Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/HnsWAelHGbhuCd60q336PvXJTdA.roa
File: HnsWAelHGbhuCd60q336PvXJTdA.roa (raw, json)
Hash identifier: CpDZ1tcJMKvv7fuSDL1jgWz9HtwPiCzqz2Z2N1GhDpg=
Subject key identifier: 1E:7B:16:01:E9:47:19:B8:6E:09:DE:B4:AB:7D:FA:3E:F5:C9:4D:D0
Certificate issuer: /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial: 14727B36
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/HnsWAelHGbhuCd60q336PvXJTdA.roa
Signing time: Sat 01 Jan 2022 03:58:59 +0000
ROA not before: Sat 01 Jan 2022 03:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34012
IP address blocks: 162.248.199.0/24 maxlen: 24
162.251.33.0/24 maxlen: 24
2a01:40e0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343046966 (0x14727b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
Validity
Not Before: Jan 1 03:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e7b1601e94719b86e09deb4ab7dfa3ef5c94dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:b1:92:56:90:3c:10:9c:05:38:f6:d9:12:
b9:4c:e3:6d:21:7b:c4:67:ad:63:af:4e:cf:c6:35:
fa:7d:92:41:ab:d1:e8:87:45:4d:f6:5a:58:92:f3:
7d:cb:a7:9b:f5:5c:a3:d0:cc:d0:28:16:5b:a1:17:
ba:4b:c1:c2:f6:ea:6a:cb:1e:b9:c0:92:b0:06:94:
74:01:4d:59:17:fd:81:b8:7c:cb:12:a5:bc:66:ff:
2f:e2:72:ca:de:f8:7c:fb:55:02:64:1b:24:8d:d4:
60:3f:64:a9:7c:23:6e:98:4d:27:df:ea:37:4e:2b:
27:4a:82:43:7a:a5:29:5d:38:34:17:1d:fd:c4:c7:
ee:18:39:b5:b0:f5:86:b8:37:82:33:f7:dd:f4:b9:
ea:cf:cc:bf:29:3b:be:ae:ef:e7:70:4d:de:39:4d:
d7:cb:83:c3:85:19:bd:10:55:a7:19:0c:40:8d:57:
ea:ff:ac:cb:7f:a7:42:29:a1:f9:ad:26:97:e5:e6:
f6:5e:53:2e:94:b9:6f:61:ba:d2:48:1e:16:d5:89:
11:e6:92:73:07:1d:90:0f:80:6d:fc:cf:8e:27:e5:
ab:32:3f:fa:94:6d:57:c0:4f:02:1b:61:7d:56:c7:
40:e4:c3:ae:66:63:8b:51:a0:91:fd:3d:2f:cf:e2:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:16:01:E9:47:19:B8:6E:09:DE:B4:AB:7D:FA:3E:F5:C9:4D:D0
X509v3 Authority Key Identifier:
keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/HnsWAelHGbhuCd60q336PvXJTdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.248.199.0/24
162.251.33.0/24
IPv6:
2a01:40e0:2::/48
Signature Algorithm: sha256WithRSAEncryption
11:95:66:a6:c4:32:09:ff:cb:78:90:57:1d:f7:cf:96:cf:fd:
6f:f1:18:58:03:04:ef:49:1f:0e:5c:8c:0e:37:eb:ed:9e:3c:
d5:fd:64:a3:f6:56:68:18:cb:10:14:e3:13:c0:a3:1e:f8:33:
ef:09:1d:89:48:44:01:89:2e:e2:c9:55:4c:5c:39:f8:b3:5f:
56:00:bd:e9:cc:f6:d0:48:fe:67:56:75:f6:d2:7d:a0:af:22:
b4:75:e0:14:d7:fb:41:07:6d:60:84:34:77:5d:45:7e:6e:66:
99:71:d6:a0:ce:6a:66:58:05:55:8e:52:73:3a:86:64:92:d3:
c2:ad:c7:9f:12:e1:7b:38:f3:03:61:de:2d:34:70:19:53:6b:
fe:64:e3:c5:43:4c:47:a9:a4:11:fd:ea:26:ac:49:45:78:f9:
39:9e:e6:e1:78:de:3d:67:e6:4c:ec:23:af:c4:73:97:e7:5b:
5e:8d:0b:c0:b5:b6:fc:0b:c7:a1:b0:24:53:1a:ca:da:bf:b8:
a3:d1:65:45:7c:f2:a3:f5:b7:c5:3c:93:0d:66:5a:49:b6:4d:
36:4d:85:c9:b0:a5:3f:a3:09:61:78:3b:18:23:44:89:2a:92:
bc:aa:3a:4a:fd:31:6f:a5:0a:91:84:8b:d4:6b:33:94:dc:e1:
ba:6f:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org