Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/FZK-3KWiXnxQIKi7XHGRUzC5KSw.roa
File: FZK-3KWiXnxQIKi7XHGRUzC5KSw.roa (raw, json)
Hash identifier: QCEfiBURGCjLRonZ/LdrDPsjG7CwZ1zG0PgwLmMUXKU=
Subject key identifier: 15:92:BE:DC:A5:A2:5E:7C:50:20:A8:BB:5C:71:91:53:30:B9:29:2C
Certificate issuer: /CN=243603eff76daf94542f23d560f9fca579ac97ed
Certificate serial: C5CB61
Authority key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/FZK-3KWiXnxQIKi7XHGRUzC5KSw.roa
Signing time: Sat 01 Jan 2022 06:56:45 +0000
ROA not before: Sat 01 Jan 2022 06:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 62.106.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12962657 (0xc5cb61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=243603eff76daf94542f23d560f9fca579ac97ed
Validity
Not Before: Jan 1 06:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1592bedca5a25e7c5020a8bb5c71915330b9292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:49:20:e0:ba:9c:8d:38:7a:ef:68:a5:cc:
81:ee:6b:12:ee:ab:a4:9e:0c:fd:cd:93:70:bf:46:
a9:3d:95:58:d1:dc:ca:2a:97:47:8d:be:67:1a:3d:
7d:b6:64:87:14:4b:e8:20:36:d7:0f:04:cb:45:16:
a5:a0:9b:40:c1:6f:a7:05:fe:c9:19:c8:6b:0f:a4:
e8:27:96:01:5c:30:e1:e3:5f:7b:fd:0a:b1:a4:a1:
84:39:aa:2a:14:fd:b1:5b:ab:c2:03:84:eb:76:95:
bc:9a:7e:39:20:06:d4:42:a4:92:a5:ca:92:b3:1e:
68:8e:54:fc:17:f7:52:d2:2d:3a:08:9f:c9:51:87:
e1:11:22:f4:18:c8:1d:1b:7d:8d:53:16:d1:3c:dd:
c0:4d:15:80:b4:aa:96:17:e1:fe:fd:0c:d0:33:90:
8b:45:f9:bf:0d:e2:ec:45:6a:ae:84:d5:91:f4:5a:
96:d2:15:cf:35:0f:99:e9:af:8c:65:74:b3:3e:b7:
a0:88:b8:ab:ac:ac:14:89:62:d6:88:ef:dc:ff:0c:
02:cd:52:be:e0:a9:28:4c:d1:8d:8b:7b:e5:fd:a4:
ab:c6:11:ad:a4:b2:21:2e:c3:0c:fb:23:bc:a3:c5:
de:7e:4e:ed:9d:a0:eb:08:a3:15:b0:8f:22:04:6c:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:92:BE:DC:A5:A2:5E:7C:50:20:A8:BB:5C:71:91:53:30:B9:29:2C
X509v3 Authority Key Identifier:
keyid:24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/FZK-3KWiXnxQIKi7XHGRUzC5KSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
87:16:20:cb:e7:96:83:9a:a3:21:2c:2c:e2:96:83:ed:1a:e8:
57:e0:06:5b:71:76:ad:9c:74:b6:b3:da:7e:b2:9a:a5:c0:2e:
e0:eb:29:4e:0e:c3:62:fb:84:8b:e4:80:54:77:89:70:c5:be:
df:a4:37:8d:57:15:f8:48:66:c6:df:17:8c:5f:e7:84:4a:28:
f4:a1:67:ba:83:b2:81:87:56:d4:9f:f6:af:d1:a1:df:a0:a1:
58:ed:e4:38:5b:17:c2:4f:ff:b8:c1:b8:84:d1:08:f9:b9:37:
4d:9c:13:ef:6f:3f:ed:9a:0f:0e:11:16:df:93:25:79:dc:06:
95:27:21:e0:88:e4:ef:11:f6:55:14:72:6d:51:bf:18:48:ae:
c6:fa:1c:6a:d1:7d:f6:9e:8c:a9:44:d4:4f:08:b0:e1:5e:fd:
e5:3a:1d:f0:60:06:b5:05:c8:f5:54:c7:37:74:51:ee:45:1f:
0b:bc:ab:93:9c:1d:fc:8b:44:8c:1b:ad:a6:57:42:4b:5c:10:
35:ad:a1:d4:a1:30:3d:76:be:8a:d6:bc:a7:69:e6:09:38:93:
4d:a9:15:3d:96:fe:25:79:45:1a:f2:e2:2e:8e:88:f5:b3:8a:
a6:37:a0:bb:de:52:19:1d:9e:06:af:6f:22:33:d7:dc:b8:ef:
31:f1:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:32 2024 by rpki-client on console-ams.rpki-client.org