Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNX3H3iJqeOAzSgYRPmqQTaMrkA.roa
File: HNX3H3iJqeOAzSgYRPmqQTaMrkA.roa (raw, json)
Hash identifier: ekxucKw09hjwQaIfiw7do52KLG8YLc35R7HjS0CX5Fg=
Subject key identifier: 1C:D5:F7:1F:78:89:A9:E3:80:CD:28:18:44:F9:AA:41:36:8C:AE:40
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 018451AA10AB9B1F93B3CB8B86CD47A22D44
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNX3H3iJqeOAzSgYRPmqQTaMrkA.roa
Signing time: Mon 07 Nov 2022 10:36:50 +0000
ROA not before: Mon 07 Nov 2022 10:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:aa:10:ab:9b:1f:93:b3:cb:8b:86:cd:47:a2:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 7 10:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd5f71f7889a9e380cd281844f9aa41368cae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:00:f1:1b:09:e2:e5:1c:e1:bc:92:d4:66:
66:4f:f5:25:a1:21:45:f7:b9:65:dd:96:25:10:e9:
77:b7:74:b9:2b:93:1d:05:8b:35:f0:19:d4:88:ac:
15:2b:2d:5a:6e:50:48:81:2a:0e:24:ae:4a:88:b5:
e0:41:bd:f9:21:96:1e:46:22:4f:56:64:41:3b:07:
68:d5:f8:cb:7c:ae:53:b7:be:ef:f2:f0:e1:56:12:
7f:f2:8f:64:19:b5:3e:24:6c:5d:53:91:3f:63:08:
fd:ac:59:2e:e6:36:a3:33:b5:8d:2a:b8:89:f2:fe:
ff:52:70:df:03:53:e1:75:11:ec:dc:51:4e:f7:13:
e2:a9:90:f9:00:43:62:b6:27:0a:66:6f:27:ff:d7:
e1:50:d8:f8:6a:28:64:db:98:84:0f:3c:f0:d5:f9:
23:1b:ca:eb:2d:e5:5d:dd:3d:6c:7d:b1:a9:72:93:
2d:53:81:21:07:e8:b1:f9:ce:55:87:d6:10:69:f3:
2f:fb:07:e9:8d:8e:4c:07:04:70:3e:b6:d5:d9:98:
8a:18:61:7e:08:f5:a1:60:70:b4:91:b1:71:02:5c:
cb:33:67:96:3d:a8:9c:34:29:ce:cc:58:10:8c:7a:
f6:a5:b9:13:3d:2c:a0:95:3e:2f:7a:2e:70:d1:f2:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:F7:1F:78:89:A9:E3:80:CD:28:18:44:F9:AA:41:36:8C:AE:40
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNX3H3iJqeOAzSgYRPmqQTaMrkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0d:8e:ec:d3:38:b1:f9:a2:1f:e8:37:19:66:44:2a:c4:24:
73:71:a6:92:c7:11:8f:7c:44:b8:20:01:81:c9:fd:e4:62:14:
4c:f1:cd:47:fe:71:fa:a8:cb:cf:91:87:93:17:67:01:e7:52:
2b:43:86:17:8a:80:dc:b1:7f:62:80:8e:ca:d3:72:ed:b6:0c:
a5:60:00:0d:26:4f:3a:6c:d4:d2:6f:4b:1b:91:a4:77:cc:bb:
9a:d6:6a:c4:f2:0b:4e:a8:7f:bc:1f:8e:f4:05:f5:cc:5a:ec:
83:21:7a:4b:82:77:63:46:8d:27:eb:2b:ec:59:f4:4f:b1:0b:
bf:b9:fe:11:e9:6d:10:de:0a:70:58:e5:b9:06:f5:e7:b0:94:
22:7b:44:35:75:c3:28:06:aa:9c:b9:23:72:f4:1a:e6:6d:6f:
92:ad:cd:d5:37:c7:15:a3:c1:c5:1e:7d:0c:c6:db:9e:2c:8d:
33:62:7f:79:4b:ef:c5:23:1d:7d:8a:d4:7f:48:fe:f5:85:d3:
03:ec:1e:82:dd:ad:1b:a6:b1:37:a4:d0:9c:a5:75:5e:66:00:
9e:b3:18:78:b7:2d:c0:dd:27:35:21:69:1b:a0:ae:ff:19:65:
c6:36:d5:6a:a3:60:97:8c:9c:75:af:69:f7:18:af:ae:de:0e:
55:56:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org