Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/FJNIDyMh_Q7GT-U7UmM3Hx-6-wQ.roa
File: FJNIDyMh_Q7GT-U7UmM3Hx-6-wQ.roa (raw, json)
Hash identifier: SvUqaSRkNZ9ouAXSDqsV7lvnoTy5VmeQI4v+dl6NUtY=
Subject key identifier: 14:93:48:0F:23:21:FD:0E:C6:4F:E5:3B:52:63:37:1F:1F:BA:FB:04
Certificate issuer: /CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Certificate serial: 01857079B7082CED3E22C2C77C05177C1E79
Authority key identifier: 5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/FJNIDyMh_Q7GT-U7UmM3Hx-6-wQ.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210285
IP address blocks: 2001:678:9d8::/48 maxlen: 48
2001:678:9f4::/48 maxlen: 48
2001:678:9dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b7:08:2c:ed:3e:22:c2:c7:7c:05:17:7c:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1493480f2321fd0ec64fe53b5263371f1fbafb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:5e:7c:b8:ac:d0:64:5a:ef:82:59:4f:a1:
3f:6e:ef:bc:35:73:1f:3b:f4:15:bd:c3:7e:46:3e:
f4:bb:1b:3f:df:ff:82:73:99:f0:f4:c5:57:50:51:
58:8c:5c:8e:ca:e6:3c:87:39:6b:fa:75:18:d4:ef:
c1:32:09:12:e9:34:9a:ad:8e:b6:6b:d9:77:5c:45:
ea:be:15:26:7d:4e:27:09:77:85:3f:c1:db:78:28:
c0:30:99:54:3b:10:1f:3f:5f:21:85:a2:98:14:9f:
ad:0c:00:7c:85:25:46:ed:04:b7:96:55:4b:e8:49:
91:28:67:e5:4c:ef:16:89:11:4e:32:e5:df:ff:35:
33:fd:a0:3b:4f:5b:99:63:dd:ac:ec:db:16:fa:6c:
92:80:3f:a6:48:6c:26:a8:b7:09:fe:98:97:09:c4:
50:bd:a4:4c:c6:7d:72:08:87:37:bc:98:99:2f:f2:
fd:85:f8:24:bc:c2:8b:b0:e7:b8:57:60:7f:cc:28:
f4:84:85:1b:31:f9:2e:15:36:7d:f0:a9:cf:52:7d:
f5:fe:ad:9a:1d:0c:2e:b1:c3:34:e4:21:53:1c:6d:
73:47:6f:a5:24:f1:00:eb:92:49:9b:ae:a8:32:a7:
0a:28:10:a9:63:31:44:50:4b:71:fa:f9:db:ac:8c:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:48:0F:23:21:FD:0E:C6:4F:E5:3B:52:63:37:1F:1F:BA:FB:04
X509v3 Authority Key Identifier:
keyid:5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/FJNIDyMh_Q7GT-U7UmM3Hx-6-wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9d8::/48
2001:678:9dc::/48
2001:678:9f4::/48
Signature Algorithm: sha256WithRSAEncryption
11:d6:5d:f4:18:e1:fc:a3:15:d1:40:ed:54:73:9d:a8:c8:62:
4e:66:b3:d7:50:6a:ee:7a:8d:aa:74:ba:d4:38:01:07:bd:33:
0b:d0:65:cd:03:dc:b4:9c:6c:36:d0:5b:05:00:4b:c1:66:04:
71:a7:4e:09:07:8d:8e:a5:50:4e:fc:69:13:30:2b:04:89:84:
62:d6:47:c9:80:fe:ba:86:d2:0d:d3:f1:07:0a:c6:96:a8:cd:
4b:66:f6:a2:f3:a9:2e:51:6d:aa:6b:44:76:c6:3b:21:fa:e3:
57:10:b0:7b:52:f1:33:be:3b:7c:eb:63:c5:eb:4e:8d:73:6d:
47:85:3b:0d:6d:ae:fb:ea:07:1d:07:8f:94:10:cf:e0:0b:50:
5b:aa:a5:9d:aa:29:a0:54:9e:98:fe:23:a3:1f:81:69:f1:09:
13:4a:1b:19:30:24:a1:43:71:a2:be:45:e0:f5:e2:2c:a3:c1:
2a:52:39:ef:41:42:d6:d8:5a:2b:98:da:87:22:2f:5a:ce:f5:
73:b3:77:2b:80:b8:73:4e:63:c8:21:16:76:81:24:11:4e:51:
d3:8a:36:9e:e0:59:bd:fb:42:bf:5b:c7:81:ea:e7:bc:ed:a2:
c3:8a:6e:46:95:da:3a:4f:c1:48:da:4d:f7:2d:72:49:a0:1c:
50:26:cc:21
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwebcILO0+IsLHfAUXfB55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMGI2NzVkZjE5OWQyYTUwNTZiYWViNzczZGJlMDE3YTYx
NGM0YWIwHhcNMjMwMTAyMDMxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDkzNDgwZjIzMjFmZDBlYzY0ZmU1M2I1MjYzMzcxZjFmYmFmYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx75efLis0GRa74JZT6E/bu+8NXMf
O/QVvcN+Rj70uxs/3/+Cc5nw9MVXUFFYjFyOyuY8hzlr+nUY1O/BMgkS6TSarY62
a9l3XEXqvhUmfU4nCXeFP8HbeCjAMJlUOxAfP18hhaKYFJ+tDAB8hSVG7QS3llVL
6EmRKGflTO8WiRFOMuXf/zUz/aA7T1uZY92s7NsW+mySgD+mSGwmqLcJ/piXCcRQ
vaRMxn1yCIc3vJiZL/L9hfgkvMKLsOe4V2B/zCj0hIUbMfkuFTZ98KnPUn31/q2a
HQwuscM05CFTHG1zR2+lJPEA65JJm66oMqcKKBCpYzFEUEtx+vnbrIxnSwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBSTSA8jIf0Oxk/lO1JjNx8fuvsEMB8GA1UdIwQY
MBaAFF4LZ13xmdKlBWuut3Pb4BemFMSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGd0blhmR1owcVVGYTY2M2M5dmdGNllVeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OGZjZDItZDRmNi00MDliLTllYTMt
Yjc0MWU0MzA4YTdkLzEvRkpOSUR5TWhfUTdHVC1VN1VtTTNIeC02LXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85OGZjZDItZDRmNi00MDliLTllYTMtYjc0MWU0MzA4YTdk
LzEvWGd0blhmR1owcVVGYTY2M2M5dmdGNllVeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeAnY
AwcAIAEGeAncAwcAIAEGeAn0MA0GCSqGSIb3DQEBCwUAA4IBAQAR1l30GOH8oxXR
QO1Uc52oyGJOZrPXUGrueo2qdLrUOAEHvTML0GXNA9y0nGw20FsFAEvBZgRxp04J
B42OpVBO/GkTMCsEiYRi1kfJgP66htIN0/EHCsaWqM1LZvai86kuUW2qa0R2xjsh
+uNXELB7UvEzvjt862PF606Nc21HhTsNba776gcdB4+UEM/gC1BbqqWdqimgVJ6Y
/iOjH4Fp8QkTShsZMCShQ3GivkXg9eIso8EqUjnvQULW2FormNqHIi9azvVzs3cr
gLhzTmPIIRZ2gSQRTlHTijae4Fm9+0K/W8eB6ue87aLDim5Gldo6T8FI2k33LXJJ
oBxQJswh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:39 2024 by rpki-client on console-ams.rpki-client.org