Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/FlmOOUB0UeJOXnm118WnTvOeHoA.roa
File: FlmOOUB0UeJOXnm118WnTvOeHoA.roa (raw, json)
Hash identifier: 4W1LmKIQUYyZJRH82LuAFDo/6vc7lZAMUD6Qn4Ez1LM=
Subject key identifier: 16:59:8E:39:40:74:51:E2:4E:5E:79:B5:D7:C5:A7:4E:F3:9E:1E:80
Certificate issuer: /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial: 018AFCF74477FCAA308D1EE2F95BDABC54B1
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/FlmOOUB0UeJOXnm118WnTvOeHoA.roa
Signing time: Wed 04 Oct 2023 23:12:57 +0000
ROA not before: Wed 04 Oct 2023 23:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 194.45.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:f7:44:77:fc:aa:30:8d:1e:e2:f9:5b:da:bc:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
Validity
Not Before: Oct 4 23:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16598e39407451e24e5e79b5d7c5a74ef39e1e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:c1:f6:b6:2c:76:64:cc:e3:bf:62:be:1d:
03:4f:7a:4c:82:70:0d:e7:c2:d9:59:62:7d:1a:a7:
48:5e:9b:9a:a2:65:e0:f7:21:5c:dc:29:8f:e6:ea:
ad:f9:7c:41:c0:92:c3:00:17:d9:51:9a:ca:1e:99:
27:92:e4:e4:69:b4:a0:01:6d:09:65:1b:7c:42:17:
f0:ca:b4:9f:20:32:10:9d:8f:56:a1:e5:fc:2b:e1:
7b:88:7c:df:a2:27:7f:18:b7:44:02:a1:fa:d2:15:
c3:0f:76:0d:f9:d9:26:ea:29:eb:47:11:9f:67:e6:
71:bf:1a:94:7e:e7:c0:5a:3a:82:1a:77:76:3f:ad:
f8:04:5b:68:91:32:20:21:bb:e9:5d:29:b9:81:0e:
b0:03:b3:d2:b4:5b:29:8a:08:8c:2f:81:b6:d3:1f:
b2:48:fa:ad:21:37:b5:8c:40:51:b2:cf:bd:c1:bd:
66:44:6f:44:34:c4:72:51:47:94:ee:18:60:35:45:
39:ae:57:02:69:85:bd:56:1c:2c:6d:0d:13:cb:11:
49:c7:fc:2b:6c:f9:68:73:58:e3:6d:f5:77:e5:dd:
1f:3e:4b:15:66:f6:19:20:5f:43:0a:08:5d:7d:a0:
05:61:35:4e:71:91:13:85:91:b0:bf:b2:f4:af:31:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:8E:39:40:74:51:E2:4E:5E:79:B5:D7:C5:A7:4E:F3:9E:1E:80
X509v3 Authority Key Identifier:
keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/FlmOOUB0UeJOXnm118WnTvOeHoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
97:98:4e:23:79:4b:4a:31:17:8e:1d:72:5a:1d:40:9f:20:ca:
ff:50:d2:f2:2f:4a:dc:cf:14:6b:b1:4e:9d:96:20:fb:d2:04:
e6:07:3f:21:0a:04:8c:75:a4:41:da:2e:55:db:d1:d2:3a:b8:
06:bd:0b:66:40:0e:ae:a2:7a:de:12:89:c2:5e:62:a5:b4:d8:
5b:ba:ef:83:ac:5e:26:0d:d1:eb:f4:11:16:51:34:61:24:f2:
66:c2:74:38:91:78:18:ba:b2:e5:e4:48:97:46:ef:17:51:5d:
15:5e:1f:83:04:4c:f7:d4:1c:ce:a6:fb:af:21:16:74:26:6b:
e3:b1:e1:07:1d:fc:fb:84:22:df:50:24:41:74:78:2b:2c:dc:
cd:de:7d:ee:3c:07:cb:ce:5b:e0:6c:8c:46:da:40:19:51:1a:
80:54:15:e1:ff:f9:d0:2f:c0:4e:b1:78:09:7b:44:56:9a:7f:
48:02:b3:d8:43:7f:68:7b:d7:04:fb:55:4d:18:54:97:46:9f:
f5:7e:15:6b:c4:67:11:8e:be:a9:56:a6:70:d2:62:9c:74:b6:
d9:db:27:b7:17:9e:84:12:13:d1:9a:ea:03:cf:74:25:15:fd:
02:af:0d:66:4d:47:8d:35:f4:c5:e4:ff:00:03:5d:bf:ee:5c:
1a:26:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 16:28:59 2023 by rpki-client on console-ams.rpki-client.org