Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/HXjikRuOJHF3DxpbNZGigm9sjLY.roa
File: HXjikRuOJHF3DxpbNZGigm9sjLY.roa (raw, json)
Hash identifier: MtvWvOKgM9s6AZnp+aqVTguilgeOH+LKr8Kk9P5eJco=
Subject key identifier: 1D:78:E2:91:1B:8E:24:71:77:0F:1A:5B:35:91:A2:82:6F:6C:8C:B6
Certificate issuer: /CN=bc9db8e90293cfe75894cb01a88908d40a96c805
Certificate serial: 01856B532B52D05E0568FB514F23B1535C2F
Authority key identifier: BC:9D:B8:E9:02:93:CF:E7:58:94:CB:01:A8:89:08:D4:0A:96:C8:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ246QKTz-dYlMsBqIkI1AqWyAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/HXjikRuOJHF3DxpbNZGigm9sjLY.roa
Signing time: Sun 01 Jan 2023 03:14:50 +0000
ROA not before: Sun 01 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56962
IP address blocks: 212.24.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:2b:52:d0:5e:05:68:fb:51:4f:23:b1:53:5c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9db8e90293cfe75894cb01a88908d40a96c805
Validity
Not Before: Jan 1 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d78e2911b8e2471770f1a5b3591a2826f6c8cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:48:a9:8a:c7:46:65:a9:6d:4e:b7:2f:8b:
cf:be:67:f4:a2:b4:08:30:c2:75:64:de:e6:61:40:
9c:9c:38:56:2f:26:32:79:99:2d:29:11:c2:cd:cd:
25:eb:a3:f9:75:a1:33:d7:ab:2b:a1:cb:a4:99:8f:
4a:6a:80:7d:f7:72:40:d0:5c:41:0d:ef:fb:eb:ef:
7a:1f:24:44:c2:20:a5:27:db:75:b5:7d:cc:f0:08:
3e:b0:dd:b9:16:10:f2:fb:e2:22:fd:72:d4:de:13:
ec:45:32:6c:8d:45:89:02:84:7f:aa:aa:87:46:ca:
cf:69:db:50:a0:71:97:09:17:18:58:fb:17:12:69:
f9:e0:90:4a:f6:3f:ef:40:b5:76:98:6f:ee:e2:cf:
ed:e0:ea:94:89:52:d3:64:7b:cb:7c:9a:91:aa:60:
1d:34:24:16:a8:0e:7c:5c:cd:1c:82:e4:09:b7:a9:
71:57:e1:34:af:25:47:95:1b:72:ff:2c:4c:a5:9e:
73:9b:61:ad:07:db:1e:8f:ab:7d:56:92:49:e4:f6:
dd:65:d4:a3:ae:48:d0:e0:b4:d9:8a:eb:10:c8:d3:
31:09:21:06:65:5a:1f:85:f9:f4:66:41:50:7a:6e:
9e:ba:9c:8b:22:49:06:3a:d1:ed:9d:1d:96:4c:c2:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:E2:91:1B:8E:24:71:77:0F:1A:5B:35:91:A2:82:6F:6C:8C:B6
X509v3 Authority Key Identifier:
keyid:BC:9D:B8:E9:02:93:CF:E7:58:94:CB:01:A8:89:08:D4:0A:96:C8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ246QKTz-dYlMsBqIkI1AqWyAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/HXjikRuOJHF3DxpbNZGigm9sjLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ca5697-5bb8-444b-bcb0-0ba6390540d4/1/vJ246QKTz-dYlMsBqIkI1AqWyAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.121.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:a0:a7:50:cf:9c:ee:57:5f:df:35:1f:12:31:9c:77:2c:
8a:a9:df:68:b8:d5:c5:c2:42:64:a2:90:5a:2a:b7:a7:92:a6:
ce:47:58:0a:dd:77:48:39:17:e2:da:b3:11:93:3d:36:e8:4d:
70:51:78:33:31:9d:f3:d9:8a:f2:bf:cc:3c:fd:98:d0:b1:17:
cc:96:c1:b4:9e:a7:69:d7:0f:34:64:8a:c4:99:aa:76:76:84:
63:01:64:e7:bb:a9:61:be:14:26:7b:d4:b5:48:37:e6:9d:55:
2a:d8:00:a0:96:cf:19:9d:94:68:e6:87:81:f3:64:40:00:65:
46:a2:ae:2d:5b:5b:5b:65:45:45:04:ec:f7:18:18:0b:04:4b:
62:e2:44:3b:4f:ca:58:2a:2c:f9:67:14:4f:b9:b3:2c:5d:56:
76:0b:2b:a8:d6:e5:ad:5c:ea:69:13:65:96:cd:86:3c:61:0f:
df:4c:94:1b:b0:9b:07:e8:d8:ed:88:40:09:35:ea:c1:15:06:
5d:bc:ed:74:dc:70:66:70:ef:98:32:79:6b:ab:fe:1c:e1:c2:
e0:e2:8e:f1:cf:33:5c:73:4b:61:6b:52:46:81:29:84:16:05:
d4:6e:61:32:9f:1f:08:b7:d6:f6:29:c5:e3:40:54:e0:64:1b:
8f:91:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:09 2024 by rpki-client on console-ams.rpki-client.org