Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/FsMfpfMN_3RXeP7PvRNsNbzaE2c.roa
File: FsMfpfMN_3RXeP7PvRNsNbzaE2c.roa (raw, json)
Hash identifier: v37mrVXgyjbqYB00qpeQyhkspQ2AWmAheTxmlop+PTQ=
Subject key identifier: 16:C3:1F:A5:F3:0D:FF:74:57:78:FE:CF:BD:13:6C:35:BC:DA:13:67
Certificate issuer: /CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Certificate serial: B95180
Authority key identifier: 94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/FsMfpfMN_3RXeP7PvRNsNbzaE2c.roa
Signing time: Sat 01 Jan 2022 08:03:14 +0000
ROA not before: Sat 01 Jan 2022 08:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 31.222.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12145024 (0xb95180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947d4e429078e59dd4183fedc15d6e3ce9eee6f6
Validity
Not Before: Jan 1 08:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c31fa5f30dff745778fecfbd136c35bcda1367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:75:21:05:0e:ec:fa:f4:ef:02:d1:62:0f:
85:e0:06:0c:f3:71:2b:cb:b3:79:7d:98:c8:69:b3:
4e:cc:d4:8d:5a:65:d0:dc:e0:41:b4:37:4a:27:f5:
fd:b2:67:c2:cd:72:5b:15:d6:76:de:8d:c3:54:b9:
6a:7b:38:e0:e7:65:0b:39:63:f8:18:4e:86:19:94:
8b:10:8a:c5:f5:14:0c:36:1e:6c:93:ba:dd:6e:f5:
57:65:3d:ba:36:da:4d:49:e2:45:76:7d:63:b3:b3:
fa:30:7e:2c:4c:24:79:d5:46:54:26:3b:40:8c:c2:
c0:73:d1:60:78:e8:0f:7c:fe:86:e1:31:a4:bb:58:
39:83:e5:61:7c:7b:44:b3:83:6c:0f:4b:11:72:e5:
ba:f8:84:db:ce:7c:a0:e8:77:9d:90:7c:be:e2:49:
c5:5f:76:9f:d8:70:08:a4:e5:c4:f4:53:89:fe:7c:
ed:85:d2:93:92:e8:37:a4:90:59:fe:35:0f:dd:fe:
3b:55:40:a1:04:f7:03:b6:bb:8f:ba:ed:5f:f2:ee:
4a:46:c3:2d:eb:6a:12:97:e8:0e:63:c7:99:50:4a:
1a:fd:a4:73:2b:7e:d2:b8:3f:df:cb:c4:9a:e6:7f:
d5:e2:7c:0f:ec:d6:d2:90:da:83:94:d6:bb:fc:f6:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:1F:A5:F3:0D:FF:74:57:78:FE:CF:BD:13:6C:35:BC:DA:13:67
X509v3 Authority Key Identifier:
keyid:94:7D:4E:42:90:78:E5:9D:D4:18:3F:ED:C1:5D:6E:3C:E9:EE:E6:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH1OQpB45Z3UGD_twV1uPOnu5vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/FsMfpfMN_3RXeP7PvRNsNbzaE2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/08111e-4a14-4835-aa3e-054a81fec4c8/1/lH1OQpB45Z3UGD_twV1uPOnu5vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8b:81:95:a5:ee:72:fd:7a:81:d8:a7:08:06:71:25:64:d6:
17:59:9d:4c:9d:51:25:b3:ac:87:8d:51:6f:02:f5:1c:d6:b7:
18:4e:7a:fe:d1:2e:34:83:bc:83:de:45:fa:3f:23:ba:aa:5e:
ea:c3:eb:16:8c:8c:9a:55:1b:19:f9:c3:58:60:0f:ac:96:19:
69:4b:63:1b:31:8d:0e:c2:df:29:db:44:f3:21:78:d1:5c:55:
9d:b6:0c:62:fb:b5:54:63:4a:36:db:14:8b:91:93:0a:32:5a:
91:c8:e0:71:75:f8:74:11:a7:e1:9f:be:49:06:3e:41:16:6f:
27:54:e0:2a:db:c6:be:ea:3e:a6:d6:5a:dd:79:6f:d6:10:ac:
69:1d:df:d3:83:bc:fa:ce:40:c9:bb:17:e3:b9:29:ca:72:63:
db:c8:cd:42:68:90:d5:8a:33:4c:4b:d3:2d:c7:0c:e1:1a:82:
58:1c:d2:7f:3b:b2:85:9b:80:80:84:c9:37:e3:ff:12:3e:ab:
64:0b:a7:7e:24:5d:92:b0:6e:a6:9a:35:9b:86:a6:e7:af:19:
3b:89:fa:fa:72:32:30:dd:98:d8:4b:37:00:04:61:ef:6c:72:
09:50:37:e9:58:ed:6f:fa:39:8e:e7:f0:94:86:fb:4a:ff:39:
70:15:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:30 2024 by rpki-client on console-fra.rpki-client.org