Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/HZD-0NCotj9dENj3oWuREJlmtyA.roa
File: HZD-0NCotj9dENj3oWuREJlmtyA.roa (raw, json)
Hash identifier: zSBsDmBKKVwxElwoHJWAuY2iIJIfpZWL7O3UgX2G8Xk=
Subject key identifier: 1D:90:FE:D0:D0:A8:B6:3F:5D:10:D8:F7:A1:6B:91:10:99:66:B7:20
Certificate issuer: /CN=56b001a946e67129d794235b515b20d9ea908a87
Certificate serial: 01856BF7EE90D110AA339075BF5B25244888
Authority key identifier: 56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/HZD-0NCotj9dENj3oWuREJlmtyA.roa
Signing time: Sun 01 Jan 2023 06:14:48 +0000
ROA not before: Sun 01 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 62.233.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:ee:90:d1:10:aa:33:90:75:bf:5b:25:24:48:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b001a946e67129d794235b515b20d9ea908a87
Validity
Not Before: Jan 1 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d90fed0d0a8b63f5d10d8f7a16b91109966b720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:94:aa:30:44:53:bf:2a:62:89:e1:d5:ee:
a5:ba:b5:ac:a9:5b:17:97:26:a0:a1:e6:f1:7f:ee:
7d:ed:17:c9:6d:ad:db:03:45:6a:6e:56:28:7a:1f:
ed:01:3b:5c:53:0f:b4:1f:69:72:cd:4b:8d:a0:f0:
11:43:61:b8:5a:8a:26:cc:6b:05:92:54:91:0e:2b:
29:c7:f1:38:c2:e6:97:d8:11:6b:58:d1:bc:af:31:
13:e4:82:ef:03:3a:c2:fa:bc:e0:3a:ab:a5:35:4d:
e9:36:4b:ff:c1:35:92:06:f6:fd:10:f8:f3:af:f2:
d3:5e:91:ac:ea:0d:e9:c9:03:17:44:3a:77:44:96:
64:e5:7f:e9:b3:d0:cc:67:40:8d:50:5e:c8:a1:63:
3b:2e:2c:5b:60:04:84:d4:e4:7f:ce:27:c0:58:5c:
0c:3b:0c:03:b6:46:da:f8:f9:18:c0:ec:37:ca:da:
25:aa:4d:31:df:34:04:9e:01:e9:e4:3c:cb:67:25:
f9:65:ec:13:ee:0a:28:74:9e:fe:d8:12:b9:1b:af:
9f:04:bd:2e:d4:5e:8f:5c:46:a1:32:b2:5e:e5:44:
15:63:b2:9f:51:a1:95:6b:a3:69:61:7a:9a:12:a4:
a3:ce:f8:13:a5:70:b7:a3:35:c0:51:75:d1:be:dd:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:FE:D0:D0:A8:B6:3F:5D:10:D8:F7:A1:6B:91:10:99:66:B7:20
X509v3 Authority Key Identifier:
keyid:56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/HZD-0NCotj9dENj3oWuREJlmtyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/VrABqUbmcSnXlCNbUVsg2eqQioc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:58:5c:6d:18:25:61:96:e0:12:3d:99:2d:63:ae:74:fc:57:
f6:a1:cb:6e:7a:5e:f1:e2:9d:94:4a:ff:05:c5:af:57:5a:b4:
d7:cd:25:ac:11:4f:b9:c8:e1:30:a2:4d:0f:0c:fc:f3:90:66:
94:d2:1f:d3:ab:f3:23:1e:6a:62:84:06:a4:00:ed:ba:e7:57:
4c:e4:e4:60:7d:d1:c5:d8:db:cc:b0:d8:f0:49:52:ed:01:0a:
66:cd:24:32:f3:d2:1c:d3:cd:fb:12:ac:90:c0:b8:da:b7:09:
26:11:f7:34:a8:d0:b8:b6:f6:9b:26:50:ce:40:0f:38:2b:78:
58:61:5b:0e:fc:14:67:44:04:e4:17:76:2e:0b:63:e8:5f:f0:
7a:ce:aa:fe:f9:29:a5:f8:d7:c1:66:68:80:02:cf:36:47:81:
70:ab:71:af:4b:26:d9:76:b3:55:ff:4f:99:dd:04:dd:c5:15:
2f:3e:06:b0:8d:ec:8f:4a:0a:f3:c1:a0:20:15:6b:89:e1:81:
79:84:5f:84:21:7f:ed:8e:95:9a:cf:0c:e6:92:d9:ed:69:a1:
95:64:2e:10:c1:b7:fd:dd:40:76:e1:e2:88:a8:fc:a1:92:fb:
de:5c:db:af:e7:cf:44:1a:38:3c:fb:d1:9c:72:90:62:92:a2:
e3:10:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org