Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IyZqE0lPBGRxU6ceJbopWZXElr4.roa
File: IyZqE0lPBGRxU6ceJbopWZXElr4.roa (raw, json)
Hash identifier: dEbVHCOoH1QyaEoplRNBaGmTLjm4G28+GgttQ+dyPro=
Subject key identifier: 23:26:6A:13:49:4F:04:64:71:53:A7:1E:25:BA:29:59:95:C4:96:BE
Certificate issuer: /CN=6fe13471225912b9788789b05d5699a41f2a4e69
Certificate serial: 01856C0114FB2E1CEE3D3491CA37E03E7C0F
Authority key identifier: 6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IyZqE0lPBGRxU6ceJbopWZXElr4.roa
Signing time: Sun 01 Jan 2023 06:24:48 +0000
ROA not before: Sun 01 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 84.54.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:14:fb:2e:1c:ee:3d:34:91:ca:37:e0:3e:7c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe13471225912b9788789b05d5699a41f2a4e69
Validity
Not Before: Jan 1 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23266a13494f04647153a71e25ba295995c496be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:23:30:0d:08:10:1d:28:27:6e:fe:69:75:
44:83:6e:c4:ad:e4:98:ac:a3:e3:a6:05:34:0d:29:
d6:ee:03:6d:6d:61:1e:c0:a1:47:24:4b:88:6d:aa:
6b:03:2c:ee:9b:40:c2:34:00:57:89:60:35:88:74:
07:25:5d:47:2c:67:92:6a:54:d7:87:04:d5:ab:73:
18:eb:7a:73:d5:ec:67:9b:22:68:d4:bc:f3:9b:6e:
0c:33:c6:ea:02:92:a7:dc:b4:7d:9d:e5:9d:a5:8f:
2f:d3:85:34:59:3a:4e:1e:a8:5e:2f:17:9e:29:fb:
c8:6d:74:96:ff:0b:12:df:f6:b2:16:2b:14:37:e9:
7c:86:1e:9c:a9:6f:06:ea:20:bd:ea:99:7c:37:83:
58:1c:59:51:34:2e:5a:a8:ff:ac:aa:9d:17:f2:6c:
a2:d7:c3:0f:ee:39:ea:da:1e:f0:7b:ef:55:bb:85:
ca:31:30:47:c4:80:dc:1f:b1:e7:6c:9f:99:a9:56:
42:1f:e3:8a:bd:3d:b7:fe:92:be:ae:3e:9a:a7:22:
4e:05:d0:7f:2d:f9:76:45:42:79:be:29:c6:ab:fe:
43:c8:35:ae:8e:f4:7f:59:e0:76:00:3e:ca:97:a2:
e1:9d:49:ab:4d:2d:c2:2f:20:5d:55:63:c3:d2:90:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:26:6A:13:49:4F:04:64:71:53:A7:1E:25:BA:29:59:95:C4:96:BE
X509v3 Authority Key Identifier:
keyid:6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/IyZqE0lPBGRxU6ceJbopWZXElr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/b-E0cSJZErl4h4mwXVaZpB8qTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d7:44:f4:de:a9:03:46:52:d9:39:ae:15:55:f0:93:da:e1:
ec:d5:4d:eb:ad:31:94:8f:1b:3d:f9:ab:77:6d:59:3e:bf:b9:
8c:06:16:76:8d:bf:de:00:a1:a8:e4:5e:9c:27:74:9f:4b:ef:
a8:c7:d7:2e:70:05:ac:19:e3:fd:d3:36:16:4d:5e:21:e0:0e:
45:91:00:56:fe:00:92:29:c8:24:12:62:73:65:30:24:91:57:
57:ee:f7:3d:da:a4:20:87:84:ef:e7:32:d5:c6:41:58:cf:61:
10:39:fd:b8:88:6f:cd:40:d5:55:cd:ac:44:30:56:b5:98:90:
44:0d:2f:41:93:30:93:c0:20:97:3d:cf:e1:7c:01:5a:18:ee:
14:58:cd:3f:ee:96:82:a8:0c:55:8d:47:09:bb:61:85:53:d6:
66:13:30:18:85:8a:1d:b8:11:e6:7d:92:4c:c9:8a:5f:8e:0b:
40:d2:60:5e:e7:ab:2b:67:ed:ad:62:f3:fc:65:d6:7e:b9:f5:
7c:4e:be:a8:a3:ac:de:30:b9:54:5d:f1:c5:e8:c6:8f:71:38:
36:a7:8d:fa:82:8f:77:a6:48:e3:8e:96:45:7f:7d:dc:65:a0:
8f:18:23:43:a8:88:ce:06:0a:16:a8:24:f3:ac:00:7d:47:6c:
c4:01:25:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:30 2024 by rpki-client on console-fra.rpki-client.org