Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/bYSq2VEkrW8aoMKoixi0NWv8o64.roa
File: bYSq2VEkrW8aoMKoixi0NWv8o64.roa (raw, json)
Hash identifier: 4QzOIdkjBZINc7pw88ok5TY+LLnGeGDA5pPrJbvSoUk=
Subject key identifier: 6D:84:AA:D9:51:24:AD:6F:1A:A0:C2:A8:8B:18:B4:35:6B:FC:A3:AE
Certificate issuer: /CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
Certificate serial: 0183EF1850DC7188770B8C88C30006842A5C
Authority key identifier: 36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/bYSq2VEkrW8aoMKoixi0NWv8o64.roa
Signing time: Wed 19 Oct 2022 07:14:51 +0000
ROA not before: Wed 19 Oct 2022 07:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 84.54.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:18:50:dc:71:88:77:0b:8c:88:c3:00:06:84:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
Validity
Not Before: Oct 19 07:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d84aad95124ad6f1aa0c2a88b18b4356bfca3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:dd:81:90:2f:9d:61:58:72:f3:71:50:f0:
74:46:3e:01:41:ce:1f:97:13:b2:2b:35:98:db:2e:
bc:a0:a1:49:50:93:1b:89:4c:2c:a5:35:81:83:fa:
f9:f6:c6:1c:21:b1:6a:96:4a:cb:d5:9b:61:db:60:
0f:3a:33:33:93:f2:21:41:bc:6e:5e:b2:68:c6:99:
60:a4:66:dd:90:66:80:74:e2:23:13:78:c6:38:7e:
5c:27:dd:cc:14:56:36:e4:11:bd:64:7d:f4:87:38:
89:7c:73:d3:0f:2a:bb:ca:15:cc:f8:61:a8:43:66:
17:fc:13:e7:b2:50:d5:51:47:24:9c:76:11:99:2f:
86:b5:cd:e6:1c:f7:ef:9e:82:9a:a7:8c:f4:2e:9f:
60:ed:f6:37:27:c7:50:3f:6a:87:ac:21:b9:14:67:
6f:4f:53:4b:ec:64:be:5f:7e:c5:77:97:3b:ed:0e:
d2:7c:25:c4:d4:7f:59:a6:32:b5:47:55:f2:6b:eb:
b2:e3:b6:16:0f:29:c4:75:ae:3c:a6:96:9b:ad:a7:
ab:c0:2d:71:e3:43:bf:c5:a0:d7:9b:d9:e8:3f:aa:
3e:3d:fa:56:d3:95:7f:e8:72:da:b9:c0:a2:53:af:
7e:88:b8:5f:3f:19:ba:aa:91:69:06:ee:c2:35:99:
ff:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:AA:D9:51:24:AD:6F:1A:A0:C2:A8:8B:18:B4:35:6B:FC:A3:AE
X509v3 Authority Key Identifier:
keyid:36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/bYSq2VEkrW8aoMKoixi0NWv8o64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.32.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0b:4c:9b:29:70:9c:96:6e:8f:9c:5b:7e:07:8d:0f:71:ae:
90:02:b4:5f:16:52:b3:ff:a7:d3:ec:9f:65:72:9f:4d:f4:78:
86:26:f0:04:83:61:1a:c9:65:35:40:48:43:ca:d1:e4:44:57:
42:0a:4c:c8:02:c7:6a:e1:3f:ce:4d:42:cb:59:7e:c8:15:9a:
f9:f1:06:a7:62:7a:d8:07:5b:d2:dd:4d:3b:7b:fc:72:19:33:
2c:d8:20:f4:fd:43:3b:40:58:eb:c9:a1:51:c5:db:c7:e9:97:
a6:46:2b:ca:14:07:60:eb:24:4b:7c:59:d2:0a:37:68:1b:c2:
6b:4b:35:a3:26:2c:fb:ff:69:d8:78:d7:2d:02:22:26:77:fd:
d5:ec:8b:f0:d5:e7:eb:db:b4:75:45:3a:a5:eb:16:11:d2:f6:
09:44:1d:15:42:8f:76:cc:54:d3:60:a6:55:c2:d0:cd:ac:ea:
1b:ed:7c:e2:58:bc:6e:6a:9f:a3:ea:f7:b3:3d:d0:55:f0:4d:
68:4c:1c:9a:29:9c:8c:67:52:d5:21:22:43:78:15:cd:a4:94:
47:ed:ae:bb:a9:85:8a:73:9e:85:87:60:a9:ee:39:3e:08:f7:
bf:ee:6c:63:c8:13:40:e8:2f:54:15:31:ca:7a:ea:79:df:bc:
ab:50:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:54 2025 by rpki-client