Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FJPWoFD4oeAO-oebDEz2HLUJDJ0.roa
File: FJPWoFD4oeAO-oebDEz2HLUJDJ0.roa (raw, json)
Hash identifier: na03lc0py4G7dQPOeWc139Ep5/V3OwTd1bR2yWoJLbk=
Subject key identifier: 14:93:D6:A0:50:F8:A1:E0:0E:FA:87:9B:0C:4C:F6:1C:B5:09:0C:9D
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018548B5A4AC2CD0F78029930D0FDB79C576
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FJPWoFD4oeAO-oebDEz2HLUJDJ0.roa
Signing time: Sun 25 Dec 2022 09:55:41 +0000
ROA not before: Sun 25 Dec 2022 09:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:b5:a4:ac:2c:d0:f7:80:29:93:0d:0f:db:79:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 25 09:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1493d6a050f8a1e00efa879b0c4cf61cb5090c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:cb:bf:c4:5c:74:d6:98:b8:9b:39:b7:ee:
25:16:ae:0d:21:f7:62:b2:a8:57:31:c3:65:71:33:
ef:45:08:05:1c:13:93:26:77:4c:bc:8d:01:35:c7:
77:bc:18:86:ca:b4:7d:ce:9f:d1:78:2e:d1:b8:43:
13:8a:5b:fd:8d:1f:cf:89:84:44:c5:54:c1:65:aa:
d9:85:47:6e:58:15:d1:86:b1:2c:fa:c0:91:b3:49:
f8:df:e3:6f:09:d5:0c:ad:97:6a:c6:c5:58:bc:21:
a2:71:5d:f4:08:fe:39:90:d0:9e:2a:98:24:d8:bf:
4f:84:5c:9d:92:b0:c1:c7:17:e2:14:fa:80:bd:55:
b3:58:9b:0c:b7:87:92:b3:b6:b0:d3:6d:35:74:d0:
34:7f:a5:6a:a9:5d:13:d4:e7:1a:c4:81:94:8a:19:
91:e0:1c:a1:d4:cf:99:63:05:95:88:5e:9e:ae:43:
9b:be:a3:96:a0:aa:f9:1d:ba:17:59:3f:dc:77:d7:
18:2c:a6:15:f1:be:d3:14:a9:7b:7a:62:5c:14:0d:
e9:18:4c:1f:19:a3:0c:58:25:13:7e:25:b0:82:80:
17:8c:c7:f8:d0:19:93:4b:8f:7c:78:95:f1:9a:79:
52:6e:4f:7e:88:6e:ce:a8:15:ee:f0:63:88:47:80:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:D6:A0:50:F8:A1:E0:0E:FA:87:9B:0C:4C:F6:1C:B5:09:0C:9D
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/FJPWoFD4oeAO-oebDEz2HLUJDJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bd:2d:4d:c0:f1:72:3e:44:17:b9:7c:0d:c0:f1:7c:33:cf:
8a:e8:d9:0c:51:56:a5:cd:17:ac:e6:44:78:3a:38:9c:f7:16:
c7:2e:15:22:64:5a:7c:96:4c:50:6c:9a:e6:2a:a0:0f:a7:5d:
73:86:b2:40:6d:33:ef:b4:af:df:bf:d2:eb:75:df:4b:fd:d4:
ba:af:07:43:8d:05:a5:dd:47:8a:64:d2:15:6c:f8:e2:1e:5a:
84:97:5b:b1:24:2c:8e:d7:39:00:62:44:7c:fa:c9:63:2d:80:
d4:f4:96:c1:36:50:b5:65:04:c6:29:d0:38:a0:95:3a:3d:a4:
d4:b0:51:cb:53:52:94:bc:9d:60:36:24:89:eb:14:91:dd:8b:
16:e1:5b:56:30:e8:78:a3:6b:1b:34:27:96:7e:25:6c:6c:d1:
e9:ea:55:74:82:8f:ac:dd:39:3c:7c:bd:da:71:d8:3d:ac:e8:
7a:b2:30:20:dc:26:c4:a3:f4:12:c0:c2:7f:b5:67:24:0b:c1:
f3:6b:b8:99:26:d4:17:77:d4:af:ea:f8:3d:41:0e:27:38:df:
a9:5b:71:9f:10:6a:97:3b:43:88:2d:48:f1:84:82:d4:f1:d4:
00:3a:ce:8c:15:33:0e:14:65:5b:d6:39:42:a0:14:19:78:7c:
d6:1c:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client