Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/FkskJYL_oj5G4U28DYMibWUfFLM.roa
File: FkskJYL_oj5G4U28DYMibWUfFLM.roa (raw, json)
Hash identifier: SfiWLSwS8eiZ6MUq8lgmSzZ+xuSX8n0/C+hgCBzxaKM=
Subject key identifier: 16:4B:24:25:82:FF:A2:3E:46:E1:4D:BC:0D:83:22:6D:65:1F:14:B3
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018BA94ED6DC1DA152836E39B7C71FD52987
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/FkskJYL_oj5G4U28DYMibWUfFLM.roa
Signing time: Tue 07 Nov 2023 10:23:18 +0000
ROA not before: Tue 07 Nov 2023 10:23:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.206.64.0/21 maxlen: 24
82.206.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:4e:d6:dc:1d:a1:52:83:6e:39:b7:c7:1f:d5:29:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 7 10:23:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164b242582ffa23e46e14dbc0d83226d651f14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:1a:db:2c:0c:69:b6:81:58:91:9b:f5:8e:
8d:36:9e:e5:31:c7:da:88:ab:73:f6:95:a3:8b:98:
47:70:ab:4d:4f:75:ff:64:b4:c6:15:e2:7c:9d:95:
05:a9:e1:8f:6e:81:42:9d:d8:d3:55:bb:9b:a8:36:
58:0e:92:e5:58:c2:84:27:61:e1:1b:d6:55:ac:86:
85:f5:ca:19:a6:98:5b:37:3c:47:71:3c:d5:d6:21:
57:38:5a:7a:ee:7c:15:17:fc:72:92:ca:c0:30:98:
ad:44:45:2d:09:82:7d:0e:bf:04:13:07:fb:5b:1a:
d5:b5:60:aa:dd:2c:ae:d4:5e:f4:0d:9e:d7:ac:cd:
d5:c9:04:0d:5b:cd:49:10:d1:69:76:50:32:fa:c9:
ab:e2:d8:5d:f2:31:a5:57:c1:df:2d:0b:b5:ea:0e:
ec:30:59:27:0e:c0:e5:55:7d:de:60:a2:e0:e7:a0:
10:76:04:2e:79:1e:85:83:38:aa:a5:27:53:5a:06:
dd:9c:e9:aa:ed:1a:71:51:83:15:dc:06:26:2f:42:
a1:5a:27:71:a3:c2:16:14:99:de:39:2d:4d:cd:40:
11:f2:79:dc:53:64:23:66:56:ae:89:67:91:be:96:
7c:c4:91:e0:7e:87:77:32:f3:d0:83:ab:c9:a6:cc:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:24:25:82:FF:A2:3E:46:E1:4D:BC:0D:83:22:6D:65:1F:14:B3
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/FkskJYL_oj5G4U28DYMibWUfFLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.64.0/20
Signature Algorithm: sha256WithRSAEncryption
02:62:5b:a2:37:6e:79:3c:5e:3b:7d:ea:f8:f5:b1:a0:79:08:
81:f9:ed:bf:22:81:b4:dd:90:b1:88:ed:2e:0e:b9:be:95:6e:
34:6f:62:9d:c5:6b:76:50:f5:fb:47:79:9e:ab:5b:de:7f:4a:
4f:df:5f:27:49:7f:6c:70:3d:03:0a:fa:1e:05:c4:c9:cc:f6:
8e:ec:ac:39:fe:1b:1f:a4:42:d3:52:34:13:42:f8:c3:04:72:
a7:98:69:e5:81:c2:e5:7d:66:91:17:49:57:c2:4a:e6:1f:f0:
f7:70:4f:a3:19:03:aa:0d:80:a1:4e:57:db:57:83:38:62:8e:
13:18:32:39:8b:0a:8a:6f:b1:05:6d:6d:27:a6:8f:7e:55:48:
67:39:aa:e4:05:5b:93:eb:f1:82:a8:d2:46:2d:87:cf:f4:26:
cd:bf:a6:d7:ed:f4:d0:ca:29:11:49:3a:4e:9f:80:c5:3d:15:
08:95:55:a6:bb:cc:5f:a7:4e:a5:97:79:dc:05:d8:fb:03:c7:
c6:5f:38:a1:7d:2e:5e:82:46:5a:79:31:f7:8a:a5:87:f3:33:
8d:75:e6:4e:88:e2:8b:1d:61:f7:ca:a3:c5:4a:da:a2:bd:c3:
13:37:b3:e6:59:a2:db:c0:92:06:c4:33:78:ed:03:6c:ba:44:
75:ab:3f:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYupTtbcHaFSg245t8cf1SmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjMxMTA3MTAyMzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRiMjQyNTgyZmZhMjNlNDZlMTRkYmMwZDgzMjI2ZDY1MWYxNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFga2ywMabaBWJGb9Y6NNp7lMcfa
iKtz9pWji5hHcKtNT3X/ZLTGFeJ8nZUFqeGPboFCndjTVbubqDZYDpLlWMKEJ2Hh
G9ZVrIaF9coZpphbNzxHcTzV1iFXOFp67nwVF/xyksrAMJitREUtCYJ9Dr8EEwf7
WxrVtWCq3Syu1F70DZ7XrM3VyQQNW81JENFpdlAy+smr4thd8jGlV8HfLQu16g7s
MFknDsDlVX3eYKLg56AQdgQueR6FgziqpSdTWgbdnOmq7RpxUYMV3AYmL0KhWidx
o8IWFJneOS1NzUAR8nncU2QjZlauiWeRvpZ8xJHgfod3MvPQg6vJpszG1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZLJCWC/6I+RuFNvA2DIm1lHxSzMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvRmtza0pZTF9vajVHNFUyOERZTWliV1VmRkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUs5AMA0G
CSqGSIb3DQEBCwUAA4IBAQACYluiN255PF47fer49bGgeQiB+e2/IoG03ZCxiO0u
Drm+lW40b2KdxWt2UPX7R3meq1vef0pP318nSX9scD0DCvoeBcTJzPaO7Kw5/hsf
pELTUjQTQvjDBHKnmGnlgcLlfWaRF0lXwkrmH/D3cE+jGQOqDYChTlfbV4M4Yo4T
GDI5iwqKb7EFbW0npo9+VUhnOarkBVuT6/GCqNJGLYfP9CbNv6bX7fTQyikRSTpO
n4DFPRUIlVWmu8xfp06ll3ncBdj7A8fGXzihfS5egkZaeTH3iqWH8zONdeZOiOKL
HWH3yqPFStqivcMTN7PmWaLbwJIGxDN47QNsukR1qz/h
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:54 2025 by rpki-client