Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HTOh1XllavcI0eM72PWx1M5BmVQ.roa
File: HTOh1XllavcI0eM72PWx1M5BmVQ.roa (raw, json)
Hash identifier: zJjjgxUJvmZofEwJAMoh4+oAu5hfWGG9g+kQHr4pcpQ=
Subject key identifier: 1D:33:A1:D5:79:65:6A:F7:08:D1:E3:3B:D8:F5:B1:D4:CE:41:99:54
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184516823CE98986B42A8B2FC24E8A1514A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HTOh1XllavcI0eM72PWx1M5BmVQ.roa
Signing time: Mon 07 Nov 2022 09:24:50 +0000
ROA not before: Mon 07 Nov 2022 09:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 176.105.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:68:23:ce:98:98:6b:42:a8:b2:fc:24:e8:a1:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 7 09:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d33a1d579656af708d1e33bd8f5b1d4ce419954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b2:23:51:d5:dd:83:07:63:29:3b:ff:18:42:
2b:94:e6:f1:36:74:6c:73:e6:5f:78:ea:a9:41:2a:
1f:1e:b7:8f:d6:d6:75:94:5f:c2:80:6a:d2:0c:ee:
db:36:9b:51:0e:d5:2e:b7:e1:c6:8d:83:75:fe:76:
80:7b:a8:9f:05:83:cb:06:7f:52:c1:68:d8:24:68:
48:e1:3e:00:2d:6f:84:95:da:d3:5b:14:0e:50:50:
de:2d:2e:24:5e:cc:49:9a:e2:1b:e1:c0:b5:ba:91:
b5:33:3d:ae:48:b9:fa:42:40:fa:85:9a:43:0b:fd:
b7:10:49:ce:bc:4a:77:54:d7:20:18:22:e1:ed:5e:
db:4c:65:6b:4e:2e:34:64:68:9e:b9:e2:ec:bb:b3:
19:cc:b5:e0:c2:22:86:3b:5a:6b:72:e1:7c:55:20:
8a:d4:0e:00:9a:51:7f:04:75:9f:08:1f:14:b1:a9:
08:cd:b3:08:8b:84:39:e7:d4:cd:6f:3d:6f:cf:8b:
37:c7:0a:6f:58:f8:a9:33:64:8f:d7:b0:a0:21:57:
73:11:0f:08:7c:76:68:68:3e:8c:9c:41:d9:5b:22:
e0:b0:ae:2e:36:33:97:68:be:fe:fa:e2:71:f6:da:
e7:db:c3:c3:1f:19:63:81:b2:59:83:4e:88:5a:30:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:A1:D5:79:65:6A:F7:08:D1:E3:3B:D8:F5:B1:D4:CE:41:99:54
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HTOh1XllavcI0eM72PWx1M5BmVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:91:af:f9:e8:5e:b4:83:c9:1b:29:41:61:fe:8f:7a:16:57:
a4:1e:d5:3e:09:0c:e3:e4:b1:3c:66:a9:2b:39:04:a7:f0:88:
93:e7:09:ed:bb:d8:43:86:5b:ba:44:57:09:24:34:02:9a:22:
61:23:c3:ea:0b:f3:c3:53:88:6c:5d:87:c4:a2:78:ae:4f:fb:
b6:ed:52:eb:a7:95:4f:53:71:b2:43:20:66:56:30:f7:23:5b:
44:96:1f:b0:6f:69:c0:be:e4:8c:0a:a3:a8:d4:67:47:6f:4c:
84:fd:c3:0b:80:b8:7d:2c:5d:6e:e8:23:46:08:99:55:7c:06:
06:a7:67:90:e9:18:5e:fa:5e:14:09:78:88:c4:53:36:f4:97:
ac:20:52:2e:e3:8d:45:12:77:a6:f3:80:0f:25:c0:57:a6:5a:
a2:7a:85:bf:2f:6b:d4:41:20:82:d6:f7:f2:ef:b6:59:84:cc:
47:a7:0f:64:0b:93:b0:de:ea:35:44:7b:45:ed:45:a1:27:2b:
fb:22:45:49:66:61:92:ec:53:c8:f9:4c:63:8c:a6:94:d0:74:
22:bf:3d:39:06:ec:52:8e:ee:8b:33:84:da:03:85:2e:88:04:
ec:19:34:67:c9:24:a1:8a:5b:7c:8c:c7:91:4a:56:7c:40:71:
28:c6:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org