Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/633e77-c6c7-4b37-9938-05392cce3c1b/1/fFk_eDBhhdstcQHW_8OadYT9BaY.roa
File: fFk_eDBhhdstcQHW_8OadYT9BaY.roa (raw, json)
Hash identifier: pzyk5iotcOcS6XXKD4E4CW9bedIfZIM1HZpCzFQZkmw=
Subject key identifier: 7C:59:3F:78:30:61:85:DB:2D:71:01:D6:FF:C3:9A:75:84:FD:05:A6
Certificate issuer: /CN=0200dab85a4ee2f2f1769cef3862aff57e924c4a
Certificate serial: 0227A26C
Authority key identifier: 02:00:DA:B8:5A:4E:E2:F2:F1:76:9C:EF:38:62:AF:F5:7E:92:4C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgDauFpO4vLxdpzvOGKv9X6STEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/633e77-c6c7-4b37-9938-05392cce3c1b/1/fFk_eDBhhdstcQHW_8OadYT9BaY.roa
Signing time: Sat 01 Jan 2022 01:52:11 +0000
ROA not before: Sat 01 Jan 2022 01:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.119.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36151916 (0x227a26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0200dab85a4ee2f2f1769cef3862aff57e924c4a
Validity
Not Before: Jan 1 01:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c593f78306185db2d7101d6ffc39a7584fd05a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:3e:71:8f:20:ac:cb:70:11:54:8f:e4:3e:
fe:6e:03:10:aa:d4:76:80:18:d7:17:bf:38:bb:37:
fb:c3:61:a4:ab:21:67:32:6d:e8:e7:9f:3d:24:38:
34:a4:61:06:a8:11:47:ff:dc:0c:07:b8:33:93:8c:
4e:fa:26:84:93:09:45:e6:a6:18:8b:88:38:8e:1d:
86:71:e0:6e:bf:27:6b:33:dd:f1:d8:7d:ed:93:19:
22:3d:9c:40:77:44:c5:bc:65:d0:3c:03:9d:f7:c8:
80:23:4a:cf:6a:63:5a:10:b3:cf:9f:c7:48:b6:4e:
dc:d8:cf:3e:bd:92:a8:80:55:8c:82:da:6a:ad:67:
44:60:ca:f4:5c:4a:ba:9e:59:64:d2:2a:93:a7:16:
bd:c7:2a:8f:cd:ed:79:b6:3d:46:8a:92:b9:ff:f0:
0f:d6:66:81:b1:03:b8:a4:88:4c:b1:2e:af:d6:94:
72:6b:17:e1:92:ab:40:ee:08:45:99:b5:c0:02:5d:
67:42:c7:53:bb:03:43:16:0c:17:b3:30:48:cf:a8:
42:ca:26:1a:27:db:83:7c:40:f5:ac:59:28:7b:56:
ec:23:18:b1:15:16:07:9a:88:be:28:91:fd:48:00:
fc:a7:af:87:c2:d0:4d:c6:74:19:22:f1:99:69:b0:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:3F:78:30:61:85:DB:2D:71:01:D6:FF:C3:9A:75:84:FD:05:A6
X509v3 Authority Key Identifier:
keyid:02:00:DA:B8:5A:4E:E2:F2:F1:76:9C:EF:38:62:AF:F5:7E:92:4C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgDauFpO4vLxdpzvOGKv9X6STEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/633e77-c6c7-4b37-9938-05392cce3c1b/1/fFk_eDBhhdstcQHW_8OadYT9BaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/633e77-c6c7-4b37-9938-05392cce3c1b/1/AgDauFpO4vLxdpzvOGKv9X6STEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.68.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f0:f8:5c:51:be:77:f3:74:0e:72:f9:c6:8a:03:42:ff:aa:
bd:16:d6:ab:17:08:de:8d:11:e2:73:67:a2:c1:28:1f:74:3a:
6f:1e:5f:08:4f:89:fd:ba:94:35:06:1d:01:40:eb:42:ee:c1:
31:99:8f:09:74:a6:74:cd:29:fa:85:f9:cc:1e:c1:7b:bb:71:
0f:c7:00:a2:00:9b:25:e4:49:c8:d1:96:39:17:4c:85:77:ac:
a8:7d:06:ea:61:29:12:b9:e4:2e:71:85:ca:1f:4f:c5:09:a9:
d3:ec:af:1c:f7:eb:83:94:35:21:04:67:94:9e:79:2f:64:9d:
de:29:2b:3e:3b:f0:6e:34:84:ff:35:8a:8c:4d:32:66:80:74:
dd:30:64:93:2d:0a:78:e6:52:6b:25:fd:68:24:97:27:65:c9:
81:90:6f:8a:97:0b:50:ec:b8:ce:20:79:de:23:8f:99:d9:6c:
b3:85:f5:be:d7:9f:41:32:50:21:9b:bc:15:f2:19:63:ed:8a:
9b:4c:fc:d2:4f:f8:64:f3:ee:dd:75:61:51:eb:ae:b2:11:d7:
63:52:09:24:23:9c:9a:17:19:f4:d4:99:5c:18:c6:79:d8:3d:
39:bf:6f:68:08:e5:5f:8a:05:e9:3b:47:c3:f8:d4:41:43:f0:
56:85:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:01 2025 by rpki-client