Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/tyzTg4Ks4vP7_YV_xBJQrsO3d24.roa
File: tyzTg4Ks4vP7_YV_xBJQrsO3d24.roa (raw, json)
Hash identifier: 8uyt1p1FgAhiyQnZ9SqHugLn3H2AkJ9XG4AJtRL23uk=
Subject key identifier: B7:2C:D3:83:82:AC:E2:F3:FB:FD:85:7F:C4:12:50:AE:C3:B7:77:6E
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 0184A11BFB60CB6B76E594FB429389B185A4
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/tyzTg4Ks4vP7_YV_xBJQrsO3d24.roa
Signing time: Tue 22 Nov 2022 20:51:16 +0000
ROA not before: Tue 22 Nov 2022 20:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49729
IP address blocks: 84.54.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:1b:fb:60:cb:6b:76:e5:94:fb:42:93:89:b1:85:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Nov 22 20:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b72cd38382ace2f3fbfd857fc41250aec3b7776e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:7f:fb:1c:07:c5:36:50:74:30:e5:7f:ba:
a6:e7:46:3f:71:fa:e9:54:92:1e:9b:8e:6b:09:30:
6d:83:5a:75:ed:5f:2e:44:1c:29:4a:8d:16:22:c8:
d5:49:a3:72:bd:64:d8:56:e4:1f:cf:b1:f6:5f:54:
09:f6:da:35:98:4d:c3:fa:cd:67:32:a9:1f:5d:4c:
a6:25:a8:ee:4d:05:42:b9:65:30:fe:ac:4d:34:3f:
f6:76:ec:15:5f:00:df:93:2c:e7:81:ab:ef:14:12:
9f:ab:67:7f:d2:3b:e2:1f:30:19:f5:8b:ad:37:9b:
02:be:5a:13:fb:1c:eb:19:22:a0:d5:96:61:d9:5c:
c0:9a:3c:63:16:a0:ea:e6:5a:3a:2d:86:3b:a7:c5:
b4:9c:c6:f1:31:7c:38:56:02:96:a3:cb:1f:81:d2:
06:ff:37:a6:51:43:b1:ef:69:0e:40:ca:ed:6b:59:
d5:5e:93:76:82:c0:22:d8:c3:8f:1c:5f:68:7f:8c:
9a:6d:4b:46:d0:20:4f:c2:96:8a:af:c5:9a:a7:31:
4b:9e:e9:f3:46:4a:9b:15:a8:9b:2f:65:52:f7:a3:
a8:2e:f5:66:7d:be:8f:49:5a:25:65:8a:99:5c:ce:
27:a3:84:d4:89:85:70:ad:a3:55:e3:03:6e:9c:d3:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:D3:83:82:AC:E2:F3:FB:FD:85:7F:C4:12:50:AE:C3:B7:77:6E
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/tyzTg4Ks4vP7_YV_xBJQrsO3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:9e:6f:bd:a2:b3:ff:00:31:d1:db:09:ed:68:20:b6:e7:4a:
c8:79:5f:8c:32:7f:8a:f5:88:5e:d0:43:9a:ab:f9:60:d4:64:
6f:bd:6f:c9:38:8a:6d:45:eb:e3:e4:fb:32:e4:b7:53:6f:49:
3b:71:7b:2e:e0:1c:32:02:4a:be:8d:ea:88:97:8f:54:9f:41:
47:9a:a4:33:36:db:6a:86:47:ba:00:ea:5b:76:63:b2:a5:d7:
a7:03:49:c2:5c:1b:77:4d:3d:14:dd:5b:71:73:1a:2b:7a:bf:
5a:52:e5:56:cb:97:1d:28:89:42:77:b6:6c:4b:3d:31:be:de:
78:62:6f:c8:1b:9f:f0:fb:d9:be:0e:04:ea:0e:16:69:65:5a:
a1:1c:34:27:1f:b7:41:af:40:f9:3a:5d:56:d1:0f:e0:14:d9:
9e:c3:d0:06:72:6e:d9:81:bf:4f:2a:70:29:27:8a:b8:16:29:
26:c8:2c:ef:db:86:bf:50:fb:0e:88:ae:2d:bf:d7:a0:ba:76:
9f:e7:9a:f2:ab:2b:88:65:aa:9d:a1:73:aa:ae:d3:a7:f6:f1:
0b:d9:34:d5:cd:96:19:d1:f2:30:17:7c:bf:c5:9c:22:76:72:
c0:23:5e:77:fa:f9:9d:2e:a2:10:29:be:d3:a5:2e:d9:b4:77:
f4:3d:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:27 2025 by rpki-client