Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/_KSkQ3NgYoI_fSjyVVJ_l38_0sg.roa
File: _KSkQ3NgYoI_fSjyVVJ_l38_0sg.roa (raw, json)
Hash identifier: giUZx9g4PY/3V+IxbxwJjr8Fo1irR4qbCp1GqkWB+2s=
Subject key identifier: FC:A4:A4:43:73:60:62:82:3F:7D:28:F2:55:52:7F:97:7F:3F:D2:C8
Certificate issuer: /CN=298b166ece49fa939476efa22c8d9248f9edc833
Certificate serial: 0186A15A628CEE70AFA73CFDA5ACB8A6F665
Authority key identifier: 29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/_KSkQ3NgYoI_fSjyVVJ_l38_0sg.roa
Signing time: Thu 02 Mar 2023 08:05:00 +0000
ROA not before: Thu 02 Mar 2023 08:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199739
IP address blocks: 169.224.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:5a:62:8c:ee:70:af:a7:3c:fd:a5:ac:b8:a6:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298b166ece49fa939476efa22c8d9248f9edc833
Validity
Not Before: Mar 2 08:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca4a443736062823f7d28f255527f977f3fd2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:18:f5:ae:f0:7f:eb:02:73:86:5c:6c:81:
bf:02:1b:72:e4:c0:ce:be:34:ff:82:4f:8a:54:c1:
20:f8:50:c7:c1:ae:ec:58:17:d9:0c:be:8f:07:0d:
4d:98:bd:9e:e2:9e:d4:3e:89:aa:c4:f1:19:27:ea:
22:f6:1a:c1:7c:1e:3b:c8:08:94:0c:f5:ef:ea:d2:
87:3c:46:c0:26:38:88:f0:8f:02:02:c6:b4:d0:07:
17:21:3a:9a:31:c5:95:51:c5:20:dd:ff:a3:5b:11:
d6:14:06:b7:13:90:42:5f:3d:f6:c4:0d:c4:d7:68:
66:de:29:69:e2:2d:20:19:04:78:5f:a7:19:5d:65:
e5:06:bc:30:bc:3f:af:29:4d:9e:5d:38:53:7b:e9:
1f:49:42:83:26:d2:d8:b2:e5:7d:87:49:e3:bd:6e:
93:df:8d:20:4e:21:cb:61:9c:e2:de:9a:a5:e3:08:
08:9c:cc:7b:eb:51:de:5e:7e:17:d5:f0:06:a1:40:
bf:da:11:fa:15:1d:e0:95:2f:f1:f9:92:a9:05:00:
54:3b:23:99:8f:5b:72:a8:d3:ed:7f:29:44:41:cc:
d9:61:a2:0e:9c:5b:c8:54:24:e5:43:1f:28:22:8b:
b5:4f:5d:d4:68:a8:4f:5a:56:cd:6a:3b:28:d0:7f:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A4:A4:43:73:60:62:82:3F:7D:28:F2:55:52:7F:97:7F:3F:D2:C8
X509v3 Authority Key Identifier:
keyid:29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/_KSkQ3NgYoI_fSjyVVJ_l38_0sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.224.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a5:e0:10:ff:71:27:60:67:f8:47:22:17:79:bc:fd:fe:bd:e7:
3f:4e:ac:eb:1f:a5:31:34:1a:79:63:99:96:0b:dc:47:eb:6b:
b9:46:57:57:5a:1e:73:eb:70:df:ca:9b:b7:bd:9c:f9:c8:00:
32:bb:60:52:3a:39:54:4f:7b:48:ad:04:a2:8c:1a:ed:4e:41:
da:05:82:d5:1c:09:7d:4e:92:23:0d:d2:51:f2:c5:d0:42:4a:
a9:ba:93:19:52:2b:11:87:90:d8:7f:30:f7:37:4d:e2:a5:70:
7f:b1:cb:cc:f6:b4:14:4a:b2:40:c7:62:10:d6:71:f9:fb:fb:
96:0a:ec:44:6c:46:bc:f8:53:3f:ce:2d:a1:ea:8e:f5:32:ce:
e4:89:41:77:43:f4:11:12:6c:1a:5f:44:8a:80:7a:77:2c:8a:
31:a5:3b:5b:a8:d3:df:e7:ef:f7:3d:25:b1:36:87:ef:be:58:
b7:1d:4d:1d:1b:74:31:5b:36:9e:97:9a:3f:ab:cf:f3:2b:d3:
94:91:99:97:ff:aa:f8:36:e1:25:44:e2:45:9a:f2:5b:55:01:
f3:0f:7a:15:db:c4:82:f2:c8:8c:f0:3a:f6:e9:c1:a9:cd:74:
40:5d:02:61:31:82:c6:09:8b:38:0d:3a:39:4d:f9:a4:b8:e9:
a7:69:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:44 2024 by rpki-client on console-fra.rpki-client.org