Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FdAI4mSqWn-fdUWu5H1r9X6dQNI.roa
File: FdAI4mSqWn-fdUWu5H1r9X6dQNI.roa (raw, json)
Hash identifier: 8Z6/7P9Lpyk0Y42YXTMZCvGEye1ctrufh1A9CMp7Scw=
Subject key identifier: 15:D0:08:E2:64:AA:5A:7F:9F:75:45:AE:E4:7D:6B:F5:7E:9D:40:D2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183EBB54F69DC5487F74ED8A3E1866A4083
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FdAI4mSqWn-fdUWu5H1r9X6dQNI.roa
Signing time: Tue 18 Oct 2022 15:27:51 +0000
ROA not before: Tue 18 Oct 2022 15:27:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 94.74.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:b5:4f:69:dc:54:87:f7:4e:d8:a3:e1:86:6a:40:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 18 15:27:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d008e264aa5a7f9f7545aee47d6bf57e9d40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:ef:36:d1:62:c0:79:f5:65:cc:ac:a6:c3:
42:e8:02:77:39:0b:ad:5e:9f:c5:95:4e:73:0a:22:
f3:24:62:75:f1:62:64:8f:ae:6c:ec:6e:43:e7:8a:
fe:1e:bf:9e:a8:bb:b0:62:a3:89:80:a6:7e:ae:14:
c1:f5:81:3b:31:3f:46:38:5e:7e:35:f5:83:d2:ef:
64:a8:73:1f:ea:4f:a8:8c:30:e4:82:fd:8c:42:19:
b4:0d:98:49:bf:59:7e:98:3d:d0:bf:16:60:e5:b7:
7a:1b:ae:47:be:0d:08:76:54:d4:7c:fb:1d:35:f1:
f3:df:6b:03:5c:46:61:3c:14:7f:a1:5b:b9:7d:a0:
b9:12:a5:b1:e4:f9:13:32:e6:bc:8c:f3:84:66:91:
79:13:87:3e:d3:3e:cd:40:b2:d9:05:ee:fd:9f:89:
2d:d7:a8:12:4c:67:f0:8c:1a:65:cf:c2:64:c1:cb:
0b:0c:86:39:a7:74:d7:f0:9e:29:8d:b0:f2:21:7e:
9d:61:1b:dc:8e:25:be:63:da:1c:96:db:ad:11:45:
19:75:12:5d:f3:e9:b8:01:a2:1a:f2:1f:1d:ca:44:
11:69:6e:58:ff:47:55:03:a9:86:1b:75:55:7a:41:
33:e1:99:47:18:dc:e0:c7:18:e9:28:0e:9e:0b:e6:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:08:E2:64:AA:5A:7F:9F:75:45:AE:E4:7D:6B:F5:7E:9D:40:D2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FdAI4mSqWn-fdUWu5H1r9X6dQNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.168.0/23
Signature Algorithm: sha256WithRSAEncryption
68:6f:2e:ef:74:a6:30:5d:59:f0:94:bf:84:88:84:76:3f:a0:
65:f1:9d:52:59:ed:cc:df:99:b2:4c:4c:f7:60:8f:26:88:32:
46:a7:34:e7:50:22:7e:70:39:b2:34:e4:b3:ab:3f:4b:d9:88:
20:cd:b0:8a:bb:6c:00:a7:3b:1d:83:8d:df:3c:46:94:e6:e0:
35:8b:b7:41:85:d5:1e:80:81:6c:72:f4:5a:88:c8:50:2a:ac:
79:ec:02:a6:fb:0a:57:81:5c:dc:55:54:13:6d:f8:12:15:70:
f2:93:fd:d7:cd:d7:9c:0e:6b:30:23:6d:ac:fe:e7:0f:61:78:
35:4e:18:5e:af:c5:47:25:a3:1a:78:34:8b:2f:25:e0:99:19:
2f:3c:1c:38:d7:b5:c0:42:70:5b:6b:1d:91:92:43:0a:2e:9b:
b7:33:4f:70:11:e6:9a:a0:c0:69:74:05:3a:13:80:68:b4:3c:
87:c0:f4:ff:30:2c:2a:09:67:25:81:da:2f:a6:10:e5:04:bb:
8c:0f:41:2b:16:90:d5:df:5d:5d:c9:af:42:aa:7b:32:c9:05:
94:47:da:26:83:c3:c0:6f:77:54:c7:7c:0c:2d:e3:58:99:73:
ef:f1:18:72:81:f9:c2:f8:fb:bb:05:be:ba:77:09:7f:dc:40:
71:03:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:37 2025 by rpki-client