Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/FgIGP2Pz7oIfOrhykfE1WKadXAw.roa
File: FgIGP2Pz7oIfOrhykfE1WKadXAw.roa (raw, json)
Hash identifier: FirZMWYxOqUGvnAJnwvysQlDftn5Chd+QMGK4rzS9NI=
Subject key identifier: 16:02:06:3F:63:F3:EE:82:1F:3A:B8:72:91:F1:35:58:A6:9D:5C:0C
Certificate issuer: /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial: 0182004A17422B33D06E6056857F44F2EF42
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/FgIGP2Pz7oIfOrhykfE1WKadXAw.roa
Signing time: Fri 15 Jul 2022 05:17:11 +0000
ROA not before: Fri 15 Jul 2022 05:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 141.98.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:4a:17:42:2b:33:d0:6e:60:56:85:7f:44:f2:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Validity
Not Before: Jul 15 05:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1602063f63f3ee821f3ab87291f13558a69d5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:fa:6f:65:84:32:9e:31:18:3d:7d:00:5d:
e3:28:19:f7:74:26:55:3b:ad:50:b4:00:44:b2:04:
4a:11:d9:57:29:69:1d:5a:3d:a3:6b:71:45:65:19:
ce:c5:51:e4:5f:a6:46:c9:83:ce:eb:19:11:29:c3:
ad:70:34:73:2a:49:10:d2:87:c0:af:6a:1a:b0:32:
84:09:65:b5:19:5f:ef:ce:33:65:92:f0:33:0f:e9:
5c:39:e3:64:40:8a:10:86:45:28:a5:9f:ef:fe:a3:
8e:d9:9b:16:d0:2d:e4:a6:81:88:e3:1e:0d:90:be:
38:4c:07:6c:80:ee:ab:fc:32:e3:0b:20:55:f7:de:
3a:47:bf:3c:2e:9c:8a:63:b8:2b:cc:2e:e0:b8:35:
ea:0b:f6:3e:4d:09:c6:e2:ff:96:4c:67:68:ea:cc:
0e:fc:08:46:23:47:3b:f1:7a:a7:ed:24:96:82:b4:
6d:12:8c:73:c8:a5:64:01:11:a0:63:1c:d3:5b:b1:
db:83:71:b6:5a:06:c9:43:15:84:0a:9b:bf:64:b4:
c7:c9:40:05:9a:f7:29:12:f9:a0:27:4a:ae:9e:a7:
ce:32:78:c3:d9:20:c7:96:97:28:66:6e:9a:d8:45:
a3:0d:55:b5:ad:d4:52:b6:d4:33:d3:fc:33:4e:1e:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:06:3F:63:F3:EE:82:1F:3A:B8:72:91:F1:35:58:A6:9D:5C:0C
X509v3 Authority Key Identifier:
keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/FgIGP2Pz7oIfOrhykfE1WKadXAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
04:58:4c:22:1b:94:0f:fa:a9:b4:ff:aa:da:b4:d6:1e:2b:2d:
5a:8e:b8:29:19:5e:36:d5:f5:93:55:0d:fb:f8:ed:64:15:6e:
95:69:11:84:7b:45:e9:60:86:90:d6:c1:ac:d8:4e:a8:3c:fd:
7f:35:e7:0b:ae:7a:74:23:b7:0d:d1:ba:dc:da:bc:6d:3f:b4:
39:c3:58:d4:b3:0c:5c:ce:80:fa:68:20:d4:e6:c4:19:3f:8a:
ec:db:0c:6b:56:d9:dc:a1:dd:e9:84:82:84:12:b9:a8:b5:f6:
90:19:05:18:51:09:92:39:d9:8d:98:a7:b5:8c:01:97:ad:f3:
c4:ca:1f:2f:8f:0e:ea:17:d4:70:15:99:54:37:a9:09:8a:9e:
64:f0:87:61:3c:5c:df:4f:50:df:e0:86:bb:56:33:d7:99:6b:
3b:11:52:8b:39:b0:78:e7:8a:4a:60:a7:41:df:cc:7c:5f:21:
90:6d:c8:98:0c:50:93:8c:e6:9d:74:d2:d7:da:66:9a:1e:61:
2c:41:b2:7d:f9:d7:18:15:d8:ac:d8:a0:e0:a2:df:25:74:47:
53:02:68:3b:6c:ae:0d:3f:18:b0:68:13:b5:68:7f:24:42:5d:
99:d4:dd:60:5d:5c:e2:d0:d2:b9:44:8c:41:3a:3a:97:bd:31:
51:c2:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:50 2025 by rpki-client