Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/cZpoktWLrijz92kow9ppR_cypGY.roa
File: cZpoktWLrijz92kow9ppR_cypGY.roa (raw, json)
Hash identifier: 6GSluqzZubt03jm6Wal+0rj/5/LkJxP88xi9abtZNZ8=
Subject key identifier: 71:9A:68:92:D5:8B:AE:28:F3:F7:69:28:C3:DA:69:47:F7:32:A4:66
Certificate issuer: /CN=e7c84a48be16fc0deb4fde11869237e64954874d
Certificate serial: 01859C24D9D0EC666515DBB7CBADC48830E3
Authority key identifier: E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/cZpoktWLrijz92kow9ppR_cypGY.roa
Signing time: Tue 10 Jan 2023 14:45:38 +0000
ROA not before: Tue 10 Jan 2023 14:45:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 84.54.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:24:d9:d0:ec:66:65:15:db:b7:cb:ad:c4:88:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c84a48be16fc0deb4fde11869237e64954874d
Validity
Not Before: Jan 10 14:45:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=719a6892d58bae28f3f76928c3da6947f732a466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:fc:74:65:49:5f:ea:44:3f:5b:68:67:1e:
73:82:a5:0d:60:a7:41:4f:43:d0:20:09:16:6d:2f:
02:80:83:dd:d9:29:6b:cb:19:bb:59:a2:39:80:da:
54:da:35:45:23:2b:87:cf:8e:da:c0:91:f7:a0:4d:
79:1d:b8:1e:5c:62:bd:31:66:69:29:38:06:a7:0c:
92:fc:44:0c:66:1f:90:71:e4:11:f6:9e:5d:72:de:
ba:cb:f0:37:6d:b3:2f:d0:e6:b8:b3:ff:0e:11:41:
24:8b:01:45:b8:71:d1:9d:7e:d1:4b:b0:16:9a:e8:
de:83:dc:9e:f6:37:23:10:48:af:63:c1:f9:ea:b5:
24:6e:cc:fc:36:62:f9:f3:88:5a:ec:c9:89:a2:28:
74:c2:79:5a:f5:2f:19:cf:3a:81:aa:41:d1:82:54:
aa:4f:6b:ab:5c:87:e4:6d:cc:bf:b7:be:2e:eb:f9:
47:7e:c8:1e:f6:10:2f:11:79:31:77:50:e5:bd:f7:
c8:d6:26:9c:e8:0a:7b:20:c5:22:bc:72:87:92:a8:
1c:90:fc:4d:73:8e:29:94:2e:aa:60:9e:11:f2:12:
46:05:17:62:f5:ca:22:3c:1e:e7:f8:17:2a:06:07:
a7:64:fd:19:a8:be:c8:04:c0:b3:f0:15:a7:ad:ff:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:68:92:D5:8B:AE:28:F3:F7:69:28:C3:DA:69:47:F7:32:A4:66
X509v3 Authority Key Identifier:
keyid:E7:C8:4A:48:BE:16:FC:0D:EB:4F:DE:11:86:92:37:E6:49:54:87:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58hKSL4W_A3rT94RhpI35klUh00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/cZpoktWLrijz92kow9ppR_cypGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a44fdd-0dbb-4857-b102-29973b4e342f/1/58hKSL4W_A3rT94RhpI35klUh00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.33.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5b:b6:b8:bb:68:e6:50:83:bd:fc:34:4a:ac:99:8d:d3:d8:
f8:9e:9c:98:25:8c:67:28:a1:79:6e:a2:0e:4f:45:cd:33:57:
26:19:4c:aa:7a:ec:01:20:11:89:cd:1c:81:ab:6c:da:9a:1a:
b7:39:cb:3e:2c:34:1c:7d:55:bd:8c:bb:f3:93:b5:fe:5c:23:
84:f8:cd:f9:c0:f6:eb:fc:30:7f:c7:12:8a:e2:ab:fc:c4:0c:
62:62:f3:a0:33:69:bf:e7:00:45:af:47:de:fd:53:1b:fe:53:
11:ac:2d:1c:e0:4b:ac:26:4a:71:f6:e9:24:db:44:b5:91:df:
ae:4a:96:c0:13:6e:bf:6c:be:e8:c5:ca:b4:6a:c8:96:dc:d1:
e9:0e:42:1d:b2:f1:af:1d:c7:11:dc:28:1b:a2:00:8d:47:0d:
b0:31:f4:ac:33:67:c3:62:ab:55:ec:77:e7:5c:f9:51:d7:07:
7d:69:8f:87:de:30:68:ae:35:e6:28:de:7a:c3:11:1d:cf:d7:
78:dd:af:ab:fc:92:71:f0:62:ad:7a:d0:24:bf:c8:a3:11:3d:
7e:2b:99:ca:77:a7:c7:de:fc:22:db:45:08:d1:09:74:7c:43:
ad:46:33:fc:d4:d9:41:5b:6d:be:91:9c:85:b8:69:02:8d:b2:
c9:c5:3e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org