Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa
File: HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa (raw, json)
Hash identifier: 8hPRF1kSkaqVUmPVilq+o++ih9QWxDQj5I1rzqFV9dA=
Subject key identifier: 1D:B4:A1:E2:2A:81:E6:52:EE:1A:00:38:D9:90:2A:84:24:C0:18:46
Certificate issuer: /CN=93f84606257f2ddbdfa983b62cefbc1037cd73c4
Certificate serial: 1893BDAB
Authority key identifier: 93:F8:46:06:25:7F:2D:DB:DF:A9:83:B6:2C:EF:BC:10:37:CD:73:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa
Signing time: Sat 01 Jan 2022 10:01:36 +0000
ROA not before: Sat 01 Jan 2022 10:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 194.53.89.0/24 maxlen: 24
194.53.88.0/24 maxlen: 24
194.53.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412335531 (0x1893bdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f84606257f2ddbdfa983b62cefbc1037cd73c4
Validity
Not Before: Jan 1 10:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db4a1e22a81e652ee1a0038d9902a8424c01846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:99:86:7a:a3:a8:c3:e8:5c:88:04:94:69:
5b:9d:48:fc:6b:01:56:da:6c:85:57:3b:f5:ba:8a:
78:c8:fe:7f:bf:b9:25:8a:5b:ac:03:d4:4d:bc:08:
6d:c8:f2:ee:d1:6a:0a:74:1a:37:03:a7:ce:64:6c:
82:37:e5:2d:a7:05:d9:43:7a:61:09:19:e2:62:34:
67:6d:3f:92:fa:2d:7f:54:9c:ad:96:50:b3:83:a8:
a1:7e:6b:11:fa:00:ec:a9:2d:b9:f4:90:90:3f:c9:
4c:14:7b:af:17:62:79:54:38:ee:61:4f:6b:ad:8c:
dc:fc:f6:8d:ba:77:74:c1:0a:ea:c7:08:03:9a:f7:
7b:48:0f:d7:df:2f:a1:0e:96:35:96:f7:5c:83:95:
6a:61:0b:7a:ce:9e:c2:7a:c2:6f:4d:ff:73:d8:52:
87:3b:3b:f1:20:60:74:19:61:d2:ac:dc:e9:2c:78:
e8:ae:0e:d2:df:6c:92:be:d0:47:b7:6a:e5:78:a1:
e8:13:68:31:0d:bf:3b:6c:7d:83:2a:a3:18:e7:77:
1e:e8:f7:82:dc:e8:9d:1c:9a:e3:64:ce:8e:87:5d:
59:a4:65:d8:ab:57:06:ca:34:9c:76:17:8f:ed:f7:
ce:49:48:89:cf:a6:b3:3a:50:2e:d0:b0:03:7a:5b:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:A1:E2:2A:81:E6:52:EE:1A:00:38:D9:90:2A:84:24:C0:18:46
X509v3 Authority Key Identifier:
keyid:93:F8:46:06:25:7F:2D:DB:DF:A9:83:B6:2C:EF:BC:10:37:CD:73:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/HbSh4iqB5lLuGgA42ZAqhCTAGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8b78a0-d9bb-4470-9d13-6818df7975e9/1/k_hGBiV_LdvfqYO2LO-8EDfNc8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.88.0/23
194.53.92.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f6:5a:14:3f:72:7b:da:7d:ec:bf:70:90:40:ec:2b:ff:9f:
d8:a8:68:56:5d:58:2a:57:26:88:5a:03:6b:64:7a:37:82:5a:
0f:ef:e1:ea:44:38:f4:ea:9a:5f:55:6e:b4:f8:e3:82:04:a2:
26:90:a3:89:e3:29:73:95:54:eb:cf:b2:ce:92:71:66:9d:12:
9e:f4:22:2b:5d:8a:f6:83:74:96:07:5a:02:5a:8c:e5:3f:d2:
97:47:27:4f:08:8a:6c:51:38:9a:19:b2:9a:51:bf:22:13:8e:
0e:6e:8b:0f:72:8e:f0:78:d0:c6:4e:4d:94:bf:3a:50:02:0b:
9e:20:0a:9d:72:5c:54:6a:44:72:36:af:c8:99:be:c4:6c:d7:
35:a0:3d:74:64:63:36:b7:bd:d5:82:99:12:fc:55:52:97:2f:
11:e8:23:11:dc:fb:ad:56:a8:eb:e7:57:36:34:1d:1a:33:aa:
7b:46:fd:49:61:16:35:fb:68:37:ae:a7:96:4c:31:86:58:0d:
d4:29:8a:ba:ba:ec:46:ae:28:6d:a1:74:9a:ec:04:52:9f:52:
d9:63:49:c8:14:d4:e7:f5:ad:95:b7:ce:31:88:2e:46:62:2f:
99:44:e6:ba:ab:86:84:ef:7f:23:30:c9:7b:b5:87:2e:71:e2:
58:6c:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org