Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/HyXCUiSbaj8XurTbkdSRyrQICcM.roa
File: HyXCUiSbaj8XurTbkdSRyrQICcM.roa (raw, json)
Hash identifier: jiDAr70buu7hHzm76uavZH0Hp6OsTSseHUKQnNCardc=
Subject key identifier: 1F:25:C2:52:24:9B:6A:3F:17:BA:B4:DB:91:D4:91:CA:B4:08:09:C3
Certificate issuer: /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial: 018596717FFCE381364272C2B9A6859610A5
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/HyXCUiSbaj8XurTbkdSRyrQICcM.roa
Signing time: Mon 09 Jan 2023 12:11:38 +0000
ROA not before: Mon 09 Jan 2023 12:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.19.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:71:7f:fc:e3:81:36:42:72:c2:b9:a6:85:96:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Validity
Not Before: Jan 9 12:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f25c252249b6a3f17bab4db91d491cab40809c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:97:32:2c:aa:92:5e:47:61:f3:c9:3e:61:
a4:d0:47:75:3d:aa:78:eb:de:b3:21:19:ff:b0:38:
9f:ea:bf:5b:7f:5f:9d:85:72:7e:9d:c7:30:23:a8:
b6:07:3e:48:d8:af:52:3d:79:45:07:c3:2f:0b:0a:
de:78:b5:0d:f7:06:5b:d6:4f:fe:b2:37:a9:42:35:
39:f4:32:be:b6:5d:28:7b:a9:f2:1a:c5:74:38:8d:
8a:04:1e:3f:79:5f:8d:1e:cd:c5:0b:82:de:75:5b:
61:b4:ff:26:f6:e9:e2:05:e5:60:81:ed:ec:31:ac:
4f:7a:86:4b:34:1c:1d:9c:75:34:a6:a3:63:c3:18:
c0:7b:17:3f:5e:6a:18:f1:a6:7e:79:9d:26:6f:e8:
1f:e5:44:b5:c9:c0:44:d7:2b:b7:d5:c0:5f:37:bd:
6a:6e:52:56:63:7e:5e:91:34:43:ba:35:fe:0e:05:
ff:e5:11:e6:cd:67:6f:8e:63:d2:ad:db:d8:02:64:
33:38:99:48:65:13:b6:46:6f:0d:96:12:ae:f8:46:
01:f1:76:b3:8f:ee:74:61:f8:7d:1a:0d:2b:aa:4b:
3a:78:af:34:d7:28:ea:68:83:88:2f:58:d0:66:76:
47:d2:36:f0:19:6a:73:0e:d7:8b:f3:4d:9b:74:c6:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:C2:52:24:9B:6A:3F:17:BA:B4:DB:91:D4:91:CA:B4:08:09:C3
X509v3 Authority Key Identifier:
keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/HyXCUiSbaj8XurTbkdSRyrQICcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
57:35:df:1c:9f:f7:33:ad:d1:75:ad:b3:cc:d8:31:22:25:55:
7b:54:ba:38:0f:1e:12:74:6c:b1:af:ca:c6:ee:b7:f7:02:44:
a5:08:71:e8:5a:b7:df:b2:60:95:11:82:d1:68:94:87:e8:cc:
b6:8f:d1:79:47:21:a4:ad:38:1f:9e:02:5a:e8:d8:d2:1b:e3:
d5:62:7b:e8:68:9b:af:20:64:9c:e0:cc:f9:33:ff:a9:0e:b5:
77:b6:a5:e8:f8:25:9f:f9:e4:e0:8a:18:e7:15:fa:05:bd:3d:
f3:40:17:aa:e1:99:b8:be:dd:71:33:d5:85:6c:02:ef:6c:21:
0c:03:05:da:91:ce:5f:7f:d6:c3:db:55:d2:89:a0:c6:5e:aa:
fb:cb:3d:d4:e4:74:ca:a7:80:80:f5:28:d0:7b:b8:8f:14:0d:
ba:e5:db:6c:ec:ce:e0:3e:76:7d:ee:f8:ff:9a:02:7d:0a:7f:
de:9d:37:46:1c:74:18:43:ce:50:71:52:e3:be:56:44:fe:28:
15:02:e4:e6:2f:fb:0c:50:bd:b7:41:d7:67:dc:ca:28:a2:37:
3a:2a:58:1b:08:6f:5a:bd:55:26:d6:a9:31:36:70:2c:03:87:
2f:3a:50:5a:98:8b:57:e3:06:87:b1:41:74:31:60:6d:71:f7:
91:f4:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 13:25:58 2023 by rpki-client on console-fra.rpki-client.org