Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/HKyZ3OL-oxsK0TL6Bz-SDSGrG5I.roa
File: HKyZ3OL-oxsK0TL6Bz-SDSGrG5I.roa (raw, json)
Hash identifier: yQWg4gGKuMWRUqrHDzSUSowbdj0qBk4TVpjkJXI7whQ=
Subject key identifier: 1C:AC:99:DC:E2:FE:A3:1B:0A:D1:32:FA:07:3F:92:0D:21:AB:1B:92
Certificate issuer: /CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
Certificate serial: 018572035CECEDAF5EA3C44997A7CEF63F01
Authority key identifier: C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/HKyZ3OL-oxsK0TL6Bz-SDSGrG5I.roa
Signing time: Mon 02 Jan 2023 10:25:01 +0000
ROA not before: Mon 02 Jan 2023 10:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39305
IP address blocks: 185.182.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:5c:ec:ed:af:5e:a3:c4:49:97:a7:ce:f6:3f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
Validity
Not Before: Jan 2 10:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cac99dce2fea31b0ad132fa073f920d21ab1b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:75:7d:c2:cc:eb:2d:d5:ad:be:be:71:96:
88:d6:1a:3b:fe:67:9f:01:3c:f5:aa:67:10:b1:d1:
99:24:b9:cd:78:1f:40:65:83:4e:7a:da:2f:5f:bb:
a6:52:f3:b9:68:ef:dd:45:d7:4d:69:2b:e4:b7:3b:
e2:be:0e:e0:b0:29:71:20:79:13:a9:a4:d2:8e:41:
12:89:08:0f:df:b0:53:f5:74:8d:5d:ae:be:83:fd:
da:d0:48:c4:6d:a7:38:10:fa:87:49:8b:74:75:d6:
70:45:36:a9:f8:b3:97:66:ee:17:96:8b:db:35:ee:
f5:37:bf:16:a2:7f:93:21:31:88:1d:4a:7c:1a:46:
0e:6f:53:b8:fe:70:df:ec:ee:bf:36:61:ba:33:d3:
35:dd:ce:e1:cf:cc:af:ac:46:4c:71:7b:62:f4:43:
54:47:60:3c:7a:99:7f:2f:ea:38:c9:88:ec:37:03:
ee:f6:6c:0d:31:b1:b1:20:3c:c6:26:ff:19:88:33:
54:a0:83:33:88:a8:8a:b1:e4:76:a9:e8:75:78:4f:
78:41:c3:cc:88:0f:ee:1c:c0:6f:8e:07:db:72:04:
a1:41:a2:06:d6:dc:b1:3c:c6:2f:55:9e:41:fe:de:
49:51:96:ab:2c:b0:25:5e:c6:5f:f3:48:3a:1d:b7:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:99:DC:E2:FE:A3:1B:0A:D1:32:FA:07:3F:92:0D:21:AB:1B:92
X509v3 Authority Key Identifier:
keyid:C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/HKyZ3OL-oxsK0TL6Bz-SDSGrG5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.107.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d8:ea:a3:33:15:f5:12:29:4c:65:be:73:a3:d7:33:07:77:
65:5d:9f:05:ea:40:e6:3d:6d:83:83:4d:0e:d1:1a:41:fb:c8:
e9:20:84:33:55:f8:47:9c:6c:62:9b:27:ff:6d:ae:cd:c0:ee:
81:bb:26:0e:61:71:9f:1e:e2:c3:06:1a:0a:91:0c:bc:b9:06:
12:f4:60:48:d1:ca:42:c5:8f:85:e4:57:d8:81:8c:2b:66:33:
44:69:d4:11:ad:42:11:63:c8:43:21:a9:2e:15:81:a2:db:15:
e5:88:79:00:09:8f:92:1c:90:13:6a:f5:db:4f:3d:c1:d1:de:
39:e2:53:5a:b4:fb:7e:f6:27:73:f7:fa:f1:9e:e9:47:20:7c:
97:0d:0a:04:56:b6:a4:51:7c:dc:f5:34:be:cf:ba:27:0c:56:
e0:29:4f:a1:00:1b:dd:ee:4f:03:75:42:ad:b8:7a:c6:8d:23:
87:2d:8d:c9:ab:a5:ad:3a:30:d1:8a:10:4e:b5:c6:56:44:e5:
58:ca:cd:b0:8b:70:dc:ab:ee:2f:88:55:01:08:b5:33:85:bb:
0f:4d:9a:31:21:5c:9a:42:c7:1a:5e:17:06:65:11:25:4e:0e:
22:cc:ff:9a:33:ab:14:bf:84:7d:e6:07:7b:89:13:0d:a3:26:
b2:be:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:02 2025 by rpki-client