:2d:0b:b2:23:8a:c7:85:a2:36:d5:10:
fb:9e:f6:8a:1c:c2:cb:5c:c5:f0:48:77:1e:c7:b5:
ef:96:8a:93:ad:20:5d:b3:0c:46:33:0e:8f:d7:2d:
28:ff:7f:93:52:75:6e:f1:91:4d:cc:a0:e3:0e:bf:
3a:68:73:ae:cc:30:93:e2:43:4e:59:21:28:2d:3d:
53:80:a9:94:01:72:b6:61:32:df:5f:20:09:64:1b:
e2:08:3c:2f:e4:34:a3:e3:27:35:9b:da:59:83:9c:
af:9b:41:e6:46:15:87:5e:42:6d:cd:53:5c:ab:d6:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:CE:E2:51:AB:D0:B5:78:71:14:95:3F:F0:6C:F2:FE:28:CA:7B
X509v3 Authority Key Identifier:
keyid:D9:A9:6D:76:E9:B4:5A:BB:24:57:88:A9:DA:2B:82:C5:75:8B:3E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2altdum0WrskV4ip2iuCxXWLPhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/ciHO4lGr0LV4cRSVP_Bs8v4oyns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ce37d-c56c-43aa-98bd-fe58fc022a22/1/2altdum0WrskV4ip2iuCxXWLPhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.28.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d8:6a:54:0c:d2:a0:a2:1b:ad:4b:3f:cf:e8:16:38:c6:58:
df:b0:de:96:9a:9d:2b:e0:59:14:67:22:be:3c:d8:43:91:d5:
7f:9c:82:00:91:1b:68:ae:71:14:e2:3d:ec:2d:2b:25:07:e2:
b4:af:b6:6a:d8:f2:91:f8:77:b6:01:23:a2:f9:eb:1e:b9:d0:
fd:76:47:23:e6:bc:cc:a0:77:d8:6e:3a:6f:a1:1e:e0:82:37:
43:3e:d4:81:63:4c:dc:5a:3b:3e:85:72:23:f4:79:52:7d:ba:
42:cb:99:79:11:71:46:0b:f5:55:6a:ba:a2:f0:7f:29:82:f9:
91:ca:c9:0c:a9:1c:c4:bb:dc:7b:9d:63:2f:c4:98:b6:ca:6a:
af:44:76:63:66:61:95:c0:41:7c:e5:68:4e:c4:b6:9f:7f:2d:
bf:4c:74:ac:d5:2b:a9:6f:71:6b:18:01:15:58:7c:6a:74:b0:
9e:0a:88:83:24:74:69:4b:73:e9:5b:2f:f4:89:77:8f:b0:9d:
21:6d:3e:4d:68:f9:a6:d2:f0:ac:16:86:44:51:60:17:17:3d:
00:a2:c7:5f:66:f3:cd:e3:41:4f:c5:e4:e7:c6:78:cf:5f:7f:
10:1b:35:4e:4d:81:96:af:0f:72:c6:cd:43:2f:2c:df:01:8c:
51:57:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net