Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/xFB7oFTX8xMBMkNfhxC9T33h1t4.roa
File: xFB7oFTX8xMBMkNfhxC9T33h1t4.roa (raw, json)
Hash identifier: fpqC/6EghwFWN9sDhw+19O75RccIW7eirCCtLRxKLGU=
Subject key identifier: C4:50:7B:A0:54:D7:F3:13:01:32:43:5F:87:10:BD:4F:7D:E1:D6:DE
Certificate issuer: /CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
Certificate serial: 01857139F0B43B6B8251AA3AB586B5275EA5
Authority key identifier: 7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/xFB7oFTX8xMBMkNfhxC9T33h1t4.roa
Signing time: Mon 02 Jan 2023 06:45:00 +0000
ROA not before: Mon 02 Jan 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200973
IP address blocks: 185.90.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:f0:b4:3b:6b:82:51:aa:3a:b5:86:b5:27:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
Validity
Not Before: Jan 2 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4507ba054d7f3130132435f8710bd4f7de1d6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:39:50:b1:6e:8a:3d:35:79:66:27:6e:a0:
68:25:a1:e5:5a:1d:fe:6a:ac:d6:31:2a:fc:4a:13:
79:3c:f1:71:89:51:98:fc:12:92:8b:e4:fc:3b:37:
6a:3c:83:49:ab:db:bd:df:52:0b:36:8b:df:d1:7f:
f6:5f:ce:2f:8b:30:48:54:87:7c:5b:ad:b5:2b:87:
a1:80:f0:8d:e3:98:b4:9d:65:ea:34:59:18:c7:78:
fe:df:50:46:5d:4b:90:08:28:be:b4:e6:4d:c5:e0:
6c:b9:09:cf:ab:c9:ff:04:b7:20:ba:08:8e:29:b9:
a9:02:7e:d7:f6:de:01:91:9c:07:7e:bb:71:f5:60:
8e:3b:82:36:43:ad:cc:eb:5a:c5:1b:73:a8:18:96:
3b:3e:e8:3e:86:b5:5e:69:8f:be:d3:53:ae:f5:aa:
72:c4:8b:32:10:38:df:db:0b:f6:70:3c:d5:fc:92:
cc:52:a0:2e:c0:c3:6d:62:11:dc:e8:c7:c1:0e:e3:
e3:e2:78:2c:16:35:de:68:fa:0f:9c:73:ad:54:03:
3b:54:df:6e:00:2f:53:cd:bd:a8:4b:39:de:e7:e8:
bd:25:69:4b:86:fb:f1:a6:9a:7b:b2:46:7c:4f:a7:
c7:01:d2:39:60:69:69:eb:71:91:7d:52:f2:c4:62:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:7B:A0:54:D7:F3:13:01:32:43:5F:87:10:BD:4F:7D:E1:D6:DE
X509v3 Authority Key Identifier:
keyid:7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/xFB7oFTX8xMBMkNfhxC9T33h1t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/fwUrjTSr0aasfWuDi1_wQevD1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6a:83:6a:cb:67:ba:a2:69:e1:1e:de:65:cf:d2:ab:ba:33:
c9:fc:20:bd:4d:d8:01:b5:f5:5f:91:f7:cc:20:3e:88:a8:16:
0b:9b:7c:73:5b:8d:08:14:44:95:2c:8a:31:d3:f9:18:89:fd:
79:ea:3f:99:ea:a2:1c:6e:c2:d1:e9:16:56:31:ff:8a:c8:eb:
79:b0:a1:25:e2:75:b9:b4:59:e2:fa:8b:46:9a:42:6e:0b:27:
4f:f8:72:a3:67:8c:6b:8b:45:d2:c2:e5:31:99:16:b7:de:34:
50:4b:5d:a4:fe:43:b8:3a:21:0b:0a:96:2c:6d:b8:4e:47:b6:
78:3f:04:43:81:24:e8:ce:04:e3:68:3c:8b:ba:31:43:32:81:
fd:be:47:d4:a3:10:89:4c:c9:b0:a4:3e:d1:06:09:cf:d0:fb:
16:4d:42:e1:28:2d:cf:54:db:6a:94:e3:cc:41:85:d0:54:0e:
bc:b1:5c:cb:cb:42:a2:86:89:02:3e:55:d2:15:46:c1:21:5d:
a3:b5:4f:20:0e:74:09:01:e4:c3:b9:2d:5d:3c:67:6d:c4:06:
b0:a0:ab:ce:03:2d:d1:52:cf:19:1c:b7:23:68:9e:7c:d1:65:
a6:c8:ac:70:a3:56:0d:c3:22:08:61:38:bf:e1:70:19:1d:e4:
46:3c:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 08:50:28 2023 by rpki-client on console-ams.rpki-client.org