Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/81gyEKtlsaj1yYkmcpm2JsIQOoY.roa
File: 81gyEKtlsaj1yYkmcpm2JsIQOoY.roa (raw, json)
Hash identifier: h53Jir4vXNsDlza4Y7ekQK+dezVUt5pHHOzoRNsPrCk=
Subject key identifier: F3:58:32:10:AB:65:B1:A8:F5:C9:89:26:72:99:B6:26:C2:10:3A:86
Certificate issuer: /CN=e7c84a48be16fc0deb4fde11869237e64954874d
Certificate serial: 01856F26C8A2B493EA0BD2422C4FDFA35FDA
Authority key identifier: E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/81gyEKtlsaj1yYkmcpm2JsIQOoY.roa
Signing time: Sun 01 Jan 2023 21:04:50 +0000
ROA not before: Sun 01 Jan 2023 21:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 84.54.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:c8:a2:b4:93:ea:0b:d2:42:2c:4f:df:a3:5f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c84a48be16fc0deb4fde11869237e64954874d
Validity
Not Before: Jan 1 21:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3583210ab65b1a8f5c989267299b626c2103a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:af:ab:f3:be:22:8a:95:90:17:88:d9:ec:
c5:2f:c8:95:c6:6b:a9:2a:37:75:1e:d8:35:63:f9:
1a:13:37:b9:d3:09:a3:ca:cd:b9:1b:d9:42:9e:a7:
99:1c:50:d5:56:04:8d:3a:3e:83:22:7d:cb:aa:5c:
a1:51:89:f0:15:d2:77:26:49:fb:a2:5d:25:12:35:
ed:67:2f:9b:d8:c2:59:56:ea:14:52:e5:1b:e1:c5:
03:f8:f4:ce:f1:ad:db:01:99:fe:c4:ab:1b:23:2b:
22:2c:21:bc:7f:e8:48:a4:09:d0:d1:0c:38:6b:2b:
a3:71:fc:f8:45:12:1d:87:a4:49:a2:07:2f:55:10:
6c:a9:b0:31:c5:63:a7:a5:e6:7b:2b:3b:0d:45:49:
38:d6:ba:17:64:fc:aa:7d:c7:d1:25:38:31:36:14:
4d:3e:9f:9d:c8:7d:76:72:d3:3f:9c:a4:d6:a9:49:
34:58:ab:97:d1:cb:52:e1:b8:d8:5d:09:78:1b:69:
1a:b0:9a:d1:eb:be:1d:53:ec:e5:03:f2:98:f9:8e:
44:7d:9f:c7:75:35:a6:d1:c4:66:0b:a0:ef:bb:34:
62:97:b1:8c:aa:a8:e4:80:d0:0d:ad:e1:97:2d:6a:
0e:1b:ba:5c:26:cf:4e:b5:89:e7:ac:25:38:c0:47:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:32:10:AB:65:B1:A8:F5:C9:89:26:72:99:B6:26:C2:10:3A:86
X509v3 Authority Key Identifier:
keyid:E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/81gyEKtlsaj1yYkmcpm2JsIQOoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.33.0/24
Signature Algorithm: sha256WithRSAEncryption
14:53:37:dd:39:9d:ab:06:0e:e7:8d:2b:77:cf:a9:36:bc:0b:
e4:00:2d:fa:22:fb:84:1a:e8:58:a3:98:f9:41:78:20:01:61:
8e:5c:c1:7d:db:97:eb:a5:4f:0c:76:b5:08:4b:ad:4a:1f:42:
25:95:ff:8f:ff:40:96:2a:bd:ed:b8:c8:aa:87:97:58:07:6a:
ae:dd:0f:79:8b:95:ff:d3:53:06:7a:ce:d9:7a:12:87:4e:73:
cf:69:97:49:2f:ae:07:4d:c3:b1:e2:a4:ec:ea:8a:39:2c:b2:
c7:c8:a1:b6:8c:9c:92:f5:16:c8:51:c1:8f:6f:44:e7:ab:44:
32:c3:47:09:f5:2f:a6:1b:4c:9c:81:90:c1:2b:ff:58:5c:f0:
53:69:d6:1a:68:65:73:47:1c:aa:a6:ca:89:0e:5c:b0:80:9a:
fa:1e:20:ef:f8:4b:16:da:5a:aa:75:cb:bb:e2:38:ff:1c:18:
50:2e:ca:3e:0c:76:02:92:39:c3:64:79:f7:11:97:b6:04:a7:
7e:97:40:9e:b0:8e:49:bd:f0:4c:d6:06:c8:85:bb:b8:cc:93:
6e:4a:30:03:4e:d9:1b:70:a0:bc:e4:a7:c3:38:41:4a:fe:b4:
85:9a:d5:f4:3b:ea:aa:e7:64:f3:8b:be:aa:be:ca:34:f2:79:
bb:06:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org