Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/FhTMfPuZo1shJoZCSBthqKzC9SE.roa
File: FhTMfPuZo1shJoZCSBthqKzC9SE.roa (raw, json)
Hash identifier: WyWFJwi7LLU5CBxY5+v/vNY8za7X9zArWBkmV6fcsRk=
Subject key identifier: 16:14:CC:7C:FB:99:A3:5B:21:26:86:42:48:1B:61:A8:AC:C2:F5:21
Certificate issuer: /CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Certificate serial: 018572F139600E682F00FD7F507419AE6DE8
Authority key identifier: E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/FhTMfPuZo1shJoZCSBthqKzC9SE.roa
Signing time: Mon 02 Jan 2023 14:44:49 +0000
ROA not before: Mon 02 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210255
IP address blocks: 193.22.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:39:60:0e:68:2f:00:fd:7f:50:74:19:ae:6d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Validity
Not Before: Jan 2 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1614cc7cfb99a35b21268642481b61a8acc2f521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:f3:fb:ab:d1:69:e6:31:21:40:f2:5b:f2:
60:a3:d5:d5:53:4e:31:ff:9b:94:3d:0d:22:ea:a3:
cc:75:c3:fa:c4:25:27:d3:b5:30:a6:a7:9e:7f:3a:
08:2f:9e:3d:16:e5:a6:a8:c3:53:aa:60:bd:22:26:
ff:5f:5e:cf:9d:cf:56:70:88:e1:f4:f2:b0:8f:72:
33:bf:af:8a:70:98:65:b8:8c:43:bf:9b:73:39:43:
4f:bc:ee:52:be:3c:86:5d:12:a8:7f:0f:6a:26:65:
ad:19:cb:10:ad:6c:73:86:6c:d8:02:02:22:79:fa:
f9:e3:76:49:4c:c2:40:9a:3c:17:2e:cd:2d:2e:e2:
99:b0:2d:82:db:23:22:88:b6:9c:5a:78:76:e1:6c:
8d:9a:56:7a:c8:f7:5e:ef:68:bf:c0:42:2d:77:f5:
c1:f4:40:02:10:46:0e:5b:d8:06:77:92:67:2d:94:
84:92:37:ba:52:ae:1d:08:ef:e5:e1:0b:30:3a:ba:
67:72:a6:e8:31:ed:9e:cc:b2:aa:78:3d:c3:6e:a0:
22:36:eb:a2:36:f6:f7:a3:4d:c2:2a:96:a3:59:b6:
73:22:2a:47:a8:0a:2f:cc:36:98:16:02:72:6b:ed:
e4:d6:80:8e:8f:59:e2:35:67:54:54:fa:fd:42:05:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:CC:7C:FB:99:A3:5B:21:26:86:42:48:1B:61:A8:AC:C2:F5:21
X509v3 Authority Key Identifier:
keyid:E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/FhTMfPuZo1shJoZCSBthqKzC9SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.224.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ef:b9:1a:e3:70:70:90:de:51:95:06:c0:c5:a7:a2:b3:52:
48:bf:b6:4e:54:36:0e:81:7e:aa:2e:1a:62:98:43:5f:fd:c9:
80:32:99:7b:42:52:02:45:0b:de:d8:f0:0c:89:10:9b:ac:3b:
af:09:c6:c1:20:dd:26:ea:a7:45:84:27:78:ef:55:77:1c:86:
7c:28:36:57:d0:e8:e1:27:d4:bb:73:30:47:a4:a3:3f:db:eb:
6c:d1:43:37:47:c1:60:8e:dd:d3:22:a0:a7:e3:b0:6d:d7:8b:
93:59:4e:24:5e:c3:43:5e:01:eb:45:b4:8b:63:f0:a4:66:17:
86:d8:10:eb:4c:3d:8a:45:f8:de:f7:2d:1e:2b:33:7c:43:64:
8e:8f:03:21:4f:c2:5a:fb:8f:5b:37:ce:b9:dc:61:c1:fe:70:
e4:8d:5b:ac:27:59:ad:65:5a:f7:33:56:92:a4:47:d9:c9:8c:
3c:65:29:b3:9d:d7:88:10:a9:cd:1b:2f:1b:ff:47:9d:ab:51:
ee:ad:5c:a1:e8:fa:61:df:34:7b:d2:20:5e:a1:99:16:61:3d:
90:53:f1:15:77:8b:31:31:0a:a8:6f:86:8a:b2:45:ae:1b:59:
b3:62:b1:25:d1:ff:76:ea:27:43:7c:76:d4:5b:6c:a3:a1:63:
dd:5b:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org