Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/Fe3j_M1a348nFHPQ8avVynCT_E4.roa
File: Fe3j_M1a348nFHPQ8avVynCT_E4.roa (raw, json)
Hash identifier: RdM56VsMRGSTysq82U1biKtfwGRrVjUPeulGo06+jvo=
Subject key identifier: 15:ED:E3:FC:CD:5A:DF:8F:27:14:73:D0:F1:AB:D5:CA:70:93:FC:4E
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 0864264A
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/Fe3j_M1a348nFHPQ8avVynCT_E4.roa
Signing time: Sun 12 Jun 2022 07:08:03 +0000
ROA not before: Sun 12 Jun 2022 07:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62000
IP address blocks: 194.147.47.0/24 maxlen: 24
194.147.67.0/24 maxlen: 24
194.146.126.0/24 maxlen: 24
2a0b:b800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140781130 (0x864264a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jun 12 07:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15ede3fccd5adf8f271473d0f1abd5ca7093fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:e7:96:a8:2e:18:ab:80:32:a8:e9:49:d5:
90:fd:92:27:e5:bc:50:b0:d7:d4:ad:38:46:2c:ef:
15:97:2c:86:92:3a:d4:ba:4b:34:a1:50:db:59:0a:
dc:aa:07:ba:5c:88:de:c6:4d:ed:b7:df:80:cf:a9:
3f:0e:3d:e7:63:4e:ab:02:7c:6b:26:0c:84:9b:e5:
4e:5d:07:e6:30:fd:f9:31:95:b7:db:bc:f0:91:ac:
d5:10:c5:7d:87:c9:ab:50:40:af:f6:03:2a:ab:47:
a1:00:de:d4:ab:96:c7:71:f1:76:68:7c:3e:5f:20:
a9:18:6c:20:5f:3c:d9:98:56:30:2b:75:8d:49:53:
84:11:a1:03:79:f6:2a:a5:f9:3c:0c:bb:8d:10:ec:
78:33:4d:b7:a7:4c:4f:83:94:7b:1b:23:d8:ac:6e:
88:62:b1:e1:ca:76:53:8c:61:e7:55:30:c2:1c:98:
f2:d0:3d:41:99:3a:97:76:f9:09:95:5a:b2:9a:3d:
8b:af:1c:93:6a:de:87:53:8c:cb:c5:34:7d:31:98:
79:51:bf:b7:75:7d:bb:d6:26:fd:fe:06:f8:a4:38:
52:2d:b4:56:a5:cb:94:a5:1c:fe:0d:4e:09:61:03:
1a:e1:28:d2:ab:d3:5c:5e:4a:cd:d6:d2:fa:ab:2c:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:E3:FC:CD:5A:DF:8F:27:14:73:D0:F1:AB:D5:CA:70:93:FC:4E
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/Fe3j_M1a348nFHPQ8avVynCT_E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.126.0/24
194.147.47.0/24
194.147.67.0/24
IPv6:
2a0b:b800::/29
Signature Algorithm: sha256WithRSAEncryption
12:2b:ff:56:98:7f:56:9d:75:83:2b:6e:57:6b:d4:e9:80:48:
69:18:2a:a3:1c:f4:ed:06:0c:0c:fb:52:2e:2c:7a:09:4d:39:
af:12:65:36:21:31:55:26:fe:04:e5:76:76:ba:2e:a7:3a:9c:
de:18:94:d9:e6:d0:72:12:1a:a6:dc:ac:1b:17:f9:17:47:6a:
ec:b4:98:e8:2b:1f:09:a3:70:0c:cf:80:61:dc:3f:19:cc:7e:
fb:d3:10:07:f7:e7:e0:13:32:af:0a:8f:60:7e:b9:28:71:56:
c7:85:54:4f:77:28:fe:b3:f0:68:d2:7f:35:e9:87:e7:89:f4:
33:46:d3:6d:d1:55:31:50:d8:21:ab:32:d2:33:70:da:d9:69:
e8:48:00:eb:c9:55:44:9d:5f:7a:4d:50:0d:3d:e0:0f:29:50:
af:00:aa:72:b2:2d:cd:f1:d0:60:3f:57:fa:36:4a:88:fb:a7:
c8:cb:d4:ba:4e:a2:07:62:14:81:90:cb:13:b8:02:41:15:4c:
a4:a9:25:5f:d9:ac:42:3b:1d:09:82:f0:5e:c9:7b:c9:75:3e:
0b:c6:b0:60:68:2d:e0:3b:cb:c9:f5:96:9e:85:9e:7f:45:d7:
e2:08:d9:17:06:69:9b:7b:7b:e3:c1:4a:25:86:4d:cc:21:85:
b2:50:20:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org