Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/FDYPmsZHyGnVOW4Ex3LyGEu79ec.roa
File: FDYPmsZHyGnVOW4Ex3LyGEu79ec.roa (raw, json)
Hash identifier: YOynqdWai9FfxMMEukBIJ7eqzxS0wU2B4DJNqmqTapM=
Subject key identifier: 14:36:0F:9A:C6:47:C8:69:D5:39:6E:04:C7:72:F2:18:4B:BB:F5:E7
Certificate issuer: /CN=ec82c749731f9543ae9a6242ebcde9b0f183ca7f
Certificate serial: 01856CA5D89B8231D5D4CBC34681D1B991D2
Authority key identifier: EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ILHSXMflUOummJC683psPGDyn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/FDYPmsZHyGnVOW4Ex3LyGEu79ec.roa
Signing time: Sun 01 Jan 2023 09:24:46 +0000
ROA not before: Sun 01 Jan 2023 09:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.255.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:a5:d8:9b:82:31:d5:d4:cb:c3:46:81:d1:b9:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec82c749731f9543ae9a6242ebcde9b0f183ca7f
Validity
Not Before: Jan 1 09:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14360f9ac647c869d5396e04c772f2184bbbf5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:4f:18:96:d4:03:c2:46:e6:fe:48:8e:d2:
fc:48:94:3c:24:b1:a9:72:0b:a9:fc:44:0d:17:d6:
bb:5d:0d:84:15:20:41:b7:53:3a:e2:0d:07:35:d3:
56:a2:bb:a4:2f:77:af:a5:b6:76:0f:66:e9:0a:43:
bf:78:98:4b:0c:a6:ec:6b:77:21:48:7b:8b:3a:76:
0e:d1:4f:c9:55:0b:ff:c7:28:86:2e:6a:85:3e:54:
f9:07:76:c9:9f:33:10:9e:33:db:63:7a:98:bc:a5:
6b:1c:6c:97:a5:cd:b8:8d:ca:24:60:e4:ea:d6:6e:
45:f0:89:5a:b0:07:ae:f8:9f:c9:d2:47:1c:4c:88:
fd:01:5c:c8:f9:bc:af:96:7e:a4:f3:45:3d:03:8a:
58:07:b5:95:4a:93:d3:ba:65:79:78:d5:4e:de:b5:
97:5d:95:45:3f:12:51:69:00:0c:6e:e6:de:d1:43:
43:80:fd:d0:bf:25:1b:01:79:18:47:43:cf:d3:11:
5d:45:1a:c0:26:49:4c:86:3d:27:30:72:36:56:95:
69:19:ed:bf:22:5e:f6:6b:c4:d0:d0:e6:95:7a:74:
c6:5c:40:aa:68:b2:42:ae:ad:47:f7:7b:84:e2:54:
f6:00:56:25:40:22:49:29:da:5e:7b:ce:77:5d:6a:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:0F:9A:C6:47:C8:69:D5:39:6E:04:C7:72:F2:18:4B:BB:F5:E7
X509v3 Authority Key Identifier:
keyid:EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILHSXMflUOummJC683psPGDyn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/FDYPmsZHyGnVOW4Ex3LyGEu79ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/7ILHSXMflUOummJC683psPGDyn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:77:b9:ab:60:57:68:a5:3c:a1:0d:46:b5:36:16:e5:5d:53:
8b:c2:a0:aa:5c:81:0e:bd:22:eb:9e:91:18:3c:7b:68:dd:6a:
45:8d:da:d6:50:c1:10:e7:ef:e8:85:54:81:53:64:5c:3e:af:
d6:16:11:e3:f6:00:17:ff:31:f7:dd:b7:3a:33:df:01:57:10:
1e:46:fc:60:a1:a3:87:b0:52:b5:02:c3:f7:fc:1c:5f:23:d6:
75:c9:00:de:cc:80:a1:e4:24:fb:92:ff:70:d6:61:65:23:40:
61:2d:52:ce:c9:a1:e3:7f:e5:0e:25:a7:83:64:d4:7a:05:63:
ea:88:af:25:7b:fa:16:89:73:26:69:40:3e:e2:13:f0:a3:63:
9b:e6:2b:69:ad:03:7f:bb:26:3d:d2:b8:e6:51:83:95:38:b0:
6c:82:f8:8b:ec:57:8a:52:c1:66:a4:94:44:dd:b1:a0:2f:fb:
0a:5b:58:f3:77:22:0a:f7:dd:97:76:81:93:a9:ce:ba:49:14:
c6:d3:7f:cf:8c:08:fa:06:d8:62:c5:73:3c:1d:57:24:da:fa:
87:6d:2e:80:a6:1d:55:e2:7b:09:06:52:20:95:de:fe:42:d6:
21:b3:db:b1:91:5a:09:40:64:19:4b:50:bf:d0:e1:12:0c:96:
6b:e8:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org