Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/FEzoyF32AMsvqRiW5N9BKABL5fs.roa
File: FEzoyF32AMsvqRiW5N9BKABL5fs.roa (raw, json)
Hash identifier: ESD0LoukYnGS9XBjgiHB02P8I78fadUTYio68fv2te4=
Subject key identifier: 14:4C:E8:C8:5D:F6:00:CB:2F:A9:18:96:E4:DF:41:28:00:4B:E5:FB
Certificate issuer: /CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Certificate serial: 1B285145
Authority key identifier: C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/FEzoyF32AMsvqRiW5N9BKABL5fs.roa
Signing time: Sat 01 Jan 2022 13:59:06 +0000
ROA not before: Sat 01 Jan 2022 13:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 185.97.101.0/24 maxlen: 24
185.97.103.0/24 maxlen: 24
185.97.102.0/23 maxlen: 23
185.97.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455627077 (0x1b285145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c20ab2f244ec6a7f09cf1eb1752e8c328248f2
Validity
Not Before: Jan 1 13:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=144ce8c85df600cb2fa91896e4df4128004be5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:7a:9d:9f:55:bf:2e:71:46:27:49:44:b4:
7d:91:fd:91:94:8e:92:8b:07:3d:ab:93:4c:e9:94:
0c:e3:86:b3:d3:d7:61:28:60:7c:1a:92:47:25:9e:
75:65:5b:9a:b4:a0:ef:0d:21:ca:77:f3:1f:74:7f:
ef:df:d1:46:04:8e:17:39:ae:85:e8:ae:45:7f:2d:
3e:89:1c:d4:2a:88:c4:99:94:a6:21:a7:69:58:c3:
c0:5e:18:ca:7f:2c:5c:c5:02:1c:42:b7:89:f8:8d:
0a:7e:f3:c3:45:b9:3a:98:c8:cb:03:28:31:0f:29:
e1:a4:67:aa:62:c8:61:01:88:f0:a5:76:db:b9:b9:
dd:7f:c5:be:ac:2d:a4:d7:2c:2d:be:65:50:de:1e:
97:be:84:79:e2:e8:91:96:09:c8:3a:21:f3:c6:bd:
ec:6a:bf:38:d9:c7:f1:8a:6e:be:b7:83:5e:fb:e3:
61:74:5c:97:bc:db:0d:e1:ad:90:2c:89:c5:80:7d:
d5:59:00:cf:5a:42:08:69:32:fa:a0:19:42:c1:52:
fb:dd:01:3d:ed:17:a8:a4:16:67:f7:5a:f2:a6:14:
d4:f4:f6:6c:e5:b7:5a:20:53:a6:a8:06:40:76:7c:
86:e0:68:ed:b6:20:b2:73:6e:d2:52:5e:a1:a6:fa:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:E8:C8:5D:F6:00:CB:2F:A9:18:96:E4:DF:41:28:00:4B:E5:FB
X509v3 Authority Key Identifier:
keyid:C4:C2:0A:B2:F2:44:EC:6A:7F:09:CF:1E:B1:75:2E:8C:32:82:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMIKsvJE7Gp_Cc8esXUujDKCSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/FEzoyF32AMsvqRiW5N9BKABL5fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/xMIKsvJE7Gp_Cc8esXUujDKCSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.101.0-185.97.103.255
Signature Algorithm: sha256WithRSAEncryption
9e:94:c6:b6:6f:e3:87:50:62:f7:18:27:da:bd:a5:fd:c3:4f:
2d:10:6d:93:1f:65:fa:62:22:7d:63:b6:0a:d1:47:32:eb:47:
a6:1b:a5:80:e9:de:32:df:ae:6a:fb:f2:8a:12:09:7b:b4:89:
6d:14:d2:22:d6:0b:d1:01:cf:7a:82:55:8f:20:94:7a:e5:af:
84:4a:b4:6b:27:c0:ef:c8:27:6a:d2:2c:4b:9c:2e:4e:5c:83:
e0:54:5d:a1:de:da:ce:e1:6b:ae:49:ae:73:91:56:27:8a:51:
c5:ee:97:2d:48:f5:01:99:67:8d:b5:31:95:8c:47:81:22:62:
dc:77:e9:0b:fc:48:5b:f9:e3:df:97:53:14:bd:8f:cb:62:01:
d9:90:46:84:4e:80:ed:d0:39:5f:0a:20:16:13:c1:d9:72:0f:
85:a6:eb:6d:5c:32:78:64:a7:5e:6e:8d:c4:cd:06:a9:2e:c4:
55:17:84:37:d2:41:f5:49:2c:31:15:83:10:94:8d:f8:23:d9:
38:5c:5d:ca:d3:bc:0e:5e:72:a0:10:22:17:a2:6a:d6:90:65:
d2:bc:71:68:47:27:86:97:45:34:d1:9a:68:e7:78:98:1f:0b:
db:d7:01:94:98:32:bd:14:1e:3a:b5:95:71:1b:c1:e6:2b:30:
1e:48:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:10 2024 by rpki-client on console-fra.rpki-client.org