Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32302e302f32332d3234203d3e2030.roa
File: 38342e35342e32302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: KKJM/WjloSMS9/VpK2EN8gRXYcQH1MjnVIln7WmriHA=
Subject key identifier: 64:27:0B:A2:B2:46:94:8F:FD:F8:0E:08:F7:1D:D6:CF:53:4A:38:F9
Certificate issuer: /CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Certificate serial: 1DCDD5739034FDB872688796D628527B29C5C9D5
Authority key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32302e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:15 +0000
ROA not before: Mon 27 Mar 2023 08:22:15 +0000
ROA not after: Mon 25 Mar 2024 08:27:15 +0000
asID: 0
IP address blocks: 84.54.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cd:d5:73:90:34:fd:b8:72:68:87:96:d6:28:52:7b:29:c5:c9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Validity
Not Before: Mar 27 08:22:15 2023 GMT
Not After : Mar 25 08:27:15 2024 GMT
Subject: CN=64270BA2B246948FFDF80E08F71DD6CF534A38F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:5e:26:7a:71:d5:7b:11:b2:0a:39:c8:11:
30:36:90:b0:54:a8:53:3d:c3:02:46:53:da:91:67:
45:de:88:0c:21:61:1b:62:a9:29:2a:e9:3e:9c:e5:
48:b4:7e:1a:69:50:b9:dc:fd:90:c8:a4:27:f3:7e:
e0:a1:99:5d:aa:e1:56:09:62:90:76:80:a1:6a:e6:
fe:9b:31:1c:cd:8e:2e:3c:5c:15:e3:2d:05:94:c7:
13:5b:b8:cd:40:08:52:48:a3:55:10:2b:b9:8b:66:
4b:ab:f7:5b:ea:bd:82:d8:3a:cd:e7:92:ba:f6:8d:
43:10:0a:9f:23:7a:db:bc:f1:3f:76:70:46:38:4a:
f0:e0:d8:1e:3b:3b:39:cf:91:7a:1f:12:37:f5:a1:
81:11:b8:10:05:9a:67:e3:71:3c:21:65:43:10:a9:
81:5a:e4:71:46:5c:f9:d9:64:47:7b:48:d7:72:2f:
b9:a4:6a:79:39:d8:21:bc:cb:86:1d:09:3c:a1:77:
b6:0a:43:56:61:05:5c:44:d0:e1:4c:d5:81:17:a9:
4d:4d:19:50:35:f9:2e:64:a8:84:75:50:7b:a2:15:
82:d7:d3:b1:c7:47:2d:f5:c2:7b:b0:53:96:99:7b:
b8:24:7f:c9:20:a9:93:71:ae:05:97:1f:c7:55:f1:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:0B:A2:B2:46:94:8F:FD:F8:0E:08:F7:1D:D6:CF:53:4A:38:F9
X509v3 Authority Key Identifier:
keyid:BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/38342e35342e32302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:83:fb:c2:d8:ab:aa:c4:74:28:6d:25:23:52:1f:7b:cf:ac:
37:4e:27:75:80:82:e2:47:4e:34:6b:23:78:92:f9:55:0e:0b:
14:67:e9:66:69:9e:34:6a:7a:fa:28:4f:8d:36:15:b0:d5:56:
3c:d7:a4:23:be:2a:7d:05:49:1a:b3:1d:23:cb:51:63:19:b3:
a5:a4:fb:e7:8d:7c:d4:58:76:16:9e:57:68:30:4d:58:c4:9c:
7f:54:7a:d7:b2:7f:4e:5c:6f:32:94:fc:7c:1d:83:9a:0b:94:
ac:05:54:45:4c:53:95:02:04:26:d6:5c:38:b4:25:5e:43:b3:
ab:51:eb:0f:18:6f:4a:12:07:8d:89:2b:7c:2d:7d:7b:12:e8:
70:74:8c:c5:d5:17:d4:85:16:f4:c1:b5:2c:3e:bf:e2:83:1d:
5d:e6:08:14:47:00:68:f0:f2:ed:7b:3d:e4:51:a2:a9:af:6f:
d1:73:49:45:6e:40:20:f3:b7:6c:fc:cf:c4:67:23:7c:2e:61:
a8:f4:8d:fd:14:0b:35:67:d8:75:d0:58:55:3b:f2:39:e8:10:
7a:8e:c1:1b:04:4f:3a:c4:73:bc:6c:bf:50:b6:00:31:f1:77:
eb:a6:b0:37:96:cf:66:6f:de:85:de:2f:63:de:40:e8:26:1d:
46:4e:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org