Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/J0qZU-I64sgDiYzBk_1ZgPK_VWs.roa
File: J0qZU-I64sgDiYzBk_1ZgPK_VWs.roa (raw, json)
Hash identifier: 8vabCNGl2c4pg1jOCTAgRGOYlaBKmbv+Waway/TAVnA=
Subject key identifier: 27:4A:99:53:E2:3A:E2:C8:03:89:8C:C1:93:FD:59:80:F2:BF:55:6B
Certificate issuer: /CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
Certificate serial: 01856E8B04BF7AE933EFBEDD59128FDEB24D
Authority key identifier: 36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/J0qZU-I64sgDiYzBk_1ZgPK_VWs.roa
Signing time: Sun 01 Jan 2023 18:14:42 +0000
ROA not before: Sun 01 Jan 2023 18:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210030
IP address blocks: 84.54.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:04:bf:7a:e9:33:ef:be:dd:59:12:8f:de:b2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
Validity
Not Before: Jan 1 18:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=274a9953e23ae2c803898cc193fd5980f2bf556b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:c8:9c:d7:08:d5:b6:cd:69:eb:f6:67:9c:
36:b6:5c:f7:b8:61:93:84:aa:24:6b:b4:11:6f:51:
5c:0c:e3:d6:b4:8c:c3:b5:78:f0:43:48:a9:e3:eb:
fb:93:48:96:c7:f3:94:81:97:7a:01:b4:ac:b6:b4:
d1:ba:b0:92:d8:73:ad:be:46:b9:61:c0:2f:90:47:
d6:e5:1f:2d:7e:4b:ee:0d:76:9f:27:59:35:36:67:
5a:da:f8:b4:fd:d3:f3:7c:84:8d:ea:7c:c8:c4:a5:
fa:22:84:86:dc:ef:ee:35:01:c1:e4:5f:20:ae:cd:
b1:d9:36:e9:48:78:dc:42:29:b3:94:d9:7b:40:d4:
69:ed:7e:f6:7a:6e:e8:2c:87:80:95:84:d9:13:5d:
26:c0:19:6b:55:ea:ee:32:96:ce:1f:a1:ca:5f:3b:
9d:fc:0c:5e:7c:ee:fe:b2:87:5d:c6:6b:d4:0e:82:
b4:51:3f:1e:91:24:e8:9e:b2:4a:55:60:1c:0c:5d:
48:02:d0:a7:57:64:d4:09:59:74:a0:ff:1a:92:b3:
34:93:0f:c1:bd:26:b5:67:42:03:90:46:1e:03:29:
80:ac:54:0c:39:ee:18:dc:09:94:2a:22:f2:5f:74:
24:4c:cb:42:eb:ea:cc:6a:17:df:25:a2:af:29:f6:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:99:53:E2:3A:E2:C8:03:89:8C:C1:93:FD:59:80:F2:BF:55:6B
X509v3 Authority Key Identifier:
keyid:36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/J0qZU-I64sgDiYzBk_1ZgPK_VWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.32.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7b:ae:c6:ea:92:d2:67:be:87:0f:e0:e1:0a:79:cb:3b:f0:
f3:c6:b4:f4:ad:b7:b5:44:02:62:74:62:5f:c2:ee:a1:63:c0:
4b:4a:58:cd:23:1a:6d:21:8e:06:7c:57:25:64:74:e7:46:8e:
3a:44:49:08:e2:32:9b:e2:39:40:fe:ed:ce:ea:15:cb:1c:43:
b4:01:b4:0a:62:23:8b:0b:30:cd:98:b4:20:e9:d2:07:95:fe:
78:7e:f7:d2:c7:3a:93:d1:ad:ac:3c:bc:74:35:c5:3b:ae:66:
b6:55:51:be:41:b8:42:d7:63:1c:44:8d:4a:a4:9a:7c:3f:d6:
69:f6:f8:d5:ff:66:06:f5:2d:05:cf:66:7e:0d:a8:63:ad:90:
fc:48:18:a3:0d:e4:00:43:a7:7f:73:18:d3:23:e5:d7:f9:60:
22:3d:56:2e:88:b0:1d:48:b5:c1:1b:a0:f6:d2:22:9c:76:31:
d4:cd:54:44:48:b2:b7:60:34:71:e3:76:43:65:3f:47:51:d8:
5a:87:d4:3e:40:bf:b7:2a:54:84:5a:14:5a:7a:90:39:fa:f1:
64:a1:ea:03:bd:2d:73:84:67:5a:8a:98:83:a8:b6:b3:98:30:
9f:ba:f8:4b:bf:15:bf:e8:27:e1:cb:5c:cf:4e:39:1f:50:eb:
4d:54:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:25 2024 by rpki-client on console-ams.rpki-client.org