Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/FAfrOPT19dz8pFv5o_6_z548iys.roa
File: FAfrOPT19dz8pFv5o_6_z548iys.roa (raw, json)
Hash identifier: P5KH8hr52riySgp2/N3Z2N5CWxTuAPXD/EdZLCPurx4=
Subject key identifier: 14:07:EB:38:F4:F5:F5:DC:FC:A4:5B:F9:A3:FE:BF:CF:9E:3C:8B:2B
Certificate issuer: /CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Certificate serial: 025EDD
Authority key identifier: 78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/FAfrOPT19dz8pFv5o_6_z548iys.roa
Signing time: Fri 25 Feb 2022 13:13:34 +0000
ROA not before: Fri 25 Feb 2022 13:13:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200738
IP address blocks: 134.255.215.0/24 maxlen: 24
185.159.252.0/22 maxlen: 22
109.230.216.0/23 maxlen: 23
92.114.56.0/22 maxlen: 22
109.230.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155357 (0x25edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78bc6621ac9c88927bd35a6aef791d6ff629c696
Validity
Not Before: Feb 25 13:13:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1407eb38f4f5f5dcfca45bf9a3febfcf9e3c8b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:ff:96:41:f5:9c:a6:0d:37:cf:ba:48:f5:
3c:a1:60:bc:80:24:18:4d:cc:e3:0b:3c:05:ad:b0:
f9:d9:bc:83:b9:fd:b4:e3:3a:ea:57:c2:40:34:d4:
10:2f:32:ca:f7:96:83:03:c2:91:27:07:f9:de:6f:
63:9c:9c:f7:d6:b3:74:79:fa:62:dc:4c:1d:9b:11:
99:a1:18:e0:f3:58:9e:4e:90:ee:4a:73:63:76:f3:
01:43:38:a5:2f:91:69:c1:9c:5a:b0:fa:83:c0:6f:
a6:81:d7:e9:eb:80:08:1f:8f:a9:40:40:ec:15:32:
d6:c2:83:98:c9:14:b2:9d:a3:9c:dc:a0:25:69:b5:
47:93:b0:a2:4c:91:c7:7b:6a:f8:63:a4:12:e8:cc:
aa:bf:ec:57:28:54:6c:31:e3:03:61:8b:4d:f1:0c:
9a:3a:58:d8:11:ef:87:44:de:e4:95:0f:1c:bc:b1:
b1:8c:c1:bc:d3:02:75:0c:9c:ef:e6:ba:ba:0c:69:
d7:ef:4d:93:ee:38:d8:a9:c0:dc:40:b1:25:61:3b:
23:34:22:dc:98:59:71:2a:a3:c3:68:d0:d9:34:92:
f7:4f:7c:1c:07:80:c1:e9:5e:9c:26:20:74:ac:13:
a7:7e:39:60:03:b3:54:4b:c1:b0:63:87:a3:fb:b9:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:EB:38:F4:F5:F5:DC:FC:A4:5B:F9:A3:FE:BF:CF:9E:3C:8B:2B
X509v3 Authority Key Identifier:
keyid:78:BC:66:21:AC:9C:88:92:7B:D3:5A:6A:EF:79:1D:6F:F6:29:C6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLxmIayciJJ701pq73kdb_YpxpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/FAfrOPT19dz8pFv5o_6_z548iys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9bb723-7840-4c13-86de-4a029cde4c2a/1/eLxmIayciJJ701pq73kdb_YpxpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.56.0/22
109.230.216.0/23
109.230.222.0/24
134.255.215.0/24
185.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:81:76:ec:19:c4:2a:f2:a2:98:8b:ed:92:7f:6f:e4:6e:52:
14:7b:19:29:0f:4a:6e:56:ed:dc:55:1a:42:73:93:0b:6d:f0:
92:20:3c:b6:1b:e8:ca:87:be:17:d9:b2:4b:52:b0:cb:26:81:
24:e5:9f:02:00:4f:d6:0d:53:1d:2b:f7:d2:c1:9a:63:6c:e0:
55:1a:61:ff:4b:c7:61:11:1f:db:2e:93:69:ce:3f:01:2f:3d:
0d:9b:53:81:99:83:43:78:82:e5:1f:5f:27:f3:8d:e7:ce:ef:
1e:5b:a4:af:93:9c:81:22:a3:09:c5:fc:a8:c4:f2:f0:91:03:
a1:ff:7a:6a:fb:17:9f:33:52:c6:db:e7:08:20:35:6d:06:8e:
38:15:28:56:12:e3:73:8b:ef:88:ab:a1:95:60:80:12:0d:3a:
aa:e1:ce:1b:82:ad:1e:99:3b:42:f6:04:4f:43:c6:b3:42:fd:
6b:1e:6f:e2:05:7b:ab:5f:38:82:79:aa:f5:d7:a3:2a:59:37:
d3:a3:2a:c8:e5:52:72:e8:64:bb:34:68:e3:ce:74:17:a9:b4:
8d:c0:35:bd:f8:a1:f2:3f:05:cd:eb:6e:1f:87:1e:3c:91:03:
a4:3c:0d:07:a3:a4:0d:d0:94:fb:3f:03:39:19:b3:b1:94:a7:
59:62:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:30 2024 by rpki-client on console-ams.rpki-client.org