Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hp-O9EZ4Mv65J2qwzmg5Gz7IdVo.roa
File: hp-O9EZ4Mv65J2qwzmg5Gz7IdVo.roa (raw, json)
Hash identifier: Db6MBu+v7z5qksGX8pPx/KQ7SNJ5HAOSrbw5TH9NZTY=
Subject key identifier: 86:9F:8E:F4:46:78:32:FE:B9:27:6A:B0:CE:68:39:1B:3E:C8:75:5A
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01828279943495229284273BCEF59D59884A
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hp-O9EZ4Mv65J2qwzmg5Gz7IdVo.roa
Signing time: Tue 09 Aug 2022 11:59:41 +0000
ROA not before: Tue 09 Aug 2022 11:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 141.11.240.0/22 maxlen: 24
141.11.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:79:94:34:95:22:92:84:27:3b:ce:f5:9d:59:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 9 11:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=869f8ef4467832feb9276ab0ce68391b3ec8755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:a2:99:bb:35:ae:f1:91:8b:a5:56:6a:5b:
46:f0:0e:f2:8c:e8:fd:bf:7c:6e:f2:3a:fe:0d:67:
e1:5e:40:d2:5e:97:80:5a:d5:fb:0b:95:f5:c2:ed:
5e:a4:3e:7d:3a:22:0f:0a:1d:d4:3d:08:0a:dd:61:
c1:5a:f8:e2:d2:86:83:08:fa:d2:09:fc:29:fc:37:
5a:51:b4:c9:bc:ef:bd:d0:50:01:22:c4:21:d1:f0:
03:23:45:12:68:8d:24:2b:ff:e3:a0:42:42:9b:65:
c5:13:05:3d:0c:ba:eb:9d:71:0b:b7:6c:96:52:88:
1d:24:e1:65:dc:e1:e2:84:e2:09:04:20:dc:04:46:
15:79:bc:1f:6a:6b:4b:91:c4:7c:8f:94:68:94:b6:
9f:29:39:13:ad:75:c4:c8:57:d8:3e:f7:8d:38:bb:
59:69:08:5a:82:f5:9a:03:b4:e8:e6:18:31:31:88:
56:f7:1c:2b:7b:e7:12:df:56:02:5b:33:68:fc:9d:
2f:18:de:1f:f6:df:c6:0c:da:3a:f6:0c:b8:96:3f:
26:ac:85:c0:5a:6a:3b:7c:07:4f:7f:9a:4c:ff:4c:
14:2b:c5:91:20:ba:10:57:db:1d:ee:cf:44:05:d6:
0f:c7:35:a4:64:e6:8a:03:13:7e:4c:2e:ae:32:c4:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:8E:F4:46:78:32:FE:B9:27:6A:B0:CE:68:39:1B:3E:C8:75:5A
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hp-O9EZ4Mv65J2qwzmg5Gz7IdVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/22
141.11.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:0e:e8:bc:ce:19:69:8a:87:07:63:39:33:79:57:b8:91:72:
87:c4:84:bc:24:ca:3f:38:55:22:ba:a9:a6:58:5b:7c:fd:93:
50:fd:bd:fc:4b:f2:a8:53:eb:17:58:93:9d:87:e6:00:4b:e9:
d3:01:65:e2:62:a1:a6:c4:74:ed:3c:8e:d1:c9:b9:86:53:35:
50:7f:3d:f4:a3:98:83:b3:8e:61:fc:1d:ee:fe:cf:71:66:83:
7e:02:5a:76:53:8b:3f:b3:6b:6b:39:2a:c6:72:32:40:1e:3c:
ac:53:94:d3:3b:14:a7:88:41:5f:17:1a:32:09:7f:20:8a:67:
e4:81:aa:00:5e:0e:40:98:4d:01:5f:34:fd:85:b2:5d:34:46:
e1:e6:e2:d5:a1:4a:fb:09:16:96:20:c3:18:93:8c:57:aa:a5:
f7:07:23:de:aa:91:3f:91:e9:d9:c0:85:86:f0:7a:d7:36:78:
eb:3b:9f:6e:42:5a:f2:6b:c4:9a:c2:7c:d3:87:61:5a:f7:eb:
68:a3:bf:39:13:b7:f4:29:78:22:0d:e5:51:c2:0a:16:ae:e4:
6c:a7:f3:d2:94:5d:fa:62:95:a7:87:2a:56:1b:1a:1a:a6:06:
23:e4:86:1d:2e:3a:ed:96:11:23:2c:84:f3:de:f3:cd:f8:71:
da:4d:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org