Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fbkmgB8JxChSmc3zXJr7iHjaWrU.roa
File: fbkmgB8JxChSmc3zXJr7iHjaWrU.roa (raw, json)
Hash identifier: OJNEQCgwf2axPSolMGl/kVAC3wToMEs47L7ZimTlS4g=
Subject key identifier: 7D:B9:26:80:1F:09:C4:28:52:99:CD:F3:5C:9A:FB:88:78:DA:5A:B5
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018AD2584D8D9EEEDA1FC7796A4E1A4AED37
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fbkmgB8JxChSmc3zXJr7iHjaWrU.roa
Signing time: Tue 26 Sep 2023 16:35:16 +0000
ROA not before: Tue 26 Sep 2023 16:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.252.0/22 maxlen: 24
91.147.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:58:4d:8d:9e:ee:da:1f:c7:79:6a:4e:1a:4a:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 26 16:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7db926801f09c4285299cdf35c9afb8878da5ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:75:85:e0:4f:ee:65:c8:49:8c:5f:c2:46:
96:a6:15:65:07:fe:a1:e1:ca:92:f1:17:1d:bb:ff:
60:12:ff:8e:3d:f7:d1:65:11:c4:26:4c:4a:15:99:
8b:e4:76:f5:05:f9:79:15:aa:3f:a4:b4:8f:cc:39:
58:19:12:6f:97:fd:9e:ca:e1:b6:ba:ea:92:7f:45:
6f:be:57:17:73:6d:8c:c1:5c:5e:2d:0a:66:a2:61:
31:2b:0d:b1:ee:26:4b:57:47:fd:e5:09:1c:2f:48:
af:12:49:b5:02:f5:88:67:19:a7:02:21:29:3c:c4:
88:a8:7f:1f:a9:f3:0c:a8:a4:84:8d:1a:f1:53:b2:
2a:f4:00:2a:3b:da:b3:48:29:92:9a:bf:d2:68:f9:
2e:24:7a:fa:3b:33:44:4e:d5:3f:7b:d2:4c:36:f1:
66:f8:16:1a:03:67:3b:31:03:53:0e:ea:3f:3c:2c:
0b:9e:aa:13:55:dd:46:71:a6:a8:d6:d0:52:72:ea:
be:77:01:f8:ad:48:a3:62:03:e7:1c:2b:58:e2:6c:
1a:28:a6:a7:d1:d9:16:cf:56:7e:af:4a:44:3f:36:
ba:46:f7:fe:7e:bd:95:70:58:1d:4d:b4:db:38:12:
bb:a5:ad:61:de:90:75:ea:f3:db:0b:09:40:eb:65:
03:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B9:26:80:1F:09:C4:28:52:99:CD:F3:5C:9A:FB:88:78:DA:5A:B5
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/fbkmgB8JxChSmc3zXJr7iHjaWrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
be:ae:cc:53:b0:57:83:96:93:6d:4a:b3:df:3f:e7:b2:39:43:
c3:2c:a2:91:f1:38:f6:fb:25:d7:8a:28:19:58:83:01:da:8d:
dd:b9:6f:b1:52:c9:41:f8:92:d1:44:c6:fe:c0:6c:51:83:8b:
a2:ea:ce:36:1a:12:5a:eb:db:c6:12:ab:71:68:86:af:78:c6:
6d:3b:eb:07:4c:d4:8d:a9:ee:8a:e6:fe:6d:ae:ae:c4:0c:3f:
4b:b3:d5:06:47:68:5e:d2:4d:bb:a8:78:11:d0:4d:b1:d5:0b:
9b:ff:37:9a:7b:82:2b:f9:5c:e0:3d:66:a8:ab:fb:06:17:80:
e2:68:3e:20:ef:cb:07:ae:c7:00:19:d1:70:bf:01:ff:57:3d:
6b:e7:af:e6:eb:e5:72:c8:de:be:38:92:52:d3:dc:15:06:4e:
d0:e5:03:fc:22:70:2e:e1:57:9d:1a:b7:21:05:c8:bd:8a:8c:
eb:5b:0c:f5:4e:5e:22:d1:dd:4e:20:85:91:a0:f9:70:33:3f:
45:cb:6b:b8:ac:1f:fb:ec:91:f5:7f:97:f0:2d:2b:ae:6c:be:
c6:9d:95:02:45:5b:31:4c:ff:ae:90:07:5e:47:56:66:70:19:
6e:5b:12:14:46:ec:ed:31:66:ec:1f:5e:ac:f1:94:17:54:30:
51:2d:d8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:32 2025 by rpki-client