Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/FgmKs-rAspb8vZg0OQJMH_RowH4.roa
File: FgmKs-rAspb8vZg0OQJMH_RowH4.roa (raw, json)
Hash identifier: tz08fuPn5jSt4vyyUqK3O9X9pDJFWnmJeLAril8bqG8=
Subject key identifier: 16:09:8A:B3:EA:C0:B2:96:FC:BD:98:34:39:02:4C:1F:F4:68:C0:7E
Certificate issuer: /CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Certificate serial: 08EFA055
Authority key identifier: 43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/FgmKs-rAspb8vZg0OQJMH_RowH4.roa
Signing time: Sat 01 Jan 2022 00:57:07 +0000
ROA not before: Sat 01 Jan 2022 00:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.181.192.0/22 maxlen: 22
95.130.16.0/23 maxlen: 23
95.130.18.0/23 maxlen: 23
95.130.20.0/23 maxlen: 23
95.130.22.0/23 maxlen: 23
2a02:2940::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149921877 (0x8efa055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398cb58062ed4a9a30ff438e44eef31d7ef6a65
Validity
Not Before: Jan 1 00:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16098ab3eac0b296fcbd983439024c1ff468c07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:3f:51:0a:8e:78:a6:a6:60:e7:a7:c8:75:
5f:64:4f:52:de:c0:dc:42:9b:13:a8:0d:5d:b5:8b:
81:d9:97:bc:cc:c0:4c:32:96:c5:af:7d:dc:b9:62:
c3:67:c4:93:76:43:36:ad:65:f6:4c:c5:ec:bc:0c:
e5:86:22:9c:9a:a8:68:2b:be:e5:b4:23:a5:04:05:
35:ec:60:d1:43:08:33:5c:cf:e6:a0:02:ee:29:af:
b8:f5:92:93:5d:68:d6:c4:6f:d1:7a:6d:c8:52:c7:
bf:cd:77:6e:df:12:25:91:ae:be:70:d4:0c:68:1b:
52:25:a6:c0:fe:c6:71:40:3c:ef:81:c3:ab:1d:cf:
7a:b8:24:a4:29:9e:d4:f4:30:64:06:a1:7c:b3:8a:
64:0b:0a:0c:98:49:e8:71:a5:4c:2f:16:2a:a6:6b:
ab:56:76:f3:80:f9:4c:4a:06:c0:16:35:9c:28:f8:
69:e3:e4:80:29:1e:fb:d1:3c:6c:2f:eb:ca:82:4b:
27:ba:fc:88:fd:b0:4a:7e:e8:0f:cd:99:f0:8b:23:
7f:f3:65:a0:46:a5:ca:39:7e:8e:b3:c6:64:88:3d:
6f:5c:c8:6f:e0:81:75:c2:10:04:bf:23:07:46:96:
5b:0f:53:d0:c3:e3:a8:d8:53:1f:1f:a7:91:8b:91:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:09:8A:B3:EA:C0:B2:96:FC:BD:98:34:39:02:4C:1F:F4:68:C0:7E
X509v3 Authority Key Identifier:
keyid:43:98:CB:58:06:2E:D4:A9:A3:0F:F4:38:E4:4E:EF:31:D7:EF:6A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5jLWAYu1KmjD_Q45E7vMdfvamU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/FgmKs-rAspb8vZg0OQJMH_RowH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbc7ac-2241-4974-8fa2-17117dad9077/1/Q5jLWAYu1KmjD_Q45E7vMdfvamU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/48
Signature Algorithm: sha256WithRSAEncryption
b1:fe:66:9b:04:bf:fa:58:0d:37:03:2f:50:49:36:01:96:52:
08:57:1f:58:f3:dc:53:ee:55:41:ce:0a:ef:e7:05:c5:f8:10:
fa:89:17:b3:07:17:40:66:f6:58:db:4a:83:cc:bf:85:cc:77:
83:10:ae:01:d9:e7:e3:c2:7a:4d:22:c1:98:68:7e:27:6d:c2:
1a:5e:10:43:07:36:d3:e3:a4:8b:ea:0f:06:46:72:f8:7b:63:
03:4f:5d:9b:3a:32:27:3d:22:eb:b6:28:53:d2:b2:f5:cf:e6:
86:0f:0d:a0:f0:83:63:12:b9:84:94:b7:08:2b:4b:2a:e8:04:
2c:60:de:aa:46:18:46:35:e6:a1:99:6e:c7:4c:2c:8e:08:b7:
a9:00:24:92:94:84:2a:3f:7d:35:d1:53:a1:be:a3:20:20:5e:
1c:b6:a8:67:7c:6e:2c:c9:e3:16:f2:40:a3:b6:4d:5e:f8:50:
4c:09:ce:d6:f0:bd:64:a6:1c:7e:eb:a9:2b:ba:73:97:1d:2b:
fb:9a:e0:bc:1c:44:e7:99:45:11:4d:1d:e4:57:e5:3f:8e:70:
ba:38:62:22:47:2a:24:d3:ee:a9:70:36:4c:f8:c3:47:15:6b:
47:bc:98:db:06:7a:93:86:8c:b8:d2:aa:86:fc:da:5b:55:dc:
4a:8a:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:37 2023 by rpki-client on console-ams.rpki-client.org