Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/fy_ff4N_jyUtDOisCi9MsEnvX54.roa
File: fy_ff4N_jyUtDOisCi9MsEnvX54.roa (raw, json)
Hash identifier: 9LsBq8bImm11sI+st2kWLbMQ0d1s8ZjQJ0LjvxkpewI=
Subject key identifier: 7F:2F:DF:7F:83:7F:8F:25:2D:0C:E8:AC:0A:2F:4C:B0:49:EF:5F:9E
Certificate issuer: /CN=740552b681203fa6db80f0a75deecd720584dd0e
Certificate serial: 06DE856F
Authority key identifier: 74:05:52:B6:81:20:3F:A6:DB:80:F0:A7:5D:EE:CD:72:05:84:DD:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAVStoEgP6bbgPCnXe7NcgWE3Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/fy_ff4N_jyUtDOisCi9MsEnvX54.roa
Signing time: Sat 01 Jan 2022 03:51:13 +0000
ROA not before: Sat 01 Jan 2022 03:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205987
IP address blocks: 185.199.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115246447 (0x6de856f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740552b681203fa6db80f0a75deecd720584dd0e
Validity
Not Before: Jan 1 03:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f2fdf7f837f8f252d0ce8ac0a2f4cb049ef5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:45:9d:39:24:7e:f8:c2:26:cb:0e:23:b0:
7f:9f:63:8b:21:95:c6:bc:1a:e4:4f:52:1e:13:81:
de:b6:60:d1:0d:40:46:ae:28:23:b8:b1:78:4c:97:
c8:97:3a:1e:f6:b3:3e:f4:1e:1e:73:44:ca:03:5c:
4b:07:ba:ab:c4:b1:e4:32:ae:4a:1b:52:ea:e3:60:
f7:b6:e9:8a:20:87:8b:f2:92:83:81:ed:82:98:8d:
cb:32:fd:e5:fe:87:61:96:90:0a:e0:dd:7e:f8:30:
f5:33:21:bd:d9:f4:77:c6:f2:16:d9:bd:df:77:c4:
21:84:e8:b6:fd:25:6a:b0:b4:50:92:96:07:9f:52:
e9:55:28:f5:4a:53:3b:c5:2c:a5:07:50:b7:88:af:
1a:c4:92:5c:13:ea:9c:c0:ef:6a:59:74:4a:08:43:
c2:93:c5:7c:0b:d1:0c:0e:58:46:f0:00:af:83:c7:
3a:1c:bf:09:1f:30:55:bf:b7:42:1c:f0:4f:2d:97:
6d:87:00:69:2b:0b:c2:cc:3a:91:27:c0:61:a0:00:
19:5a:16:6e:60:66:b0:17:e9:ca:2f:00:f7:e0:ee:
ef:49:bd:dd:85:53:27:de:fb:ab:ca:4d:52:aa:d3:
7f:db:b1:11:46:06:ff:b4:45:bf:95:bb:d9:4a:62:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:DF:7F:83:7F:8F:25:2D:0C:E8:AC:0A:2F:4C:B0:49:EF:5F:9E
X509v3 Authority Key Identifier:
keyid:74:05:52:B6:81:20:3F:A6:DB:80:F0:A7:5D:EE:CD:72:05:84:DD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAVStoEgP6bbgPCnXe7NcgWE3Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/fy_ff4N_jyUtDOisCi9MsEnvX54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ff0c59-3787-4bca-9a0a-e58c19f882ad/1/dAVStoEgP6bbgPCnXe7NcgWE3Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.72.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a9:c6:e8:6d:69:ad:19:82:8f:da:32:25:9d:54:9d:e7:83:
0a:c7:49:64:7b:04:13:ad:35:c2:75:47:25:d5:dd:af:d3:b3:
80:c8:1f:2d:54:d3:e3:98:95:76:e9:7f:b0:ab:dc:fe:e5:15:
7b:d0:fb:81:4d:88:9c:df:a6:2f:83:af:ec:45:1d:71:85:eb:
0f:e9:87:a4:7f:df:d4:6f:fe:52:d5:20:ce:56:14:dd:0a:dc:
8d:68:16:39:10:cd:0e:c8:19:18:52:da:c4:bc:f0:e4:e8:6d:
d1:3b:2f:9c:0a:0a:a2:23:d6:17:83:88:e7:58:9f:60:62:5e:
f7:ae:b4:0a:37:6b:55:14:30:8c:2e:6f:3b:b3:0f:22:32:b4:
67:43:46:d7:a2:8e:4c:b3:16:8d:08:ea:90:5b:00:04:3b:65:
b1:01:f6:05:c7:a3:3d:8a:b4:68:2b:85:c3:0d:71:de:48:1b:
18:11:44:94:8d:52:f5:8e:99:a0:4a:2e:40:b1:7c:b4:60:04:
d1:00:59:3e:59:54:be:28:9a:6f:e7:ff:6c:90:ba:05:9a:91:
da:43:c5:09:4c:12:72:53:2a:43:ce:c3:e7:20:95:12:ad:92:
c6:d9:41:c1:5b:d4:1b:b8:ca:2a:ab:55:39:2d:9c:24:f2:d1:
f1:c1:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:43 2024 by rpki-client on console-ams.rpki-client.org