Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/HpumjJVb1ZzN2NoBdIKE2dbTJTI.roa
File: HpumjJVb1ZzN2NoBdIKE2dbTJTI.roa (raw, json)
Hash identifier: UgA3oLLLkCbrT3H+Q7rmuDbbuQqUViGFoD1AdBAg8Ow=
Subject key identifier: 1E:9B:A6:8C:95:5B:D5:9C:CD:D8:DA:01:74:82:84:D9:D6:D3:25:32
Certificate issuer: /CN=fd8e827d60cdefed87bc0e6883d6d38c8e4e98b3
Certificate serial: 018CC7256E6A16436715D4372C7A5FD5F57F
Authority key identifier: FD:8E:82:7D:60:CD:EF:ED:87:BC:0E:68:83:D6:D3:8C:8E:4E:98:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y6CfWDN7-2HvA5og9bTjI5OmLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/HpumjJVb1ZzN2NoBdIKE2dbTJTI.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 146.19.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:6e:6a:16:43:67:15:d4:37:2c:7a:5f:d5:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8e827d60cdefed87bc0e6883d6d38c8e4e98b3
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e9ba68c955bd59ccdd8da01748284d9d6d32532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:b1:c2:15:28:e3:ff:bb:78:cb:f8:fd:5f:
57:99:42:e2:72:00:c3:56:2c:11:dc:26:92:b0:0d:
4d:ee:af:03:52:f9:4a:8e:00:59:ea:e9:0e:24:7a:
f9:eb:5e:0d:a0:97:ce:04:2e:01:b5:32:07:eb:25:
1b:43:97:6e:35:f7:ad:89:68:0f:cc:2a:27:fc:3f:
26:bb:1c:0e:51:0c:15:0e:6f:18:86:0a:93:19:bb:
2c:dc:c5:0a:06:c5:ac:45:01:fa:05:a2:db:6a:5e:
55:bf:70:cf:cb:3b:76:f2:b6:1d:0b:80:ca:51:4f:
d9:db:0a:53:04:0b:0f:f9:ed:ac:7c:f6:11:a8:04:
46:52:e8:13:a3:37:9f:a0:03:70:22:64:a6:da:42:
41:33:17:56:a5:b8:ee:52:38:4c:4d:cd:cf:1b:5b:
43:8f:74:16:b3:92:57:a7:47:e5:2b:64:3c:b0:b8:
ca:2e:ca:3e:27:d8:ce:6b:3d:42:60:05:d9:0d:e4:
86:4b:0f:7d:2c:1c:87:c8:c9:b8:66:b3:c9:87:ea:
ac:0e:cd:cd:b1:c4:67:b6:9a:a5:17:f1:c6:6b:61:
21:a2:c8:fb:72:15:09:21:c5:1f:47:d8:b1:24:51:
e1:ac:f3:58:28:77:cc:df:bd:1d:05:00:6f:ee:8c:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:A6:8C:95:5B:D5:9C:CD:D8:DA:01:74:82:84:D9:D6:D3:25:32
X509v3 Authority Key Identifier:
keyid:FD:8E:82:7D:60:CD:EF:ED:87:BC:0E:68:83:D6:D3:8C:8E:4E:98:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y6CfWDN7-2HvA5og9bTjI5OmLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/HpumjJVb1ZzN2NoBdIKE2dbTJTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/956fc1-cd54-4275-bfbc-2de2a16be9ff/1/_Y6CfWDN7-2HvA5og9bTjI5OmLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.24.0/24
Signature Algorithm: sha256WithRSAEncryption
05:18:50:d1:b2:c8:59:fd:a8:62:ea:45:72:d4:1d:ea:34:bd:
c4:0b:83:b0:40:45:8b:14:99:d5:7c:2e:26:7a:11:f4:e0:81:
f4:24:73:e2:78:8f:ff:4f:ff:ff:ca:50:01:11:c9:4a:b2:4a:
8c:60:f4:f2:06:ed:cc:5b:16:c9:b0:e3:40:dd:e2:ec:8d:01:
65:71:59:b5:c5:f8:50:dc:19:e6:a2:10:23:b2:dc:0d:16:47:
46:e1:38:fa:97:b6:b4:05:cd:92:1e:d2:c0:ef:92:1c:67:39:
d9:77:9e:3e:15:bb:f8:94:4c:2d:5d:8a:d0:79:8a:5b:29:51:
84:b2:db:d2:7e:f7:fb:23:97:2d:65:aa:07:75:b5:a9:63:b1:
16:dd:64:98:84:51:78:e7:a2:79:60:29:f4:ab:97:d5:03:2c:
2c:47:6a:4a:fd:7b:a4:42:43:cc:3a:aa:11:f6:47:8d:52:72:
4b:20:1c:78:5c:e5:99:26:f4:72:4a:db:75:41:3f:f6:44:65:
db:24:75:bf:0c:24:38:99:92:9c:1d:d4:e5:2d:23:db:46:f6:
8f:1c:12:e2:0b:c6:b7:9e:0e:06:16:54:3f:8d:f3:cc:6f:d3:
48:0d:ea:3c:ca:58:4a:df:ca:cc:37:d0:d3:bd:38:89:8a:29:
bb:a8:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:37 2024 by rpki-client on console-ams.rpki-client.org