Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FNmir3P3J8aahF636Eo8P3ZI9F0.roa
File: FNmir3P3J8aahF636Eo8P3ZI9F0.roa (raw, json)
Hash identifier: EvB4OtkZs8dffiL8oUPCXxkh5g6uyjItY3Xvh/ejjTg=
Subject key identifier: 14:D9:A2:AF:73:F7:27:C6:9A:84:5E:B7:E8:4A:3C:3F:76:48:F4:5D
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D78617113C530DD47BC7EC04BC26973
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FNmir3P3J8aahF636Eo8P3ZI9F0.roa
Signing time: Sun 01 Jan 2023 13:14:43 +0000
ROA not before: Sun 01 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56683
IP address blocks: 45.8.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:61:71:13:c5:30:dd:47:bc:7e:c0:4b:c2:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14d9a2af73f727c69a845eb7e84a3c3f7648f45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:54:88:57:29:13:51:b7:31:a2:8b:17:b8:
24:9a:96:88:f2:17:82:8a:f7:4f:99:bf:a0:a2:62:
2f:a2:43:79:af:dc:44:76:25:48:ed:01:44:3b:09:
fb:1d:97:4b:eb:e5:94:48:40:10:e1:1d:77:06:5b:
ee:18:ab:11:98:7f:da:a6:21:df:84:b6:30:38:f7:
63:46:1f:af:dc:bd:c8:2f:3d:aa:93:f9:af:18:4b:
b3:84:d2:14:8c:f4:2e:e0:90:de:df:4c:1c:cb:8f:
cd:4d:bf:cd:87:5e:bf:73:be:67:65:3e:ee:8e:2a:
66:53:85:94:83:13:06:13:53:de:87:30:30:47:61:
ad:f1:9f:a7:b0:17:7d:d0:34:ee:50:df:09:5e:86:
7e:77:9a:5b:de:31:83:70:9b:65:fa:da:89:4c:95:
b9:8c:cc:2c:c1:d2:72:09:ab:ed:91:ac:83:37:b4:
d9:b9:d9:cc:21:3f:85:24:9a:c7:0e:d8:c1:b1:b3:
ee:c9:e4:02:b6:f3:36:02:35:25:0a:3e:3f:b7:48:
db:a7:6c:32:31:6d:bf:87:9d:a5:d0:cf:18:74:88:
53:9b:b0:f8:ce:8c:5b:a0:f5:ec:a2:63:57:40:03:
33:c4:f3:33:3d:a1:f3:03:78:fb:12:89:c0:28:e0:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:A2:AF:73:F7:27:C6:9A:84:5E:B7:E8:4A:3C:3F:76:48:F4:5D
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/FNmir3P3J8aahF636Eo8P3ZI9F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.216.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:d2:1e:c6:f4:b2:22:ca:03:5c:6b:0d:35:df:50:3a:0b:
e8:9f:9d:79:be:7c:23:8d:a6:a9:20:2d:58:04:d1:d9:79:cd:
d5:32:65:4e:3e:e8:0c:6a:58:5c:6c:48:18:6a:df:91:6e:fc:
5c:99:ef:0e:ae:20:96:ba:7f:51:6c:e8:29:c6:06:b7:77:b0:
b0:89:6a:39:88:18:46:84:eb:8d:59:48:66:be:ba:af:ca:54:
c1:b5:7a:9c:14:46:c5:38:f9:ae:2a:26:72:fe:a4:05:af:9b:
9a:31:20:0e:02:b3:62:14:e4:7a:3f:a1:68:07:d3:4d:20:12:
21:cb:2b:58:db:66:3c:ea:89:58:0e:eb:f4:2e:85:ec:02:64:
af:64:e0:99:3c:a1:85:93:ee:72:28:33:52:89:59:f7:2a:03:
0e:e8:d5:b4:70:96:b9:54:59:a6:59:1b:f9:47:40:53:fe:7a:
4b:25:28:08:7d:2d:30:54:aa:09:51:ff:47:7c:61:bc:03:17:
bf:17:61:f3:72:9b:41:f2:13:64:d0:e2:8f:f9:2b:b5:cb:04:
fa:43:cb:5e:ac:2f:89:5f:8e:1c:35:fb:d6:d6:60:52:77:2f:
4f:f5:77:36:02:d5:08:62:f1:b8:df:01:1c:fc:a2:96:b2:c5:
7b:1b:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org