Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/FPqjyglkac09GF72PjlPiBVx_ew.roa
File: FPqjyglkac09GF72PjlPiBVx_ew.roa (raw, json)
Hash identifier: 5TNfwLuCBQ/0c9Qj+90S6bBN6XFmOs0LhaOpqwB4/BI=
Subject key identifier: 14:FA:A3:CA:09:64:69:CD:3D:18:5E:F6:3E:39:4F:88:15:71:FD:EC
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 01864CD8EF222394F2FF45A6490669EA1A72
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/FPqjyglkac09GF72PjlPiBVx_ew.roa
Signing time: Mon 13 Feb 2023 22:15:30 +0000
ROA not before: Mon 13 Feb 2023 22:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 84.252.112.0/24 maxlen: 24
84.252.114.0/24 maxlen: 24
84.252.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4c:d8:ef:22:23:94:f2:ff:45:a6:49:06:69:ea:1a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Feb 13 22:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14faa3ca096469cd3d185ef63e394f881571fdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:76:0d:79:de:4c:c3:ae:e1:76:ad:4b:1f:
c0:7d:04:2b:37:2c:c6:eb:e8:38:62:43:f3:57:b8:
15:39:0e:c7:3c:bc:9c:8c:c0:02:9b:b2:d1:1e:fa:
c6:40:4b:e5:51:23:91:36:89:b0:a8:43:b8:00:8d:
f5:72:d2:31:4a:e0:03:8b:b5:49:9d:1f:d9:2b:4b:
07:e9:76:3c:16:50:3d:83:18:99:db:d3:89:4d:34:
5a:f3:e0:66:c5:be:9e:95:e2:e9:00:3a:db:f6:a5:
2e:54:21:82:d0:57:25:5e:f2:28:32:33:15:b2:25:
bf:b9:69:4e:48:68:5c:85:3d:87:47:8b:38:c9:9c:
1e:8a:ad:9d:63:b6:2e:42:c6:4c:27:22:df:c0:9d:
64:37:48:85:1e:b7:1c:61:83:32:43:8e:fa:12:6c:
c3:cf:26:9d:7b:bd:b6:22:1d:74:6c:f0:0c:50:bb:
73:35:29:7e:11:77:ec:3c:82:d7:3a:7a:0e:c9:3d:
3a:43:33:d3:2a:2e:65:7f:29:ce:0f:c4:5f:8f:cb:
c0:98:72:d9:2b:b3:35:e0:a1:e8:0c:1f:19:a2:3d:
4c:c2:7f:ba:5f:84:e1:14:91:a3:32:94:f2:7d:ae:
52:7a:29:35:5e:a6:a5:c1:95:4c:88:50:46:36:42:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:A3:CA:09:64:69:CD:3D:18:5E:F6:3E:39:4F:88:15:71:FD:EC
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/FPqjyglkac09GF72PjlPiBVx_ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0-84.252.114.255
Signature Algorithm: sha256WithRSAEncryption
6a:ce:4b:14:5a:73:b6:97:1f:dd:f3:f8:fb:92:2d:0b:c0:e0:
0b:c2:ab:13:3e:03:f1:c6:a5:76:ea:9f:7c:11:11:19:4b:e4:
67:52:83:ae:e8:a3:d7:a0:fb:38:3a:a8:26:bf:78:aa:8b:af:
ab:70:0b:3f:a7:d7:5f:47:12:86:56:36:82:b8:60:07:10:94:
08:cf:98:36:b2:dc:2a:ee:18:6f:09:a1:6c:5d:38:e7:6e:62:
e5:de:2a:dd:2b:de:68:36:fb:18:02:32:92:40:f1:3b:1d:b3:
dc:f6:48:da:ed:40:4c:35:56:78:06:52:c8:d8:45:a4:11:f7:
00:98:b0:7f:0c:8d:9f:17:ad:ed:3b:d3:7b:c0:71:71:4a:f3:
c5:50:11:c8:76:7d:e4:f0:66:d1:47:c1:76:de:22:7d:35:dc:
25:0c:be:ff:64:b7:f8:72:d8:39:29:c5:c7:c5:ff:12:23:f6:
b6:eb:70:a1:00:06:95:4c:83:92:c1:7d:7c:30:64:7d:ef:8b:
92:8a:45:67:d8:e1:3d:6b:1a:c8:35:53:5e:b6:5c:20:f1:16:
d5:24:ef:f4:cd:a6:9e:2e:ee:66:cb:c0:3c:41:85:c2:f1:2f:
40:79:ef:e3:7c:3c:40:d8:d5:6e:f8:ec:b9:01:29:8b:cd:3a:
19:86:19:b3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYZM2O8iI5Ty/0WmSQZp6hpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTdkMDZlZGEzNjFkOTM1NTg4ZTQyN2YzZDk4MzNmOGY3
ZDFkMjAwHhcNMjMwMjEzMjIxNTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGZhYTNjYTA5NjQ2OWNkM2QxODVlZjYzZTM5NGY4ODE1NzFmZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdp2DXneTMOu4XatSx/AfQQrNyzG
6+g4YkPzV7gVOQ7HPLycjMACm7LRHvrGQEvlUSORNomwqEO4AI31ctIxSuADi7VJ
nR/ZK0sH6XY8FlA9gxiZ29OJTTRa8+Bmxb6eleLpADrb9qUuVCGC0FclXvIoMjMV
siW/uWlOSGhchT2HR4s4yZweiq2dY7YuQsZMJyLfwJ1kN0iFHrccYYMyQ476EmzD
zyade722Ih10bPAMULtzNSl+EXfsPILXOnoOyT06QzPTKi5lfynOD8Rfj8vAmHLZ
K7M14KHoDB8Zoj1Mwn+6X4ThFJGjMpTyfa5Seik1XqalwZVMiFBGNkLyjwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBT6o8oJZGnNPRhe9j45T4gVcf3sMB8GA1UdIwQY
MBaAFNmX0G7aNh2TVYjkJ/PZgz+PfR0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpmUWJ0bzJIWk5WaU9Rbjg5bURQNDk5SFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83MDJkYTUtYzJjYi00YjY2LWIyOTkt
ZGM1ZTBjNDZlNzZjLzEvRlBxanlnbGthYzA5R0Y3MlBqbFBpQlZ4X2V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83MDJkYTUtYzJjYi00YjY2LWIyOTktZGM1ZTBjNDZlNzZj
LzEvMlpmUWJ0bzJIWk5WaU9Rbjg5bURQNDk5SFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARU/HAD
BABU/HIwDQYJKoZIhvcNAQELBQADggEBAGrOSxRac7aXH93z+PuSLQvA4AvCqxM+
A/HGpXbqn3wRERlL5GdSg67oo9eg+zg6qCa/eKqLr6twCz+n119HEoZWNoK4YAcQ
lAjPmDay3CruGG8JoWxdOOduYuXeKt0r3mg2+xgCMpJA8Tsds9z2SNrtQEw1VngG
UsjYRaQR9wCYsH8MjZ8Xre0703vAcXFK88VQEch2feTwZtFHwXbeIn013CUMvv9k
t/hy2DkpxcfF/xIj9rbrcKEABpVMg5LBfXwwZH3vi5KKRWfY4T1rGsg1U162XCDx
FtUk7/TNpp4u7mbLwDxBhcLxL0B57+N8PEDY1W747LkBKYvNOhmGGbM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org