Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/fbXjjy4NNwKBhc1s12_1L_zNSzE.roa
File: fbXjjy4NNwKBhc1s12_1L_zNSzE.roa (raw, json)
Hash identifier: yTdOcQ31iQOmrbv+Q9I6Bg0VFGz5YyykdDIG/Ss3R5c=
Subject key identifier: 7D:B5:E3:8F:2E:0D:37:02:81:85:CD:6C:D7:6F:F5:2F:FC:CD:4B:31
Certificate issuer: /CN=39f8f4adfce04dc839acef595bed40bb7c3c8ba9
Certificate serial: 018964C05B64916FEDC04F25BCAC4BD34656
Authority key identifier: 39:F8:F4:AD:FC:E0:4D:C8:39:AC:EF:59:5B:ED:40:BB:7C:3C:8B:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/fbXjjy4NNwKBhc1s12_1L_zNSzE.roa
Signing time: Mon 17 Jul 2023 16:47:55 +0000
ROA not before: Mon 17 Jul 2023 16:47:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 194.104.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5b:64:91:6f:ed:c0:4f:25:bc:ac:4b:d3:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f8f4adfce04dc839acef595bed40bb7c3c8ba9
Validity
Not Before: Jul 17 16:47:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7db5e38f2e0d37028185cd6cd76ff52ffccd4b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:3d:37:02:9a:2a:ef:c4:95:22:2c:b1:7a:
79:63:08:df:32:18:c1:ff:09:07:08:6d:93:a6:ff:
64:a1:4d:3f:46:5b:cd:36:c4:bc:6e:ae:a8:ff:78:
fd:b2:5c:b5:86:6f:b3:4e:57:3a:bb:fc:8f:bc:b1:
eb:d1:e2:af:26:d4:8d:39:fa:52:7e:35:93:aa:cb:
70:65:a8:ca:92:e1:8c:ab:67:02:45:6c:56:bf:7f:
0b:3a:f1:55:33:ac:ad:05:76:72:ef:f2:75:ac:3e:
c1:1f:86:ba:9e:af:0b:ba:c2:08:3b:4b:8f:c3:33:
4f:a4:a8:97:a0:df:03:1d:b7:86:a5:f5:66:9d:3f:
56:9b:31:23:59:a3:d4:fe:10:97:ae:1a:9e:21:f4:
cb:01:22:0f:14:0d:51:c4:61:c1:8a:1a:50:92:bf:
cf:ef:49:a1:40:03:1f:41:ed:94:b4:54:93:f4:f5:
f5:1c:52:35:92:ba:5d:7f:f1:73:d4:ca:03:20:98:
66:cb:68:c1:4e:1c:8d:98:cc:b3:f8:32:34:da:37:
39:e1:09:57:2e:a5:85:6a:27:d7:23:39:52:18:86:
65:3c:c3:84:82:a3:a8:61:75:f6:02:c8:6e:fc:9d:
7e:1c:f8:6e:3e:24:b8:a3:3b:f5:2a:fc:d5:6b:49:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B5:E3:8F:2E:0D:37:02:81:85:CD:6C:D7:6F:F5:2F:FC:CD:4B:31
X509v3 Authority Key Identifier:
keyid:39:F8:F4:AD:FC:E0:4D:C8:39:AC:EF:59:5B:ED:40:BB:7C:3C:8B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/fbXjjy4NNwKBhc1s12_1L_zNSzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b60351-549d-4064-a63d-df1f62146fd6/1/Ofj0rfzgTcg5rO9ZW-1Au3w8i6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:17:85:d1:65:03:3c:43:66:97:62:9a:92:05:a5:2f:64:4b:
88:a3:48:d9:d4:bd:fa:aa:b9:8b:bd:fb:df:d2:6d:6c:14:1b:
