Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/fo_PohY5CY1j5SFP1-D2oLPpUHE.roa
File: fo_PohY5CY1j5SFP1-D2oLPpUHE.roa (raw, json)
Hash identifier: QfA8ZHz8//APIMBNZMoCj8JG1wUk4m2BIa9qKapJiTE=
Subject key identifier: 7E:8F:CF:A2:16:39:09:8D:63:E5:21:4F:D7:E0:F6:A0:B3:E9:50:71
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09B299F7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/fo_PohY5CY1j5SFP1-D2oLPpUHE.roa
Signing time: Mon 21 Feb 2022 18:56:24 +0000
ROA not before: Mon 21 Feb 2022 18:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22333
IP address blocks: 89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162699767 (0x9b299f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 21 18:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e8fcfa21639098d63e5214fd7e0f6a0b3e95071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:27:c0:cc:c3:bc:bf:f0:5c:8c:c1:0b:ac:
81:51:47:7e:9e:a2:ec:2e:0c:c3:f2:9f:a0:b7:68:
ba:3d:bf:2d:51:d3:bd:96:3d:7d:1a:d9:b3:e8:83:
12:58:20:3d:0f:51:93:b8:a5:ca:ef:12:52:83:7f:
7f:ed:c4:a6:f1:00:70:07:b4:f5:bf:6e:84:01:3d:
1b:7b:a4:03:db:26:98:e1:29:ac:41:77:c4:ab:22:
5a:c2:80:24:0f:ae:b8:5e:6c:63:13:81:02:ee:40:
fd:16:b1:28:b7:1f:06:93:a4:88:fb:9d:28:a8:c4:
86:6d:f1:f7:a5:ca:eb:28:8f:a1:6a:0b:d4:e7:33:
84:03:05:4d:61:48:21:6b:04:70:55:1b:39:55:c4:
2f:f4:2d:ba:2e:34:9e:f9:04:9c:5b:bf:9b:78:cb:
ca:80:a0:ec:51:d1:45:18:80:5c:23:82:d4:48:73:
8b:8e:90:12:5c:3d:ae:b9:f2:e0:9e:f0:19:12:5a:
3e:65:a0:b6:d6:c7:9a:b4:ab:6f:f4:72:09:47:8c:
a2:55:63:57:07:0c:18:e1:a1:cc:a0:92:62:5b:6f:
01:5a:b2:da:c3:82:59:60:f1:72:ca:0d:06:db:b4:
7c:d8:9a:cb:bf:50:73:17:e4:36:b7:69:df:3c:90:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:CF:A2:16:39:09:8D:63:E5:21:4F:D7:E0:F6:A0:B3:E9:50:71
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/fo_PohY5CY1j5SFP1-D2oLPpUHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.24.0-89.116.39.255
Signature Algorithm: sha256WithRSAEncryption
40:b2:77:28:47:13:88:e9:cc:73:4b:65:4f:0b:7a:b8:fd:6e:
08:a2:1f:05:60:99:45:93:7a:aa:95:89:a2:35:a3:72:b4:17:
bb:86:c9:92:61:d3:05:f5:a6:1a:8e:1d:e5:a0:76:35:81:41:
9e:8f:a9:79:af:b4:32:a0:fb:49:a0:89:c1:d5:5b:c4:a2:0d:
1c:cc:be:81:ac:59:48:48:c4:70:19:5d:0d:93:38:90:a9:28:
a3:44:e2:ae:e9:2a:83:be:ba:5f:74:73:05:5d:e2:ea:1e:30:
0a:41:c5:a6:0b:9b:69:06:1f:98:c5:40:5a:e2:2c:05:15:a8:
6b:0a:1f:fd:5e:ae:13:87:a7:88:9b:c8:90:e7:57:8f:44:12:
cf:c8:2f:9b:3e:b8:b9:12:46:1a:e2:4c:bb:19:49:0e:da:fc:
bb:3a:38:8a:3e:d9:98:e2:5a:35:2b:56:f3:2a:1c:bb:96:d7:
1e:24:d4:10:b3:9f:66:c3:9f:78:aa:9c:fb:36:05:1a:48:c1:
c5:50:b0:35:bc:f4:4b:a9:d6:1f:27:28:1e:b2:22:c1:b1:e9:
b7:7f:86:13:b3:3c:b9:83:a5:43:19:eb:27:39:c6:bb:fe:47:
3b:65:ec:53:f6:c2:2c:2d:67:b5:94:1f:5d:9a:8c:76:76:a1:
24:2a:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org