Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/FG0A4NjB8YSPnSKDhR-4CS3Ep30.roa
File: FG0A4NjB8YSPnSKDhR-4CS3Ep30.roa (raw, json)
Hash identifier: Pulrm2d1cqEbswX29MF0C18GmWWNoJkNSFAH2jIBosA=
Subject key identifier: 14:6D:00:E0:D8:C1:F1:84:8F:9D:22:83:85:1F:B8:09:2D:C4:A7:7D
Certificate issuer: /CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Certificate serial: 01856BCA5347817E6336F57D2AA53B81F0BF
Authority key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/FG0A4NjB8YSPnSKDhR-4CS3Ep30.roa
Signing time: Sun 01 Jan 2023 05:24:59 +0000
ROA not before: Sun 01 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 195.234.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:53:47:81:7e:63:36:f5:7d:2a:a5:3b:81:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Validity
Not Before: Jan 1 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=146d00e0d8c1f1848f9d2283851fb8092dc4a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:d1:de:03:1b:d4:4b:88:d1:fd:2d:74:63:
ca:28:f0:c4:c8:82:4f:63:e9:c0:0a:a7:7b:ce:fd:
c3:e0:e4:01:4b:28:29:f2:e7:10:d5:c9:56:44:8e:
d6:63:7c:33:36:60:f3:1e:12:bb:0e:f8:da:73:c6:
04:e3:07:ef:9e:c0:a9:3b:5f:f2:ca:d0:d6:05:99:
48:56:0c:c1:7d:e2:c1:1a:62:a1:70:17:3e:65:ee:
d4:f3:b9:7e:38:28:28:69:50:47:c6:34:3f:f7:93:
bb:6f:87:4e:02:cc:08:1f:c9:c9:a3:87:87:90:35:
99:a1:86:fe:a8:cb:54:4e:31:ee:0a:63:e5:ea:f8:
d5:5d:bc:9c:b8:85:8c:89:ef:57:e8:00:3f:d7:81:
34:d0:32:c5:45:3b:9b:4f:af:23:c1:54:63:33:c6:
cc:48:39:73:80:7d:f0:f0:7b:ae:7a:ce:e0:95:cf:
50:94:2d:ac:b3:f3:40:7b:42:2d:a5:db:03:57:e0:
ac:a9:e7:2c:82:20:d3:c9:00:b0:8d:a4:90:e7:d3:
52:09:79:c4:ce:2e:10:fd:eb:ac:a5:f2:c0:46:3b:
ee:56:e7:81:3e:b8:3d:6a:b9:c6:59:72:76:82:7b:
67:18:fa:e0:d4:b1:31:b0:02:46:cc:7b:6e:c2:b4:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:00:E0:D8:C1:F1:84:8F:9D:22:83:85:1F:B8:09:2D:C4:A7:7D
X509v3 Authority Key Identifier:
keyid:43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/FG0A4NjB8YSPnSKDhR-4CS3Ep30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:25:d5:b2:10:6a:0b:37:31:2b:7a:f2:87:d3:77:f5:b1:3c:
94:79:5b:06:87:1e:72:82:6c:07:cc:32:b2:86:fe:ee:1a:b8:
fd:c6:b3:b1:63:13:2e:53:fe:06:69:2f:8d:6a:b8:e5:81:6c:
16:a5:f4:11:71:98:7d:3b:40:53:1d:83:ab:43:8e:1e:7a:77:
50:7f:54:e3:92:e2:0e:fa:bd:52:86:59:7d:07:77:43:2a:97:
22:6a:13:78:6b:0d:00:41:e7:19:94:47:66:cd:f7:4a:0d:fe:
f9:92:43:58:1b:11:d8:89:15:7b:c8:65:46:67:10:cd:c5:5e:
0b:0b:cc:d1:c1:2d:d1:0e:ac:0a:99:80:1d:4b:02:5f:fd:4d:
e6:31:21:1a:1a:95:4e:41:30:2b:ec:78:6b:da:48:83:ed:06:
26:63:ad:b3:68:88:7e:f2:77:f6:aa:52:24:6e:93:06:ff:04:
46:0a:09:03:46:6c:68:61:07:75:0e:99:88:01:87:df:f2:cb:
21:28:d9:8f:16:06:54:2c:da:2f:10:c0:ba:14:2d:a6:62:d6:
80:dc:73:f0:d5:0d:70:7c:8f:9d:f7:73:57:f6:a2:27:b7:02:
08:bb:87:47:86:e3:d2:1c:9b:d6:12:36:76:51:db:40:f4:8d:
b3:ce:52:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org