Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/FN99h3gxf8efL7TpGJ0fIxvZY_U.roa
File: FN99h3gxf8efL7TpGJ0fIxvZY_U.roa (raw, json)
Hash identifier: pdJFs922DVxhtVkkCkU5dYPU1JfYXiL18OtnCw02p4o=
Subject key identifier: 14:DF:7D:87:78:31:7F:C7:9F:2F:B4:E9:18:9D:1F:23:1B:D9:63:F5
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0190B66D4ABAFCFAAF472B67BC1B5D1C3E23
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/FN99h3gxf8efL7TpGJ0fIxvZY_U.roa
Signing time: Mon 15 Jul 2024 12:45:34 +0000
ROA not before: Mon 15 Jul 2024 12:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197692
IP address blocks: 31.22.120.0/21 maxlen: 24
151.216.40.0/22 maxlen: 24
185.131.0.0/22 maxlen: 24
2a02:6f00::/29 maxlen: 48
2a02:6f00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:6d:4a:ba:fc:fa:af:47:2b:67:bc:1b:5d:1c:3e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jul 15 12:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14df7d8778317fc79f2fb4e9189d1f231bd963f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:f4:ea:75:99:b4:a7:eb:f8:7f:44:3f:fd:
59:c0:89:62:c9:04:fe:d5:d7:be:c0:f6:2c:88:62:
d0:8e:d3:2e:e6:fe:1a:a3:7d:51:5c:c4:21:3e:e4:
e4:f1:2d:69:19:b1:7c:a0:72:bb:f6:88:ba:bf:f0:
54:11:57:94:53:dd:ce:7a:b7:34:26:e3:92:3e:08:
76:8c:78:d8:21:4c:88:e2:f3:84:cb:0a:c8:10:1c:
4c:16:83:eb:38:9f:c6:1e:2f:f4:71:6f:ae:7a:20:
9e:73:36:93:40:d0:a4:05:8e:d1:c6:4f:22:28:e6:
02:6a:a7:9b:b8:51:b5:c8:8f:62:f9:73:00:ee:35:
21:a7:9a:d8:f7:3d:83:dd:53:24:7a:fa:1f:01:34:
7b:68:0b:c9:2b:8f:55:7d:20:f9:6b:5e:ae:91:37:
36:28:20:88:fa:33:b9:25:1f:34:99:05:48:7c:6e:
27:c1:b8:e9:d3:25:c3:29:20:b6:5d:cd:16:34:62:
cc:11:de:02:c8:1b:84:6a:3c:e2:f5:8b:c8:90:9a:
2e:3f:5e:32:fb:40:e0:d7:f1:68:0a:7f:42:ea:ef:
36:a9:85:2d:76:d1:a2:23:ec:25:86:a5:45:0f:ba:
89:56:71:24:5e:fc:97:9a:fd:25:f6:95:3b:f8:f7:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:7D:87:78:31:7F:C7:9F:2F:B4:E9:18:9D:1F:23:1B:D9:63:F5
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/FN99h3gxf8efL7TpGJ0fIxvZY_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.120.0/21
151.216.40.0/22
185.131.0.0/22
IPv6:
2a02:6f00::/29
Signature Algorithm: sha256WithRSAEncryption
0d:ea:8c:a4:d3:0b:5c:87:ad:00:43:0d:7f:7f:55:e4:25:1f:
fd:a1:c5:08:1a:f7:31:00:b8:b0:0c:71:67:0a:97:a2:47:af:
ff:8d:3a:03:f4:d6:c0:f1:62:39:fd:40:58:80:02:55:19:65:
c7:94:ee:02:e8:97:78:f7:00:78:e6:26:be:29:c4:1a:ec:1a:
34:bf:02:8c:03:81:55:a7:a9:aa:f8:d0:5d:7a:a5:0f:96:81:
ba:46:a9:38:ce:c5:dc:e2:09:90:16:4d:51:10:2c:30:6a:09:
18:35:9a:57:ae:58:3e:9a:90:ee:f8:84:85:4b:ec:3f:60:aa:
52:a2:a6:19:ab:2d:c8:20:ff:47:77:f6:20:9b:ce:1a:6c:55:
23:27:32:ec:70:b3:a5:45:22:02:9a:04:7c:b7:96:af:85:f4:
ce:eb:d7:fa:0c:4c:d9:a5:c7:75:04:d8:58:f8:65:78:99:e5:
20:0e:58:26:c1:bb:65:e0:2b:8a:c7:5f:fa:3e:9a:7f:9d:38:
ba:af:d4:7f:43:67:90:ab:0e:63:b7:78:df:55:f2:d4:1e:c3:
ac:21:68:87:a7:60:06:be:84:b4:c8:df:73:b3:2c:75:ca:ab:
f9:1e:d2:0b:97:7f:54:38:01:3c:bf:9d:22:c4:35:3e:aa:4c:
04:46:d5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:57:22 2024 by rpki-client on console.sobornost.net