Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/FUN-vd_dosfiLJg-fMWZMNAwZuA.roa
File: FUN-vd_dosfiLJg-fMWZMNAwZuA.roa (raw, json)
Hash identifier: eOPSX3WvILP6DZxEYvaWQjg35Kobr4kMmveO5tUadLw=
Subject key identifier: 15:43:7E:BD:DF:DD:A2:C7:E2:2C:98:3E:7C:C5:99:30:D0:30:66:E0
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0182F928E33C6D66588152424E9D44451977
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/FUN-vd_dosfiLJg-fMWZMNAwZuA.roa
Signing time: Thu 01 Sep 2022 13:06:22 +0000
ROA not before: Thu 01 Sep 2022 13:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:28:e3:3c:6d:66:58:81:52:42:4e:9d:44:45:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Sep 1 13:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15437ebddfdda2c7e22c983e7cc59930d03066e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:3a:20:b4:99:dc:9d:28:00:ff:7e:40:57:
44:25:79:d7:34:7f:84:25:22:bc:4e:d3:09:28:0b:
57:7c:c3:34:ca:70:f0:a2:a8:2e:5f:05:0f:b7:fa:
75:af:76:dc:a6:39:32:dc:b1:01:c4:05:37:14:18:
03:d4:a7:97:9a:06:a3:db:ad:de:77:d9:cc:05:65:
32:9e:62:fa:54:66:ce:bb:73:ab:03:b4:35:2c:dc:
d0:a5:80:43:ca:75:7c:c6:f8:b9:10:40:e4:cf:9a:
e1:72:dc:91:d9:94:04:9f:8d:6a:c9:42:9f:65:81:
5f:7c:2f:0e:8f:16:a0:e4:4c:33:9d:21:86:e4:5c:
47:b8:2c:84:ee:81:b8:b3:8f:47:36:55:ca:93:52:
0e:87:7a:9a:34:c6:c2:67:a6:29:1e:7b:6f:0e:8e:
18:c6:98:99:20:d9:99:0e:72:98:db:03:c5:39:64:
44:e9:3c:de:da:4d:25:e9:81:72:1d:54:39:1b:c8:
23:2f:94:58:e9:9a:a0:29:44:34:3d:63:f3:fb:dc:
57:58:b4:db:e8:e9:5d:6f:81:34:78:ec:80:1e:95:
82:90:47:ff:4f:39:87:30:e7:8b:ac:22:7d:fb:93:
49:d1:b9:9e:36:a9:0e:c2:fc:96:5c:77:93:be:24:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:7E:BD:DF:DD:A2:C7:E2:2C:98:3E:7C:C5:99:30:D0:30:66:E0
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/FUN-vd_dosfiLJg-fMWZMNAwZuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.66.231.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b1:9e:cc:73:da:d8:48:39:e3:0d:4f:6a:83:75:1f:fa:cc:
75:a3:c1:f8:48:3e:52:95:a0:08:05:a7:fa:36:d7:d7:a5:ba:
3e:d0:b6:97:1d:ee:7a:fc:15:48:58:5f:b2:84:fa:34:97:e0:
21:9f:87:e8:43:52:8e:c3:b8:15:8f:3e:df:b5:70:c2:e1:ba:
76:8f:28:cd:72:2d:1e:c6:57:84:3b:fe:63:dc:b3:c5:74:db:
27:1c:38:0d:5d:a5:c5:d6:1a:d8:31:f7:69:b9:27:2d:cc:d3:
bc:fa:d0:ce:b7:0f:c4:e5:e2:69:2d:b5:0e:c9:e4:0a:4c:32:
b9:4e:9e:ff:97:4d:f4:5e:27:cd:0b:1d:ea:7e:08:86:50:c6:
55:2c:de:62:ba:65:53:e9:0c:6c:e8:86:77:ab:5e:26:74:f5:
be:f5:e6:71:dd:85:c8:b9:d0:05:ea:7e:64:87:94:5c:af:62:
ae:6b:5e:d7:54:9e:29:8a:9e:bf:9f:76:88:49:00:8c:e4:34:
a4:32:84:1b:fb:00:81:a1:fd:3d:e1:8e:6e:28:72:87:73:3b:
99:98:61:a2:cc:d9:05:31:ea:fd:32:c8:3b:fc:40:b7:3e:20:
fb:99:59:6d:24:7e:b1:fa:96:a3:b1:bb:d1:5e:ac:f4:0a:5c:
fc:04:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org