Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HiKuGVP2vAECkImsK5j42w7zNZk.roa
File: HiKuGVP2vAECkImsK5j42w7zNZk.roa (raw, json)
Hash identifier: D9KrFbP4+f5nMrY5rjMAwjND8jWOrvmSENFdubt+tsU=
Subject key identifier: 1E:22:AE:19:53:F6:BC:01:02:90:89:AC:2B:98:F8:DB:0E:F3:35:99
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04847078
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HiKuGVP2vAECkImsK5j42w7zNZk.roa
Signing time: Wed 11 May 2022 05:57:01 +0000
ROA not before: Wed 11 May 2022 05:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 147.78.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75788408 (0x4847078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 11 05:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e22ae1953f6bc01029089ac2b98f8db0ef33599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:e3:50:77:b8:f5:3a:f8:16:02:2b:6a:93:
36:76:a0:57:cf:cb:1e:3f:39:8e:4b:a6:ef:ad:ab:
a5:66:88:a9:7a:58:3a:52:35:d5:3b:82:8a:50:ca:
c6:2a:95:98:69:3c:a0:2e:21:41:62:63:7e:96:08:
bd:34:b6:70:22:a2:9c:14:0c:27:0c:21:76:e5:9d:
aa:14:af:0a:2c:9a:ef:84:ea:bb:5d:56:05:72:9e:
bc:6e:6c:62:e9:02:54:12:a7:53:af:e8:61:d5:60:
2b:df:43:6f:38:24:b0:c9:10:56:a9:c6:d3:ec:e0:
8a:57:a4:9f:cd:5f:60:b6:24:19:ec:5b:2e:80:61:
38:1f:6e:b4:dc:6e:d6:60:4d:4a:f7:ba:f1:9d:3f:
e0:9e:0c:91:d8:64:d4:41:e7:71:ac:9a:89:4c:e9:
36:5f:a2:e5:5a:62:3a:eb:c6:aa:09:78:3d:f0:8f:
a4:50:6c:f0:97:cd:a9:d7:1d:b7:0c:e8:ec:d1:89:
d6:1c:e1:f7:a1:53:50:98:11:36:9a:ff:32:00:3c:
9e:39:7d:78:45:78:31:ff:2f:05:63:30:72:e5:51:
a8:93:62:ad:47:8f:38:08:65:e1:49:25:27:ec:93:
86:2f:ad:b6:f4:b3:54:61:7a:79:8c:51:f2:8b:76:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:AE:19:53:F6:BC:01:02:90:89:AC:2B:98:F8:DB:0E:F3:35:99
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HiKuGVP2vAECkImsK5j42w7zNZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a4:ab:fc:eb:0f:2f:69:39:51:8d:e2:f9:94:ed:05:5d:62:
a7:0f:2a:38:76:5b:29:d2:28:88:9a:40:9c:58:21:da:b8:36:
74:73:f0:33:c5:27:ef:f5:02:d2:bb:40:3a:24:15:c4:ec:b3:
95:ab:01:13:eb:79:1e:4c:3b:d9:48:2d:54:b8:57:c7:dd:76:
2c:2a:1e:ec:b3:8e:5c:05:2f:d9:58:79:30:85:5e:cf:28:32:
32:68:14:ce:81:ad:04:2f:45:58:61:99:cf:78:e6:56:77:b2:
df:d2:8f:d7:d0:d2:a0:f7:0a:aa:e9:72:bc:52:c3:57:08:40:
3d:ae:f9:b1:e2:d2:b6:0d:a2:3b:35:db:a6:48:ab:ce:97:3a:
65:24:34:4a:d5:25:7d:8f:e4:78:2c:ab:d7:48:f3:1e:97:d1:
4a:41:62:b4:3e:49:27:bd:e6:5e:86:a5:da:4c:56:62:02:0d:
e2:f0:17:9f:9c:5e:0a:2a:96:44:82:80:22:8e:f1:3c:04:da:
03:40:88:25:8b:6e:c4:9e:ec:d4:bc:b4:3a:49:39:a6:d6:8d:
11:58:7c:90:19:dd:9f:8b:b8:52:3d:e9:10:c7:9e:ba:25:46:
cd:67:55:cb:86:87:b0:d3:0a:0d:67:46:34:c2:06:c2:73:b6:
fd:01:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org