Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/FoqMYYFX4EU9_5WqG2koP3QhFxs.roa
File: FoqMYYFX4EU9_5WqG2koP3QhFxs.roa (raw, json)
Hash identifier: sN9xCTbRrvKGSjgn4rZLUICcVfxh8dCIvtAVTVk4Aq0=
Subject key identifier: 16:8A:8C:61:81:57:E0:45:3D:FF:95:AA:1B:69:28:3F:74:21:17:1B
Certificate issuer: /CN=cc04ccbb587a6c2615c131b1b849130d9de92e41
Certificate serial: 018CC8012488F9246C43520EE0F8E6834F75
Authority key identifier: CC:04:CC:BB:58:7A:6C:26:15:C1:31:B1:B8:49:13:0D:9D:E9:2E:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zATMu1h6bCYVwTGxuEkTDZ3pLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/FoqMYYFX4EU9_5WqG2koP3QhFxs.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 5.42.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:24:88:f9:24:6c:43:52:0e:e0:f8:e6:83:4f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc04ccbb587a6c2615c131b1b849130d9de92e41
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=168a8c618157e0453dff95aa1b69283f7421171b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:2a:83:eb:1f:e4:fe:23:2b:a1:23:f7:50:
16:c4:ee:22:e9:ad:7b:20:f9:db:11:f5:89:68:5e:
97:54:50:28:e5:a0:99:b7:54:4e:66:d8:88:93:0f:
0f:f0:5e:92:1d:34:f4:0c:e5:07:a4:97:47:c8:f8:
a7:28:4d:cb:53:a3:f5:5b:51:06:1b:36:77:42:87:
5c:33:d5:e1:8d:c3:dd:12:ac:39:13:05:9f:62:c5:
43:73:c2:4a:97:37:04:8f:d6:2c:c2:8c:33:62:3f:
b8:48:42:19:a7:c7:9a:7e:1b:2c:27:7f:91:4c:44:
8b:98:18:88:93:7b:51:db:ba:6a:a7:d1:d7:fe:d0:
de:7d:7a:69:e2:72:25:d9:2e:be:51:f5:10:78:8b:
68:b6:f9:cb:fa:fa:dc:71:62:65:44:77:aa:4c:72:
84:cc:c6:de:8e:a2:4d:c8:e3:71:1e:d5:a8:a0:a7:
6f:80:bc:fc:69:4a:77:db:96:e9:4b:82:30:8d:08:
d8:c6:0b:05:a2:78:3b:a7:07:85:45:80:29:32:cf:
0b:e1:3a:d6:73:6c:65:36:d1:28:f4:fd:0f:eb:9f:
dd:33:40:22:f7:ab:bc:e1:c1:e0:e6:75:af:87:e0:
6e:8d:c7:a6:bf:19:9f:a1:e7:2b:23:e1:21:ff:f5:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8A:8C:61:81:57:E0:45:3D:FF:95:AA:1B:69:28:3F:74:21:17:1B
X509v3 Authority Key Identifier:
keyid:CC:04:CC:BB:58:7A:6C:26:15:C1:31:B1:B8:49:13:0D:9D:E9:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zATMu1h6bCYVwTGxuEkTDZ3pLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/FoqMYYFX4EU9_5WqG2koP3QhFxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fbadd4-e370-40ff-b461-2b0c851302b4/1/zATMu1h6bCYVwTGxuEkTDZ3pLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.216.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f3:39:df:c7:06:b6:eb:45:20:2b:75:53:dc:d1:0f:f4:58:
16:4f:e8:12:a8:73:09:1d:99:82:aa:e0:98:1f:64:6d:99:fc:
95:f3:3a:c5:ed:e3:8e:c5:04:4f:fc:9c:70:37:63:dd:b7:cc:
63:ea:49:8b:5a:6f:ed:ef:71:f0:9d:0a:cc:0e:78:17:bf:01:
13:46:e7:12:4d:67:2e:8c:7a:da:23:ae:52:1c:96:98:77:8c:
39:06:68:80:03:7d:f7:7f:c7:42:21:83:ee:06:5e:77:ab:84:
35:2a:f7:14:99:21:73:05:11:b9:6c:53:b8:20:5f:58:6f:b4:
52:8e:06:1a:df:a0:f8:29:dd:5f:8e:fd:de:00:1d:ad:dd:fc:
a5:bf:82:d5:85:15:b1:54:1e:ce:38:c4:c8:9a:96:69:5a:1c:
77:86:17:bf:97:95:c8:a2:5d:9d:86:4c:53:9a:fc:4f:bb:e4:
ce:de:40:98:33:66:ab:61:08:7e:4c:78:d4:a3:0e:d6:ad:44:
a4:7d:17:8a:d0:5d:bb:9c:4b:92:3d:e8:3f:97:9e:10:72:6b:
d6:6e:fc:82:60:58:73:7f:c7:a7:c8:df:77:2e:30:0d:fb:8c:
c1:31:1a:d6:eb:0e:df:ce:45:55:83:86:24:20:ae:e4:8a:08:
ff:b9:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:14 2024 by rpki-client on console-fra.rpki-client.org