Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IEMml8i1Yczf9Yu6RTmI0Av9Bas.roa
File: IEMml8i1Yczf9Yu6RTmI0Av9Bas.roa (raw, json)
Hash identifier: 5CSwvYVLxh0k+ptAXjRcBByLDWL0Z6oNzinapV6AH+4=
Subject key identifier: 20:43:26:97:C8:B5:61:CC:DF:F5:8B:BA:45:39:88:D0:0B:FD:05:AB
Certificate issuer: /CN=6fe13471225912b9788789b05d5699a41f2a4e69
Certificate serial: 01CE1E40
Authority key identifier: 6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IEMml8i1Yczf9Yu6RTmI0Av9Bas.roa
Signing time: Thu 12 May 2022 09:04:13 +0000
ROA not before: Thu 12 May 2022 09:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 84.54.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30285376 (0x1ce1e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe13471225912b9788789b05d5699a41f2a4e69
Validity
Not Before: May 12 09:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20432697c8b561ccdff58bba453988d00bfd05ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:4d:72:cc:93:44:f6:eb:8a:ee:25:96:b3:
4e:e6:b9:a3:ac:92:f4:fd:3a:25:3c:75:0a:c7:ab:
d4:22:de:d9:1c:bf:80:ab:44:ca:55:9f:d4:54:15:
91:83:0c:2c:a4:ee:8e:aa:75:6f:f8:e1:02:a8:82:
e6:20:d8:17:b0:e0:5f:26:ad:3c:d5:aa:b2:b2:c6:
9f:4e:cd:13:d1:0b:d4:7c:8e:4f:2a:72:a2:ee:f4:
78:a4:df:31:e6:b7:ed:96:ee:9a:fe:ca:3e:c6:80:
b7:b5:9e:17:c4:fe:0a:0e:10:0e:b9:71:e3:af:4b:
44:20:62:ea:71:00:13:e0:66:8e:6a:8d:83:05:3c:
b2:0f:58:2a:a7:3a:72:25:01:27:7d:39:a2:b3:a6:
7c:56:e2:55:74:79:97:bd:69:8b:ee:e0:18:94:10:
28:fa:18:eb:79:38:55:3c:d0:c7:dc:84:1c:04:2d:
fa:b0:ad:eb:13:54:a5:cc:c5:d6:62:93:79:17:98:
f7:84:e2:89:d0:89:8a:2b:40:68:c4:28:da:2a:0a:
0b:fa:62:f0:78:dd:9b:fc:21:64:76:4f:6f:84:03:
17:4b:fb:e8:9f:0a:70:f9:b5:a8:4a:8e:f7:b5:9b:
73:e7:9c:e6:74:71:09:f3:3a:58:66:fc:5b:23:7e:
7b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:26:97:C8:B5:61:CC:DF:F5:8B:BA:45:39:88:D0:0B:FD:05:AB
X509v3 Authority Key Identifier:
keyid:6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IEMml8i1Yczf9Yu6RTmI0Av9Bas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/b-E0cSJZErl4h4mwXVaZpB8qTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:6a:4c:03:81:09:70:e5:53:ff:84:09:25:0b:ab:ef:b9:
be:db:21:90:e2:2a:d7:27:db:3a:22:61:0e:bc:02:69:c5:eb:
ea:18:8f:a3:59:a0:02:ab:9a:80:71:31:f7:dd:80:ed:46:20:
04:e8:c5:31:08:cd:da:66:d7:a6:b4:7e:9c:f6:01:c6:d7:f9:
43:d2:38:3f:31:4b:11:fe:86:e8:54:3e:f0:69:15:d2:b6:e7:
fb:c0:27:72:40:35:63:83:c7:ed:08:10:02:df:6d:ac:53:a0:
c7:ab:fe:c0:24:cb:b5:d1:5d:46:e1:d8:4d:70:be:b3:e7:5c:
61:b0:1c:89:39:30:53:ae:7e:23:fe:4b:3b:ee:00:ce:50:8a:
d4:26:aa:c9:19:55:d5:85:68:08:12:3a:aa:79:a9:ec:bd:9a:
80:5d:79:eb:d6:99:97:60:4e:54:23:a6:1b:0c:33:f1:a0:0b:
e7:89:b5:9c:e5:04:be:a1:a9:07:93:c6:13:f2:ef:d6:a8:00:
d8:5e:40:e5:ee:d4:be:63:e6:3e:d2:18:bd:66:22:c6:5a:b8:
55:51:25:b1:e0:76:10:01:63:44:39:fc:55:40:ba:3f:16:73:
42:b0:16:c6:dd:9e:ee:8c:67:e8:67:3b:a3:66:f1:29:29:5b:
c7:ea:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:27 2024 by rpki-client on console-ams.rpki-client.org