Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fXSGp-dfnsYrcMbiyq89Z7KtD58.roa
File: fXSGp-dfnsYrcMbiyq89Z7KtD58.roa (raw, json)
Hash identifier: Ug8E6iCMFv2Y3xjSlbHWHSr0e0fA6Ipp+XkRJiWPbi0=
Subject key identifier: 7D:74:86:A7:E7:5F:9E:C6:2B:70:C6:E2:CA:AF:3D:67:B2:AD:0F:9F
Certificate issuer: /CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
Certificate serial: 0273C953
Authority key identifier: 7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fXSGp-dfnsYrcMbiyq89Z7KtD58.roa
Signing time: Sat 01 Jan 2022 16:03:41 +0000
ROA not before: Sat 01 Jan 2022 16:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211627
IP address blocks: 185.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41142611 (0x273c953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf6ed2d1717e680e16e53d5b5af4dbbe688136c
Validity
Not Before: Jan 1 16:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d7486a7e75f9ec62b70c6e2caaf3d67b2ad0f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:31:19:ab:98:a2:20:01:d3:4d:54:ae:93:
4d:1f:ad:03:22:8b:49:4e:bf:b1:c5:4c:99:13:f0:
86:7e:f6:4d:64:6b:1c:37:d7:d9:a2:1c:96:47:c8:
a8:86:cf:3e:d5:88:a2:1f:74:fe:6a:c4:3a:19:f1:
18:e2:0b:09:f1:c7:22:3c:f4:ac:54:28:db:2a:37:
96:dc:4a:04:cb:65:a9:97:7a:e8:81:a4:91:93:92:
a4:bd:65:5d:a7:4d:9f:4e:b9:2f:c8:06:35:16:c4:
9e:a6:33:bb:51:8a:cf:0d:0b:c0:4a:88:c3:e7:e4:
64:4d:cb:9d:8e:b0:16:a5:a3:05:1d:0a:7a:e0:b0:
3f:46:68:0f:ae:c9:f1:6c:cc:07:8a:e5:af:59:a2:
63:30:e8:84:a2:96:c9:93:93:6d:f6:b6:1c:d7:90:
99:19:fb:16:e1:16:f8:48:1c:8d:30:88:76:5f:3e:
24:39:7b:dc:49:79:fb:20:dc:aa:2f:c7:75:5d:2f:
76:8c:f4:3b:c0:60:f9:39:1d:18:73:83:85:6a:08:
e7:31:fc:27:83:b3:a7:7a:b8:29:0c:c0:3e:17:4c:
78:5a:75:7e:60:f4:b7:32:62:88:34:21:aa:9a:77:
87:26:91:bb:d6:7d:72:1b:7c:72:89:f5:f9:94:90:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:86:A7:E7:5F:9E:C6:2B:70:C6:E2:CA:AF:3D:67:B2:AD:0F:9F
X509v3 Authority Key Identifier:
keyid:7C:F6:ED:2D:17:17:E6:80:E1:6E:53:D5:B5:AF:4D:BB:E6:88:13:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPbtLRcX5oDhblPVta9Nu-aIE2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fXSGp-dfnsYrcMbiyq89Z7KtD58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03d802-a345-43f9-b8e8-ed1659070e88/1/fPbtLRcX5oDhblPVta9Nu-aIE2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9c:46:da:6e:ab:99:93:f1:3f:b8:52:b8:e7:4b:13:4a:a1:
