Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/HZD2_vMZa4z9BTeM6vPUjWQEq5M.roa
File: HZD2_vMZa4z9BTeM6vPUjWQEq5M.roa (raw, json)
Hash identifier: 3ShWgPU9VCvwHGadjvk6HIMLRdsUyVtbMAz+iLGE0DA=
Subject key identifier: 1D:90:F6:FE:F3:19:6B:8C:FD:05:37:8C:EA:F3:D4:8D:64:04:AB:93
Certificate issuer: /CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Certificate serial: 0141E0
Authority key identifier: 3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/HZD2_vMZa4z9BTeM6vPUjWQEq5M.roa
Signing time: Fri 25 Mar 2022 07:39:06 +0000
ROA not before: Fri 25 Mar 2022 07:39:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 193.203.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82400 (0x141e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7d334181cc6a3553f758b7b70e370f2d8b1c0a
Validity
Not Before: Mar 25 07:39:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d90f6fef3196b8cfd05378ceaf3d48d6404ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:12:d3:f7:ca:bc:ca:ab:50:15:a7:9c:1f:
87:b5:ec:13:4a:64:ab:b9:4d:2f:4e:34:85:f9:69:
bb:52:84:a1:79:b4:4e:af:26:77:29:95:ad:d0:f0:
00:5f:c2:0a:5e:a7:c3:99:73:d8:8a:be:1e:f9:6f:
36:8f:24:78:9f:e5:72:e4:e2:cb:98:5f:fa:dc:e9:
c8:72:16:a0:c8:4b:33:bb:d4:8a:70:5d:1c:76:80:
94:ef:4e:ad:8a:79:97:5f:63:57:04:57:e2:c0:74:
34:9b:a7:9f:a0:5a:45:2b:79:d6:09:5b:80:fb:a5:
37:e9:cf:46:ab:33:e7:0c:87:cc:41:4f:46:a1:16:
92:15:73:db:93:fb:5e:98:ca:8b:d6:67:7e:2d:2d:
02:3d:cb:a5:cf:48:6d:dc:8c:fd:2d:70:96:af:6f:
a5:61:84:bf:fa:61:dd:be:5a:11:4e:b1:94:b2:65:
20:2c:89:24:04:a2:08:b6:24:3c:7f:52:6d:f2:e7:
ae:a6:d2:51:41:21:44:f2:f5:e0:5f:43:b6:a6:ef:
4a:d6:aa:20:68:96:93:28:90:7b:57:fa:eb:ea:70:
f3:50:e8:c7:56:ef:3b:81:a6:30:7c:fc:1c:a3:c5:
2f:79:09:72:58:b3:73:39:af:f0:1c:6f:42:5c:55:
a4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:F6:FE:F3:19:6B:8C:FD:05:37:8C:EA:F3:D4:8D:64:04:AB:93
X509v3 Authority Key Identifier:
keyid:3C:7D:33:41:81:CC:6A:35:53:F7:58:B7:B7:0E:37:0F:2D:8B:1C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH0zQYHMajVT91i3tw43Dy2LHAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/HZD2_vMZa4z9BTeM6vPUjWQEq5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5f93a4-9340-4ea9-9a80-8a099be0899b/1/PH0zQYHMajVT91i3tw43Dy2LHAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.127.0/24
Signature Algorithm: sha256WithRSAEncryption
40:95:34:86:94:76:99:6f:04:37:aa:54:7c:b1:42:7b:38:07:
50:4d:c8:04:bd:67:82:c1:ef:c3:b8:23:ac:0c:bf:37:88:28:
ec:9e:7c:2f:2f:54:9d:50:35:2c:91:cc:d0:27:47:05:61:49:
e6:5c:f5:c7:8e:89:62:1c:4e:09:57:af:2b:ed:f5:cb:10:ff:
79:0a:cc:1c:d4:77:d9:03:d4:38:22:fe:42:11:61:5c:8e:df:
eb:7a:87:4c:78:44:ec:5c:9e:5e:59:a2:d1:91:6e:78:34:c6:
30:53:42:bd:4e:df:40:bb:3b:ac:f6:70:1f:2a:51:c7:97:a2:
75:a8:f2:09:12:ae:6f:fd:7f:df:40:f7:04:90:45:11:19:bc:
50:a2:5a:6d:ab:c2:80:ed:3e:a5:d3:d4:7a:15:65:dd:02:f1:
6e:3b:e0:1d:70:c0:66:0a:12:e8:47:3a:40:00:4e:2d:48:24:
31:82:3b:21:2e:71:f1:38:d7:82:ed:cd:34:60:14:32:03:ff:
6c:2e:c1:76:90:42:2d:2d:66:a0:04:b7:2c:0f:87:5e:02:05:
ca:21:56:a7:24:cf:84:11:0d:7a:ff:ca:5e:91:30:c2:e7:5c:
f4:a7:09:ba:2d:90:a0:6a:f8:ca:b7:25:81:6a:24:89:c7:3a:
e7:83:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:54 2024 by rpki-client on console-fra.rpki-client.org