2a:d8:6f:21:6c:9b:bf:20:e9:cc:bc:95:80:35:c6:52:a4:64:
d2:15:93:b0:b8:45:62:00:fa:c5:2a:30:c2:c2:bd:54:15:f7:
08:46:1a:ec:f1:c7:54:af:93:9b:2e:a0:74:d4:53:00:eb:0a:
4b:3b:c3:8a:9e:ae:e9:58:09:6a:4a:50:bf:6c:72:a6:9b:a9:
bc:9b:50:fc:20:9c:21:31:7a:7b:21:98:b7:c2:66:60:33:5f:
4e:27:26:78:64:74:22:4d:2c:b1:b4:0f:0c:6b:7a:d3:4c:36:
b3:e5:39:59:0b:47:3e:e6:b1:4c:1d:69:94:81:2d:af:ab:72:
68:d4:1b:56:78:36:87:40:75:0c:82:8d:7d:27:dc:ee:81:ab:
70:26:2a:36:41:47:ac:7e:5d:ff:19:01:6a:f3:d6:d3:0d:8a:
f7:97:b4:73:98:56:c1:e7:54:b7:8f:aa:32:f5:66:33:fb:be:
35:b1:27:28:f7:3b:3e:26:06:7a:9e:8c:dc:9d:ad:38:92:e4:
f1:af:2e:02:d3:80:81:3c:95:f5:4c:79:af:02:84:39:22:20:
26:11:04:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFtkkW/twE8lvKxL00ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjhmNGFkZmNlMDRkYzgzOWFjZWY1OTViZWQ0MGJiN2Mz
YzhiYTkwHhcNMjMwNzE3MTY0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGI1ZTM4ZjJlMGQzNzAyODE4NWNkNmNkNzZmZjUyZmZjY2Q0YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbA9NwKaKu/ElSIssXp5YwjfMhjB
/wkHCG2Tpv9koU0/RlvNNsS8bq6o/3j9sly1hm+zTlc6u/yPvLHr0eKvJtSNOfpS
fjWTqstwZajKkuGMq2cCRWxWv38LOvFVM6ytBXZy7/J1rD7BH4a6nq8LusIIO0uP
wzNPpKiXoN8DHbeGpfVmnT9WmzEjWaPU/hCXrhqeIfTLASIPFA1RxGHBihpQkr/P
70mhQAMfQe2UtFST9PX1HFI1krpdf/Fz1MoDIJhmy2jBThyNmMyz+DI02jc54QlX
LqWFaifXIzlSGIZlPMOEgqOoYXX2Ashu/J1+HPhuPiS4ozv1KvzVa0lT+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH21448uDTcCgYXNbNdv9S/8zUsxMB8GA1UdIwQY
MBaAFDn49K384E3IOazvWVvtQLt8PIupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZqMHJmemdUY2c1ck85WlctMUF1M3c4aTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iNjAzNTEtNTQ5ZC00MDY0LWE2M2Qt
ZGYxZjYyMTQ2ZmQ2LzEvZmJYamp5NE5Od0tCaGMxczEyXzFMX3pOU3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iNjAzNTEtNTQ5ZC00MDY0LWE2M2QtZGYxZjYyMTQ2ZmQ2
LzEvT2ZqMHJmemdUY2c1ck85WlctMUF1M3c4aTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjkMA0G
CSqGSIb3DQEBCwUAA4IBAQDLF4XRZQM8Q2aXYpqSBaUvZEuIo0jZ1L36qrmLvfvf
0m1sFBsq2G8hbJu/IOnMvJWANcZSpGTSFZOwuEViAPrFKjDCwr1UFfcIRhrs8cdU
r5ObLqB01FMA6wpLO8OKnq7pWAlqSlC/bHKmm6m8m1D8IJwhMXp7IZi3wmZgM19O
JyZ4ZHQiTSyxtA8Ma3rTTDaz5TlZC0c+5rFMHWmUgS2vq3Jo1BtWeDaHQHUMgo19
J9zugatwJio2QUesfl3/GQFq89bTDYr3l7RzmFbB51S3j6oy9WYz+741sSco9zs+
JgZ6nozcna04kuTxry4C04CBPJX1THmvAoQ5IiAmEQR9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:16 2024 by rpki-client on console-fra.rpki-client.org