Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/fnhw_Fg9joG7nMyGQvMAGva2_V8.roa
File: fnhw_Fg9joG7nMyGQvMAGva2_V8.roa (raw, json)
Hash identifier: GJsLMrk4owJZn/aH7cGP698bBL1RgSZ1hyl50iGgd74=
Subject key identifier: 7E:78:70:FC:58:3D:8E:81:BB:9C:CC:86:42:F3:00:1A:F6:B6:FD:5F
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 0184CE01E36564C9E0515164A05862AA23E0
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/fnhw_Fg9joG7nMyGQvMAGva2_V8.roa
Signing time: Thu 01 Dec 2022 14:05:40 +0000
ROA not before: Thu 01 Dec 2022 14:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 31.6.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:01:e3:65:64:c9:e0:51:51:64:a0:58:62:aa:23:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Dec 1 14:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e7870fc583d8e81bb9ccc8642f3001af6b6fd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:34:f1:18:13:6d:63:a3:47:53:ef:a0:b1:
ed:12:a5:fc:25:23:33:14:6a:e8:7a:fe:76:09:1f:
5d:af:b1:f8:ae:26:21:4c:ed:4d:ed:8a:84:69:ee:
1a:ca:8b:39:f3:2b:82:74:c5:c6:4d:d8:72:59:eb:
ca:18:25:e3:20:6c:4a:39:90:19:58:12:68:d9:22:
c6:72:1e:84:53:3f:b8:cb:02:f5:67:8d:24:99:cb:
f5:c0:41:65:ac:66:76:dd:65:2a:6c:6b:e2:47:b2:
9b:02:75:30:78:00:a9:fc:3e:ee:8a:40:fb:e4:f2:
aa:03:a9:6c:14:f8:cb:a0:91:14:67:60:5c:c9:c3:
f2:d6:d0:88:25:43:d3:f7:0b:97:7c:df:1d:97:9c:
fa:da:1a:88:00:53:91:c9:c8:69:77:a7:87:9d:37:
15:93:20:47:2b:46:6e:00:83:de:99:8d:3d:18:e3:
79:db:82:c8:81:33:48:79:f0:ce:db:06:ca:50:5f:
16:ae:fe:6b:ca:b3:fc:3a:35:49:27:8f:73:e9:dc:
ca:97:ee:17:40:50:0f:fd:02:7e:bc:d8:24:38:79:
b2:cb:a3:51:7a:5d:b3:fb:2e:30:b0:94:7c:a3:58:
17:83:12:13:68:24:cf:02:1f:c2:59:f6:aa:45:b2:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:70:FC:58:3D:8E:81:BB:9C:CC:86:42:F3:00:1A:F6:B6:FD:5F
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/fnhw_Fg9joG7nMyGQvMAGva2_V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.2.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c8:b9:41:3f:9b:51:d6:0f:29:d4:59:c6:af:84:5b:7b:cc:
0a:4d:ca:53:80:6c:8a:27:25:e3:52:94:50:cb:2e:cd:36:54:
19:0a:0b:c8:91:25:a1:85:03:1c:6b:58:5d:e5:84:ee:a5:47:
83:41:76:ae:b3:00:31:75:6c:fa:fc:54:09:8b:4d:14:a3:b1:
c1:76:35:f2:f1:c1:41:82:77:6a:3a:d4:eb:a3:75:87:f7:35:
22:42:6d:44:0d:4d:8d:c2:22:b3:8e:0e:a5:d5:6a:c9:ee:9c:
6d:7b:72:98:b4:bb:6f:63:fa:28:96:c8:01:eb:07:3d:36:c8:
69:0f:80:8e:56:4a:d1:3b:3b:01:1b:98:24:c7:0b:c8:36:f9:
bf:e8:ac:94:1e:dc:f9:9e:49:6d:4b:ad:62:64:cd:ab:aa:af:
49:9f:9d:db:2e:59:11:e0:08:48:9c:a7:20:fb:10:52:71:f4:
b7:d8:22:7e:d4:32:de:1d:84:cd:e9:84:6b:1d:39:8a:4c:a5:
a5:5b:36:4b:35:43:53:33:e1:ef:8f:59:d3:d0:db:c6:99:f5:
27:5a:ed:f6:9f:d1:90:8d:3d:d6:b2:93:f1:3e:d6:92:ce:33:
c0:e6:f2:a3:53:f6:62:c9:ab:c1:4c:5f:dc:cc:94:16:9d:89:
d1:eb:4f:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTOAeNlZMngUVFkoFhiqiPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2VjZTcxZWY2ZWJmNTViYjdiODdlNTA2NjViYTExZmRj
NzdmMDgwHhcNMjIxMjAxMTQwNTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTc4NzBmYzU4M2Q4ZTgxYmI5Y2NjODY0MmYzMDAxYWY2YjZmZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3o08RgTbWOjR1PvoLHtEqX8JSMz
FGroev52CR9dr7H4riYhTO1N7YqEae4ayos58yuCdMXGTdhyWevKGCXjIGxKOZAZ
WBJo2SLGch6EUz+4ywL1Z40kmcv1wEFlrGZ23WUqbGviR7KbAnUweACp/D7uikD7
5PKqA6lsFPjLoJEUZ2BcycPy1tCIJUPT9wuXfN8dl5z62hqIAFORychpd6eHnTcV
kyBHK0ZuAIPemY09GON524LIgTNIefDO2wbKUF8Wrv5ryrP8OjVJJ49z6dzKl+4X
QFAP/QJ+vNgkOHmyy6NRel2z+y4wsJR8o1gXgxITaCTPAh/CWfaqRbKlVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH54cPxYPY6Bu5zMhkLzABr2tv1fMB8GA1UdIwQY
MBaAFNU+znHvbr9Vu3uH5QZluhH9x38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQt
MWMyNjI2NTkwZDI4LzEvZm5od19GZzlqb0c3bk15R1F2TUFHdmEyX1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jODE2NjktMjUxOS00ZGE1LWJkNWQtMWMyNjI2NTkwZDI4
LzEvMVQ3T2NlOXV2MVc3ZTRmbEJtVzZFZjNIZndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYCMA0G
CSqGSIb3DQEBCwUAA4IBAQAyyLlBP5tR1g8p1FnGr4Rbe8wKTcpTgGyKJyXjUpRQ
yy7NNlQZCgvIkSWhhQMca1hd5YTupUeDQXauswAxdWz6/FQJi00Uo7HBdjXy8cFB
gndqOtTro3WH9zUiQm1EDU2NwiKzjg6l1WrJ7pxte3KYtLtvY/oolsgB6wc9Nshp
D4COVkrROzsBG5gkxwvINvm/6KyUHtz5nkltS61iZM2rqq9Jn53bLlkR4AhInKcg
+xBScfS32CJ+1DLeHYTN6YRrHTmKTKWlWzZLNUNTM+Hvj1nT0NvGmfUnWu32n9GQ
jT3WspPxPtaSzjPA5vKjU/ZiyavBTF/czJQWnYnR608U
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org