Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLgjwkjj0yTjX6pnHIADe1bKIdE.roa
File: HLgjwkjj0yTjX6pnHIADe1bKIdE.roa (raw, json)
Hash identifier: WIFK1aVyR48k+C0tdocygWybghXnyyP1o9iV/109lyA=
Subject key identifier: 1C:B8:23:C2:48:E3:D3:24:E3:5F:AA:67:1C:80:03:7B:56:CA:21:D1
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0184918E58F129CEF1B93AA4F3A206365A60
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLgjwkjj0yTjX6pnHIADe1bKIdE.roa
Signing time: Sat 19 Nov 2022 20:22:15 +0000
ROA not before: Sat 19 Nov 2022 20:22:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 213.225.237.0/24 maxlen: 24
45.80.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:91:8e:58:f1:29:ce:f1:b9:3a:a4:f3:a2:06:36:5a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Nov 19 20:22:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cb823c248e3d324e35faa671c80037b56ca21d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:ff:74:64:9b:a5:2d:ce:cd:80:d8:2c:46:
94:43:c7:60:27:ab:ae:36:c5:ad:2e:dd:aa:13:19:
1c:fb:66:75:04:3c:6d:6e:31:93:35:65:a9:03:f1:
b8:7b:9c:41:d8:a4:d5:91:8c:04:b5:2d:02:72:e8:
2f:d7:38:1c:d8:ee:de:8a:1c:6a:c9:67:31:f5:6b:
04:4f:5a:e4:72:bc:f9:7e:e0:f3:12:a9:88:27:90:
da:9a:4d:94:80:e1:14:4e:f5:36:95:5f:86:6b:26:
12:49:b0:9c:11:66:34:4d:9b:a7:40:f3:23:88:aa:
f1:41:da:f0:8d:34:89:0a:61:ec:87:07:8f:27:c5:
29:20:50:7b:21:77:8e:03:4c:58:7f:8c:3b:77:35:
19:ab:1a:9b:50:93:2b:83:46:a2:3e:5f:d4:64:80:
9c:29:75:d6:ca:b2:02:d8:32:82:65:24:ee:23:88:
1c:fb:2f:d5:81:84:1e:dd:79:e4:f8:5b:e4:96:d3:
b1:a7:19:f8:85:5a:b4:ec:a9:1c:5b:e8:c9:74:06:
f4:60:07:8f:ca:ac:6c:32:0e:c1:c6:ae:43:a7:49:
d5:ed:ea:61:ce:e1:1f:c8:af:95:55:3e:e1:5b:f4:
23:8a:a0:df:28:64:85:f8:af:e5:80:65:c1:1e:cb:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:23:C2:48:E3:D3:24:E3:5F:AA:67:1C:80:03:7B:56:CA:21:D1
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/HLgjwkjj0yTjX6pnHIADe1bKIdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
213.225.237.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f5:ce:f0:08:5c:f2:d9:f3:98:3c:54:4c:6a:30:f3:ad:af:
aa:85:84:2a:ac:38:72:04:74:5c:18:f1:21:e3:08:84:93:36:
22:10:18:7d:c9:f4:f6:e8:2d:86:95:59:b1:52:5b:13:36:5e:
57:0a:d2:c4:e2:67:4d:23:46:5c:81:54:6c:f5:8b:f6:0d:eb:
2c:63:c6:aa:dd:5d:d1:ac:70:09:75:0d:3c:01:9a:e1:17:9a:
0c:d2:6f:08:12:67:4f:ac:6a:27:38:3a:65:c4:44:d9:27:3e:
30:77:2f:d2:06:cf:09:a2:6f:6d:80:83:5a:1f:27:3b:0e:20:
6e:0f:98:3e:2c:66:66:02:18:1b:17:6d:84:8f:57:a7:44:49:
2e:3f:20:25:1c:9d:0b:7e:74:ac:ae:4e:39:eb:d7:2b:ab:68:
e4:13:81:63:db:82:bb:72:0e:a5:5f:b0:14:28:e1:34:31:9e:
9d:a0:65:66:e3:3c:43:e3:9f:ba:ea:95:d3:6c:bd:20:2f:7b:
a6:5a:c7:62:eb:7e:0b:a7:eb:7a:2c:8f:58:fe:07:2d:1b:a9:
61:0b:ef:50:b4:e6:e2:e0:d7:2f:d9:de:c5:04:f5:55:74:4d:
25:18:05:45:f6:b4:2b:e5:65:c8:cf:93:80:bd:c2:03:f1:81:
ff:bc:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org