Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/PpL1FGmv1FFazX3EJ-mnqPhz8L4.roa
File: PpL1FGmv1FFazX3EJ-mnqPhz8L4.roa (raw, json)
Hash identifier: NLY7ZPc9ACAEYNIDatCPHKyaqEAJKw5NZ2Dx/9iX6oI=
Subject key identifier: 3E:92:F5:14:69:AF:D4:51:5A:CD:7D:C4:27:E9:A7:A8:F8:73:F0:BE
Certificate issuer: /CN=23e391f062bd8cd79eb845fa66e80ab42914a9af
Certificate serial: 01829704600D380DA10070F7B7204237B782
Authority key identifier: 23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/PpL1FGmv1FFazX3EJ-mnqPhz8L4.roa
Signing time: Sat 13 Aug 2022 11:43:42 +0000
ROA not before: Sat 13 Aug 2022 11:43:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 84.54.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:04:60:0d:38:0d:a1:00:70:f7:b7:20:42:37:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e391f062bd8cd79eb845fa66e80ab42914a9af
Validity
Not Before: Aug 13 11:43:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e92f51469afd4515acd7dc427e9a7a8f873f0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3e:b3:6d:64:1d:f9:4a:92:5c:43:d8:fa:8a:
2f:ec:b0:4e:80:7f:72:90:b9:52:0d:da:5c:2e:be:
dd:32:a1:cf:d5:09:e2:0a:eb:2a:c5:07:6c:43:e9:
46:cb:8c:03:57:8d:2e:bf:18:c7:0c:8b:04:ab:cb:
d6:9d:e2:e2:2b:80:20:52:7e:7b:0f:59:fd:d2:bd:
fe:f0:97:4e:e0:9b:ab:bf:59:74:89:e8:c0:89:fc:
4f:26:dd:04:98:17:8c:e9:62:37:12:8e:8b:8b:da:
20:d2:e5:0c:d4:5b:a1:64:bf:5f:cc:91:4c:ac:dd:
3a:b7:aa:7b:e7:14:fd:44:60:f3:45:a2:ac:a1:65:
6b:d6:c1:78:9e:bc:e2:5e:2d:7d:25:cf:82:83:3e:
ed:33:71:88:c6:63:ce:fb:32:88:5c:a9:5d:7a:08:
de:59:e7:7e:01:da:fe:ea:55:5c:f7:ba:78:d6:6b:
dc:a8:83:ee:db:64:93:58:de:0d:e1:dc:8e:8f:5a:
35:53:09:c2:7a:5e:dc:30:c9:f1:87:ee:0f:eb:62:
92:04:41:3a:35:41:da:60:91:37:e3:f3:fa:a0:ee:
4a:2f:64:49:d8:a1:a9:58:08:10:51:9c:af:d7:0c:
94:34:29:d0:e4:34:9d:29:41:8b:b5:0a:11:67:2f:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:F5:14:69:AF:D4:51:5A:CD:7D:C4:27:E9:A7:A8:F8:73:F0:BE
X509v3 Authority Key Identifier:
keyid:23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/PpL1FGmv1FFazX3EJ-mnqPhz8L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/22
Signature Algorithm: sha256WithRSAEncryption
52:49:43:e6:4e:aa:ff:cd:39:27:ec:b9:85:f8:1b:15:c3:57:
d7:93:fd:4b:b9:53:f4:91:a8:4c:7f:ca:1a:c0:fd:71:83:50:
4f:bc:cd:28:a3:ce:88:6e:51:3d:80:e8:a1:0c:85:92:7b:96:
76:9d:a8:d0:fb:1e:5e:42:e2:08:95:4a:f9:76:2b:6e:08:f2:
b3:e4:77:30:03:79:22:6d:89:ac:cf:4f:40:04:1c:5e:21:7e:
ef:e4:e6:2e:a8:f5:ec:c0:c4:a0:ca:16:ec:f9:9d:53:60:aa:
77:fb:52:39:c7:87:6a:65:a5:5d:25:83:f2:cd:e6:d7:64:79:
a7:c3:04:35:33:0c:3d:b6:08:dd:d1:2f:7e:97:64:bf:00:73:
a0:56:57:1b:22:18:d4:5a:88:5b:07:9a:63:98:00:7b:da:92:
02:fe:ad:40:70:3a:80:62:0c:f3:e3:92:38:70:bd:82:16:33:
f3:dd:ad:e1:ca:9c:4f:ef:b7:5d:df:c4:9f:ac:07:59:76:12:
26:63:a0:54:fc:80:82:21:6f:23:6b:14:4f:9a:99:66:43:a2:
6d:09:9e:3f:34:4b:f2:39:e4:92:f2:74:db:e4:5f:53:c9:80:
97:3a:90:13:7a:4d:7e:5e:e5:b4:05:dc:48:b8:41:9e:d5:ab:
80:40:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org