Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/FTbOE2P8qpo-EFaRfprbwaBw4fs.roa
File: FTbOE2P8qpo-EFaRfprbwaBw4fs.roa (raw, json)
Hash identifier: efrIgPh9RkPz0FWrJtZbGY5iCO2wgpU7gfZWU2a7kv8=
Subject key identifier: 15:36:CE:13:63:FC:AA:9A:3E:10:56:91:7E:9A:DB:C1:A0:70:E1:FB
Certificate issuer: /CN=3934bea04024280609f917b87bed080daf4c7ea4
Certificate serial: 018571A7AEA92FC2A67021246B38E9A1170B
Authority key identifier: 39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/FTbOE2P8qpo-EFaRfprbwaBw4fs.roa
Signing time: Mon 02 Jan 2023 08:44:52 +0000
ROA not before: Mon 02 Jan 2023 08:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.214.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:ae:a9:2f:c2:a6:70:21:24:6b:38:e9:a1:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3934bea04024280609f917b87bed080daf4c7ea4
Validity
Not Before: Jan 2 08:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1536ce1363fcaa9a3e1056917e9adbc1a070e1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:79:4f:01:ef:99:c7:1d:b3:f4:5b:6b:be:
2c:43:6f:54:ec:c9:d0:c2:bc:1f:7d:e0:3b:d0:99:
70:c7:01:42:c2:c1:c5:fc:49:a5:78:ab:8f:bb:eb:
86:eb:17:d4:7c:f0:67:dd:95:fb:5e:da:cb:dd:1f:
df:87:04:96:69:22:c6:ea:a3:49:d5:68:4b:9b:b0:
f2:ed:9e:e6:e7:11:b1:89:13:66:5c:0e:c8:cc:fb:
e9:68:db:a7:3e:6e:79:42:5e:c0:98:7f:b6:eb:f1:
34:5d:f3:3c:41:df:c4:e6:d1:7c:a5:06:c1:f2:f9:
21:cb:57:60:61:d6:7b:37:e9:ee:ac:d7:58:c3:91:
52:6b:c0:95:12:c8:94:9c:35:28:87:c4:bd:30:2f:
b6:cd:37:1e:58:ed:b5:4b:89:83:20:6d:e9:a2:9b:
8d:bb:27:7d:09:50:7e:94:c5:89:99:64:d5:44:40:
59:cc:e5:1f:50:3c:d1:dc:58:83:9e:10:79:c2:ca:
48:21:6c:0f:ed:12:96:68:fd:23:20:d0:94:60:d3:
d6:b0:21:7a:b4:e2:be:29:41:cf:4f:ce:03:96:ae:
b3:a4:09:d5:b3:f9:57:97:63:7f:0a:31:80:18:6f:
91:a5:48:88:78:6c:0e:fe:9b:d1:f3:7f:d9:a5:87:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:CE:13:63:FC:AA:9A:3E:10:56:91:7E:9A:DB:C1:A0:70:E1:FB
X509v3 Authority Key Identifier:
keyid:39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/FTbOE2P8qpo-EFaRfprbwaBw4fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:77:5f:70:ee:73:de:cf:c9:72:84:a7:0a:5a:bd:da:e1:
0f:24:b1:98:52:2a:89:8c:a7:22:16:7d:4d:55:3e:2d:2a:22:
06:a5:21:a3:c8:70:d5:f2:75:44:ed:b9:f8:82:46:bd:e9:f0:
7e:5a:3c:6f:38:3c:00:a2:1b:0b:7c:9d:04:0f:f4:eb:66:7b:
1a:da:63:30:00:ed:ef:59:17:97:16:74:70:59:0a:ec:69:9f:
ea:b3:37:77:f6:98:96:c5:3d:bf:8d:eb:0a:fb:07:d5:15:8f:
e4:11:af:13:f1:71:d6:ff:e8:23:54:1f:36:ea:d5:32:ad:50:
bf:55:34:2a:16:84:58:e9:07:6c:d1:4d:91:89:a8:a2:52:12:
52:01:23:06:25:cc:e4:bd:f2:97:82:2e:f1:6c:da:2f:c9:69:
50:4e:35:74:81:20:28:a2:9b:2a:96:8b:1d:99:29:d1:e1:56:
aa:38:e7:1f:61:77:43:57:4f:e3:8b:15:0f:6b:81:94:af:2e:
b6:80:18:c4:ed:e6:4d:ec:dd:52:16:bd:f7:5f:1b:59:bd:fc:
c2:0c:f1:07:a9:cc:fa:44:73:12:d8:67:8d:6a:9f:c5:fa:01:
34:8d:45:f6:fb:e2:7d:8a:db:b3:57:5c:ec:f2:f6:1b:7c:ed:
f5:20:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org