Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/HK3ugJIGTt_F99b8P7sEEmmbXmc.roa
File: HK3ugJIGTt_F99b8P7sEEmmbXmc.roa (raw, json)
Hash identifier: Q5/90uU2PAFqomyqjy+9GCvKmCQ0ps51kKU4nq16zME=
Subject key identifier: 1C:AD:EE:80:92:06:4E:DF:C5:F7:D6:FC:3F:BB:04:12:69:9B:5E:67
Certificate issuer: /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial: 018BC850E86FC07A0420B721FCD89F01A152
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/HK3ugJIGTt_F99b8P7sEEmmbXmc.roa
Signing time: Mon 13 Nov 2023 10:53:47 +0000
ROA not before: Mon 13 Nov 2023 10:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.124.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:50:e8:6f:c0:7a:04:20:b7:21:fc:d8:9f:01:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
Validity
Not Before: Nov 13 10:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cadee8092064edfc5f7d6fc3fbb0412699b5e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:00:09:1b:ba:59:73:b3:6a:9b:c2:9a:05:
63:e9:2d:a4:4b:98:89:8a:8c:d5:cb:c0:5f:38:4e:
fa:4d:61:58:0a:08:64:7d:b9:0f:a4:cb:8b:b6:70:
7b:d3:ef:fa:08:f6:1f:7a:bb:91:d3:bb:69:34:0b:
f4:60:ca:ae:87:db:3d:e3:6d:39:c1:99:40:fc:0c:
00:1a:cf:3d:87:10:65:29:ed:1c:2d:29:e2:60:07:
13:55:6e:d3:e7:cb:e9:2d:8b:bc:71:eb:c8:33:d8:
a4:8d:d8:a3:54:55:31:b5:40:6f:1d:44:53:a6:0a:
8c:54:8d:7c:4a:d9:43:06:f9:1b:36:0b:15:12:fd:
4c:41:15:f5:af:ae:5a:c4:52:42:10:d4:60:73:9b:
19:18:44:14:af:ac:ff:62:a4:d7:ab:cf:b5:10:38:
f1:75:1c:91:a2:3f:3f:49:5b:35:1d:e3:e5:e9:ba:
f6:7a:dc:52:54:38:ca:3f:6a:cd:c9:f2:f8:99:b8:
fa:65:db:a6:b3:68:ca:dc:bb:2b:54:04:8d:54:81:
8e:d5:fb:81:94:be:e1:44:ac:ea:94:04:61:e1:ce:
a3:eb:6e:b0:ac:23:e4:1e:eb:71:32:4d:7f:91:3a:
17:8e:ec:fa:8e:a7:24:a5:e9:e2:81:da:23:fd:5c:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:EE:80:92:06:4E:DF:C5:F7:D6:FC:3F:BB:04:12:69:9B:5E:67
X509v3 Authority Key Identifier:
keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/HK3ugJIGTt_F99b8P7sEEmmbXmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.64.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ba:d1:c4:94:cc:ef:ef:a6:66:5b:87:27:73:be:77:01:6a:
f6:22:3a:4b:7a:18:15:d7:c1:f8:8b:4e:22:f4:fd:64:2f:0c:
b3:42:66:f7:e1:14:b1:6b:73:fb:db:96:ae:fe:e4:df:69:c4:
17:51:46:ec:c2:17:aa:b4:24:0b:a8:79:e4:ba:5b:d7:a5:ac:
9d:7e:fd:00:d2:a5:8d:94:d7:53:0f:2e:2c:d6:8b:5b:c7:6d:
51:00:20:61:56:c7:a3:7d:d6:1b:6f:8f:b5:f3:44:a9:bd:f9:
3b:cf:c9:fe:10:9a:6c:92:c6:07:33:7e:11:63:ed:0b:cd:56:
f3:c1:31:a9:dc:ca:fe:52:fe:f2:5b:25:65:82:e3:3d:3a:77:
39:6a:46:60:fe:d9:32:30:89:d0:b5:7a:d1:41:1a:4a:a5:34:
d8:50:fd:43:32:e7:54:37:d0:30:ad:4b:62:75:97:81:84:12:
96:6e:d3:82:54:4b:05:a0:15:d5:dd:85:71:e7:0a:95:a5:80:
d2:64:f8:86:6e:42:b4:bf:55:33:2e:14:c6:82:ed:7f:a0:ec:
76:f2:9e:a9:b6:ac:27:0d:ee:ed:dd:de:bf:eb:8b:d2:a6:20:
c7:cc:8f:a8:94:85:eb:fe:21:5f:46:66:12:68:ab:04:37:41:
5d:d0:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:08 2025 by rpki-client