Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FAqOaCKDXAJS6s6ytgchpIvYcDY.roa
File: FAqOaCKDXAJS6s6ytgchpIvYcDY.roa (raw, json)
Hash identifier: iLghUBtI08itYsq2G0GkQSFatu1XZKtk3CrihEHcE9w=
Subject key identifier: 14:0A:8E:68:22:83:5C:02:52:EA:CE:B2:B6:07:21:A4:8B:D8:70:36
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4BA9F767BB55618C0FBE4EC08C8A4
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FAqOaCKDXAJS6s6ytgchpIvYcDY.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ba:9f:76:7b:b5:56:18:c0:fb:e4:ec:08:c8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=140a8e6822835c0252eaceb2b60721a48bd87036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:e7:20:33:95:9a:a3:89:ea:1c:01:85:2b:
09:01:1c:ae:21:9b:62:73:74:30:4d:1a:cd:5a:dd:
ae:b2:78:3a:5e:53:5f:7c:90:24:3d:0f:a4:05:33:
70:53:d0:8f:54:c6:e4:dc:eb:c9:c2:94:90:15:a1:
ba:50:2d:18:fd:39:2a:05:d9:65:56:d9:ac:ad:89:
ee:5d:60:65:8e:98:cd:ec:a9:77:23:5c:09:df:46:
bd:1d:6b:ff:13:8a:86:bf:8c:a1:be:4d:4d:84:e3:
31:cd:93:37:64:19:24:4d:c1:04:46:fb:9a:5c:99:
93:17:ca:86:0a:19:a5:6f:d2:c5:d4:e3:15:fd:d8:
00:f1:f7:bd:43:57:cb:21:f1:80:47:dd:ba:74:d5:
be:a6:2c:24:10:9a:13:a7:00:08:6f:ff:55:5b:40:
f1:83:11:1e:a8:ec:a5:55:f9:cf:70:b2:09:7a:2c:
80:18:cd:64:72:93:67:c3:d1:76:45:58:d7:26:58:
18:aa:10:24:a3:f1:7b:92:21:56:b1:2c:58:e1:67:
10:f6:ba:2e:75:d8:67:52:5e:e4:5b:59:24:de:3a:
35:68:31:62:5a:50:db:04:84:94:49:48:13:4f:01:
86:96:82:58:c0:29:61:7b:26:2d:3f:cb:73:25:39:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:8E:68:22:83:5C:02:52:EA:CE:B2:B6:07:21:A4:8B:D8:70:36
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/FAqOaCKDXAJS6s6ytgchpIvYcDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a0:6f:f3:72:88:68:30:f6:ea:c2:40:1e:40:69:11:f8:90:
45:28:3d:cf:ad:92:68:ca:10:ff:40:0a:60:ad:3b:d8:c5:9c:
99:62:40:27:c8:49:b4:f5:fd:2c:8f:ff:cd:0f:71:20:53:20:
84:24:f1:bb:5d:1c:56:a7:93:59:9a:c4:19:cb:21:ad:99:38:
db:fe:d0:cc:88:cd:a9:1a:84:5c:99:46:42:4f:7a:89:cd:a4:
77:55:66:86:28:8f:2d:44:28:f5:8d:9f:4a:66:8b:52:9e:95:
a9:ae:0b:33:67:a8:59:ee:bd:77:f2:18:40:a1:08:ea:f8:78:
f1:81:7b:41:6b:86:a5:54:52:f3:56:28:93:2a:dc:10:fe:c5:
f8:ea:9b:ea:27:12:8e:84:0e:a9:79:21:e2:5c:99:d7:0c:dc:
96:61:8f:fb:4f:c9:69:1b:b0:dd:9b:d9:5e:c6:df:84:c8:9d:
3b:3e:51:f3:db:5c:75:62:a7:ea:2b:a2:35:86:69:d5:ad:76:
a1:af:55:a2:8b:59:50:59:6c:55:84:01:ba:b1:48:03:6d:e1:
39:27:65:8a:c4:f8:0a:33:a4:af:56:15:01:11:2a:ac:d7:a1:
51:3c:fb:7a:7e:98:d3:36:53:40:62:c4:f4:86:3e:93:eb:c1:
f7:5f:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-fra.rpki-client.org