Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/HUAymGdDGZsnas5v0IoIwstmO3Y.roa
File: HUAymGdDGZsnas5v0IoIwstmO3Y.roa (raw, json)
Hash identifier: yUaZUvs5AyuMk9jixFb85WqwYf8XrB9Z5oYF7sob8X0=
Subject key identifier: 1D:40:32:98:67:43:19:9B:27:6A:CE:6F:D0:8A:08:C2:CB:66:3B:76
Certificate issuer: /CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Certificate serial: 01856FCBAECFABF5FD890C693842F0E50D72
Authority key identifier: D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/HUAymGdDGZsnas5v0IoIwstmO3Y.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ae:cf:ab:f5:fd:89:0c:69:38:42:f0:e5:0d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d4032986743199b276ace6fd08a08c2cb663b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:6f:a0:2c:c7:61:40:ff:03:4a:5d:10:c3:
97:8b:6c:d9:71:b6:e0:c1:6d:22:c6:52:f8:46:a9:
45:e4:39:6c:f0:b4:2f:04:f6:a6:7c:d7:43:2f:85:
3c:be:4c:a3:0d:08:a5:ce:e8:7c:77:5c:76:7f:6e:
93:35:b1:06:bd:64:f6:ba:37:9e:6d:05:1a:46:9e:
92:87:82:69:33:13:80:0a:5b:bb:87:1a:64:87:41:
0b:14:f5:d3:4e:8a:00:30:e5:10:b0:82:5b:60:be:
3b:68:a1:98:b0:fb:82:3b:94:c6:f7:55:d5:ed:c9:
4a:b5:e0:56:c7:4c:29:f4:79:46:a4:0f:81:ba:c6:
87:7b:bb:d9:99:a4:44:b2:7b:7c:d0:f7:76:b0:96:
f2:8b:68:f4:db:20:3e:2f:44:78:71:53:a6:af:ec:
41:ed:09:49:13:62:3e:5e:de:40:6f:c6:90:99:18:
56:f7:62:68:b6:49:bc:ee:8f:ed:c3:b9:56:a4:cb:
90:7e:73:40:dd:06:a9:f8:7c:49:ac:44:a2:d4:60:
68:95:6f:09:d9:08:af:92:89:9e:9e:07:d4:ef:4a:
00:37:f0:c8:24:1d:35:5f:ec:c4:35:7f:4c:f5:8a:
66:30:9a:0d:05:82:5e:ff:7a:d1:c7:50:70:95:07:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:40:32:98:67:43:19:9B:27:6A:CE:6F:D0:8A:08:C2:CB:66:3B:76
X509v3 Authority Key Identifier:
keyid:D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/HUAymGdDGZsnas5v0IoIwstmO3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4a:76:d4:53:36:dd:36:40:24:72:18:c3:14:da:13:e0:33:
bd:d6:36:77:8d:76:1a:34:ac:65:22:60:b0:d1:76:c6:93:bb:
d1:19:8b:e4:51:d1:87:53:58:e7:4d:0d:cc:db:9e:6c:07:23:
54:04:b1:6a:66:e0:12:2e:d7:db:26:c3:6e:b8:a2:18:74:3c:
8f:3e:ed:6b:14:a0:29:09:62:dd:53:a3:6b:14:13:ac:56:0a:
c7:0c:aa:f1:cb:6b:09:83:59:0d:0f:b9:52:c9:a4:16:f9:db:
54:14:60:ba:ff:08:0f:91:66:e7:f8:44:88:a7:5f:e5:7b:fe:
90:47:87:23:02:de:c4:f7:f1:f1:9b:ec:11:ae:ab:91:c1:dc:
54:71:2f:cb:d5:ee:39:87:ef:61:7c:fe:57:4d:81:16:66:1c:
f6:d5:21:3b:7e:90:00:e3:09:fd:85:fb:96:82:f9:47:b3:1a:
a8:3b:b8:6f:b0:f9:4f:ad:1a:10:14:7a:53:bb:d2:8f:68:79:
e4:e0:47:16:65:b7:12:ff:a1:c3:7b:a2:0a:1b:14:8b:94:56:
a1:95:e7:3a:22:d3:f3:be:2f:0b:16:d5:9d:c9:42:39:3c:c2:
e5:f6:91:2e:e4:b8:08:c1:85:56:eb:d9:88:47:0f:3f:ec:c1:
ef:fa:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org