Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/f6CFxRtxH0i2w7DbatGDZGemM_w.roa
File: f6CFxRtxH0i2w7DbatGDZGemM_w.roa (raw, json)
Hash identifier: Z+ri1MVVciTnAidT148gi4cJiahse2ORFyliAhms9x8=
Subject key identifier: 7F:A0:85:C5:1B:71:1F:48:B6:C3:B0:DB:6A:D1:83:64:67:A6:33:FC
Certificate issuer: /CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Certificate serial: 01856F02175C4806A2DCEB6F2B4F20FEC558
Authority key identifier: 7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/f6CFxRtxH0i2w7DbatGDZGemM_w.roa
Signing time: Sun 01 Jan 2023 20:24:45 +0000
ROA not before: Sun 01 Jan 2023 20:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209365
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:17:5c:48:06:a2:dc:eb:6f:2b:4f:20:fe:c5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Validity
Not Before: Jan 1 20:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa085c51b711f48b6c3b0db6ad1836467a633fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:4d:4e:00:1e:82:5f:a0:0b:a9:ca:ca:9f:
ba:e1:b5:ac:32:3d:af:3b:a7:b2:87:63:98:b0:3d:
c4:da:d6:c1:b0:3a:cc:7a:1f:bf:d8:63:33:9c:04:
55:01:07:06:44:05:73:18:49:e0:1d:25:1f:f5:aa:
c8:f5:20:c7:0f:cf:7c:62:3b:3c:24:8c:c1:6c:8a:
21:8e:16:1c:22:6e:06:7d:0e:d2:b4:5b:65:62:57:
5c:da:e5:1d:c4:b7:54:99:8f:65:cf:37:4a:3e:e8:
46:5a:f3:58:15:f1:8a:8d:11:c9:fd:b2:c3:c4:32:
50:37:13:2d:c1:8f:60:fe:8d:81:4d:15:50:b1:3e:
5f:6a:76:4c:9d:88:11:8c:b6:2f:ba:83:12:cc:73:
ad:5a:58:94:ab:65:dc:78:4e:dd:94:c1:9b:04:69:
6c:8c:44:11:3c:d4:60:95:65:6d:fb:f8:ad:25:75:
2c:6d:c9:28:6f:c2:e3:00:89:27:dd:02:33:87:c4:
26:eb:e6:16:15:3f:43:24:3d:ea:81:1b:59:0f:09:
2f:c9:b4:2c:f2:4d:19:e8:b1:92:5e:6f:71:f6:d4:
94:fb:87:e8:08:54:73:b2:bb:5b:ee:8e:5e:b8:4f:
d2:c8:35:84:15:e5:c5:fb:a2:01:25:78:18:b7:78:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:85:C5:1B:71:1F:48:B6:C3:B0:DB:6A:D1:83:64:67:A6:33:FC
X509v3 Authority Key Identifier:
keyid:7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/f6CFxRtxH0i2w7DbatGDZGemM_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/fc-34Mu414ES0effkmHSDr7lvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
61:34:fc:8d:ba:c2:1c:8c:e9:9b:fb:44:17:7a:14:b3:f9:2f:
96:f1:60:ec:55:7d:fd:86:51:27:bd:ee:9e:0c:08:15:35:ae:
13:1a:fa:a0:cc:b7:c6:5e:4f:cf:95:f4:13:cf:73:d8:55:bc:
07:d6:82:42:92:13:e5:60:1b:55:a5:4e:f9:56:60:5f:48:ee:
e4:ab:26:2b:ae:54:c7:b9:83:fa:0c:99:94:95:2c:b8:dd:6b:
3c:a5:56:65:54:12:bf:9e:e6:79:b1:a1:22:5e:64:2e:86:a3:
22:df:25:28:67:cc:e8:18:20:23:da:bb:c4:91:4d:e6:73:2f:
4d:0b:94:49:68:80:80:83:a0:00:d3:12:fe:3f:08:f0:90:63:
45:a6:84:a4:e6:7f:e9:04:18:d2:fb:4c:67:a3:c5:84:0c:1b:
fa:9f:4b:49:92:4f:c8:85:85:38:fd:c5:31:7c:f9:f6:fa:49:
f7:4f:ea:4a:aa:52:8c:3b:3b:8d:7d:a0:12:70:12:df:ce:0e:
3b:96:e0:24:ff:a1:8c:3e:eb:5c:0a:63:ac:85:17:67:53:b6:
d6:db:9b:db:6d:84:54:94:86:4b:17:87:f6:6c:af:80:d3:2d:
bd:1c:fc:09:d4:33:47:13:26:09:1c:00:77:4c:db:4e:d0:2f:
99:a6:4e:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAhdcSAai3OtvK08g/sVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2ZiN2UwY2JiOGQ3ODExMmQxZTdkZjkyNjFkMjBlYmVl
NWJlZTIwHhcNMjMwMTAxMjAyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmEwODVjNTFiNzExZjQ4YjZjM2IwZGI2YWQxODM2NDY3YTYzM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5NTgAegl+gC6nKyp+64bWsMj2v
O6eyh2OYsD3E2tbBsDrMeh+/2GMznARVAQcGRAVzGEngHSUf9arI9SDHD898Yjs8
JIzBbIohjhYcIm4GfQ7StFtlYldc2uUdxLdUmY9lzzdKPuhGWvNYFfGKjRHJ/bLD
xDJQNxMtwY9g/o2BTRVQsT5fanZMnYgRjLYvuoMSzHOtWliUq2XceE7dlMGbBGls
jEQRPNRglWVt+/itJXUsbckob8LjAIkn3QIzh8Qm6+YWFT9DJD3qgRtZDwkvybQs
8k0Z6LGSXm9x9tSU+4foCFRzsrtb7o5euE/SyDWEFeXF+6IBJXgYt3i90wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+ghcUbcR9ItsOw22rRg2RnpjP8MB8GA1UdIwQY
MBaAFH3Pt+DLuNeBEtHn35Jh0g6+5b7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmMtMzRNdTQxNEVTMGVmZmttSFNEcjdsdnVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83ZjNlZjYtOWM4Yy00MTQ0LWJhZmQt
NDQ5YjgyYmIxOGVhLzEvZjZDRnhSdHhIMGkydzdEYmF0R0RaR2VtTV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83ZjNlZjYtOWM4Yy00MTQ0LWJhZmQtNDQ5YjgyYmIxOGVh
LzEvZmMtMzRNdTQxNEVTMGVmZmttSFNEcjdsdnVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9EMA0G
CSqGSIb3DQEBCwUAA4IBAQBhNPyNusIcjOmb+0QXehSz+S+W8WDsVX39hlEnve6e
DAgVNa4TGvqgzLfGXk/PlfQTz3PYVbwH1oJCkhPlYBtVpU75VmBfSO7kqyYrrlTH
uYP6DJmUlSy43Ws8pVZlVBK/nuZ5saEiXmQuhqMi3yUoZ8zoGCAj2rvEkU3mcy9N
C5RJaICAg6AA0xL+PwjwkGNFpoSk5n/pBBjS+0xno8WEDBv6n0tJkk/IhYU4/cUx
fPn2+kn3T+pKqlKMOzuNfaAScBLfzg47luAk/6GMPutcCmOshRdnU7bW25vbbYRU
lIZLF4f2bK+A0y29HPwJ1DNHEyYJHAB3TNtO0C+Zpk46
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:18 2024 by rpki-client on console-fra.rpki-client.org