db:b8:51:f2:05:f0:56:22:fa:f8:3b:dc:17:fa:32:31:1c:e0:
e7:a6:03:0a:fb:bb:71:bc:7d:f8:4e:a3:53:7c:03:b7:25:2e:
8d:54:d4:7e:c4:3b:22:0d:e9:0e:86:97:cf:65:47:c5:ef:fb:
cc:cc:66:19:07:c9:e2:ee:4f:01:e7:76:e5:7f:10:fb:4f:62:
6d:43:ff:ab:7e:a2:e8:dc:32:7e:47:b3:3f:4e:32:0b:6a:53:
62:42:d9:27:96:b3:8f:14:c4:2d:88:af:36:68:0d:db:96:fb:
d6:e8:49:c5:79:88:c5:50:4a:03:d1:1b:df:0e:c5:58:eb:00:
b3:79:59:d7:5f:5d:8d:b1:af:1c:1d:b5:2d:12:22:40:e4:77:
5d:cc:d3:6a:b3:6f:c3:0b:4f:4e:62:44:0c:bd:51:bb:33:50:
88:34:75:c5:6b:d6:45:64:ee:6a:1e:b6:9d:29:f4:3e:fa:50:
75:6d:66:7a:aa:3e:92:6c:21:ac:5c:42:21:b8:3a:a9:01:15:
7b:51:e7:86:59:56:37:76:9a:02:2d:73:4c:42:d7:b7:10:97:
6d:a8:0e:cc:cd:5b:63:32:ab:6b:bc:39:5a:bb:b2:f8:2c:08:
94:ee:1c:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAnPJUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Y2Y2ZWQyZDE3MTdlNjgwZTE2ZTUzZDViNWFmNGRiYmU2ODgxMzZjMB4XDTIyMDEw
MTE2MDM0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q3NDg2YTdlNzVm
OWVjNjJiNzBjNmUyY2FhZjNkNjdiMmFkMGY5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr+MRmrmKIgAdNNVK6TTR+tAyKLSU6/scVMmRPwhn72TWRr
HDfX2aIclkfIqIbPPtWIoh90/mrEOhnxGOILCfHHIjz0rFQo2yo3ltxKBMtlqZd6
6IGkkZOSpL1lXadNn065L8gGNRbEnqYzu1GKzw0LwEqIw+fkZE3LnY6wFqWjBR0K
euCwP0ZoD67J8WzMB4rlr1miYzDohKKWyZOTbfa2HNeQmRn7FuEW+EgcjTCIdl8+
JDl73El5+yDcqi/HdV0vdoz0O8Bg+TkdGHODhWoI5zH8J4Ozp3q4KQzAPhdMeFp1
fmD0tzJiiDQhqpp3hyaRu9Z9cht8con1+ZSQ6N0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR9dIan51+exitwxuLKrz1nsq0PnzAfBgNVHSMEGDAWgBR89u0tFxfmgOFu
U9W1r0275ogTbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZQYnRMUmNYNW9EaGJsUFZ0YTlOdS1hSUUydy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvMDNkODAyLWEzNDUtNDNmOS1iOGU4LWVkMTY1OTA3MGU4OC8x
L2ZYU0dwLWRmbnNZcmNNYml5cTg5WjdLdEQ1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
MDNkODAyLWEzNDUtNDNmOS1iOGU4LWVkMTY1OTA3MGU4OC8xL2ZQYnRMUmNYNW9E
aGJsUFZ0YTlOdS1hSUUydy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn+pTANBgkqhkiG9w0BAQsFAAOC
AQEAipxG2m6rmZPxP7hSuOdLE0qh27hR8gXwViL6+DvcF/oyMRzg56YDCvu7cbx9
+E6jU3wDtyUujVTUfsQ7Ig3pDoaXz2VHxe/7zMxmGQfJ4u5PAed25X8Q+09ibUP/
q36i6NwyfkezP04yC2pTYkLZJ5azjxTELYivNmgN25b71uhJxXmIxVBKA9Eb3w7F
WOsAs3lZ119djbGvHB21LRIiQOR3XczTarNvwwtPTmJEDL1RuzNQiDR1xWvWRWTu
ah62nSn0PvpQdW1meqo+kmwhrFxCIbg6qQEVe1HnhllWN3aaAi1zTELXtxCXbagO
zM1bYzKra7w5Wruy+CwIlO4cPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org