Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FmgUWhcHpKBuSrcGZ3s0BUK7Wlw.roa
File: FmgUWhcHpKBuSrcGZ3s0BUK7Wlw.roa (raw, json)
Hash identifier: DeUBPEKkGtDk4Pi4jIJ6srRtBiax5izMGnUv7xnmAZQ=
Subject key identifier: 16:68:14:5A:17:07:A4:A0:6E:4A:B7:06:67:7B:34:05:42:BB:5A:5C
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092B00A0
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FmgUWhcHpKBuSrcGZ3s0BUK7Wlw.roa
Signing time: Sat 01 Jan 2022 12:58:45 +0000
ROA not before: Sat 01 Jan 2022 12:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34590
IP address blocks: 2a02:2698:1c00::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153813152 (0x92b00a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1668145a1707a4a06e4ab706677b340542bb5a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:10:f7:5d:d5:04:17:93:2e:1d:a0:de:01:
57:39:c8:00:43:21:47:22:1a:fb:b9:67:fb:ee:e0:
55:53:37:c6:02:80:96:46:33:7e:da:28:b1:44:8f:
97:bf:bf:ef:84:0e:b9:0a:50:64:23:42:6f:ab:a7:
a9:b1:11:3c:85:73:d5:c0:e3:be:b9:6a:6a:40:35:
0d:cb:09:76:c2:65:82:97:de:d8:3a:08:5a:28:9c:
12:1d:8a:94:1a:c0:2e:6c:b5:58:95:2b:1b:31:60:
5e:d7:a2:1b:68:b2:21:11:31:4c:a0:61:2e:e1:0f:
64:d5:1f:b8:eb:8c:8d:2d:70:11:0e:ea:67:89:4c:
32:f8:3b:c7:f1:f0:2b:f4:4f:0b:01:9f:e9:f5:48:
49:ed:28:3c:82:8c:46:49:82:c4:78:d6:ca:92:72:
b2:c5:7a:70:94:47:e8:5b:56:ea:70:67:f6:fe:45:
2c:79:0a:f7:43:c5:7a:ec:00:be:f2:a7:00:a0:b2:
8f:38:92:e6:ae:73:d0:ec:a1:73:5c:cb:a6:50:78:
72:27:d4:30:2d:79:8b:b0:df:f4:e0:b6:d2:9a:b2:
2d:22:61:b1:40:75:67:05:e6:c3:1b:e5:64:d3:03:
57:47:ee:d2:56:f4:9c:b5:45:ec:a7:0a:59:18:80:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:14:5A:17:07:A4:A0:6E:4A:B7:06:67:7B:34:05:42:BB:5A:5C
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FmgUWhcHpKBuSrcGZ3s0BUK7Wlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1c00::/38
Signature Algorithm: sha256WithRSAEncryption
24:ef:e0:93:f5:32:1c:17:f4:15:89:4a:d4:43:81:7d:b0:cb:
e0:b6:52:b9:30:ba:71:86:e5:30:21:01:27:9b:38:df:6c:56:
8d:ed:4b:d7:4b:6a:34:45:de:6c:a1:19:78:3d:93:7f:9c:b9:
07:66:a1:44:f5:6c:ad:69:a1:e4:9c:5a:08:48:05:12:25:37:
ff:95:61:b9:d7:15:ac:3a:74:ae:95:17:3c:0c:48:d7:69:f2:
73:ae:75:63:e1:f2:5d:99:0b:8c:b8:93:1e:fe:b2:ac:c1:7d:
38:f7:70:31:60:1d:bc:49:51:28:8a:4d:1f:4d:b3:a7:ca:7b:
f1:9b:1a:7c:7d:e1:3c:39:41:19:d2:e4:99:47:f4:ca:b1:70:
cb:8d:37:f1:aa:ce:93:d6:48:8b:be:46:f3:0f:2f:4f:74:6e:
63:d6:66:52:b3:07:74:82:7a:63:29:30:79:52:fc:b6:82:d8:
f2:82:d9:c0:84:2c:9f:9e:5f:2c:5e:58:bc:ca:b0:8b:c2:11:
d9:f8:6a:7a:81:fa:f3:4e:87:ba:fd:07:ea:2a:95:da:73:f2:
5d:6b:2d:de:47:e6:51:64:fa:1f:5d:67:bb:98:16:e0:f1:7c:
6c:b9:93:a7:d6:f4:7c:bb:cc:73:57:3f:75:eb:2c:7e:c9:c3:
a3:a8:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:22 2025 by rpki-client