Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/HLKmSZU1J7gzgL8nRlX7fdo2lJM.roa
File: HLKmSZU1J7gzgL8nRlX7fdo2lJM.roa (raw, json)
Hash identifier: 7+Ddbq4oco9hSypUZFKYSRrHuVhju0AcNMcy/dDIlzI=
Subject key identifier: 1C:B2:A6:49:95:35:27:B8:33:80:BF:27:46:55:FB:7D:DA:36:94:93
Certificate issuer: /CN=084b2408adf9480e8268b7733be48127433ce4d4
Certificate serial: 01882086B77FDBB222219873A7FE68FC69C8
Authority key identifier: 08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/HLKmSZU1J7gzgL8nRlX7fdo2lJM.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.235.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b7:7f:db:b2:22:21:98:73:a7:fe:68:fc:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b2408adf9480e8268b7733be48127433ce4d4
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb2a649953527b83380bf274655fb7dda369493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:80:29:96:37:29:af:95:e0:84:61:fe:de:
64:5f:9f:99:cf:4b:62:53:c2:a4:14:0b:cc:c9:ae:
cf:c8:ed:d3:28:18:d5:eb:7c:4c:19:86:e1:95:51:
af:e9:8a:90:83:aa:8d:dd:7d:e2:9b:59:88:f6:a8:
7b:ad:8b:3c:ab:07:df:e0:5a:1c:5f:f8:10:7f:3b:
36:37:9d:b4:11:3f:d9:f8:a5:14:a6:3c:7e:4f:0b:
12:63:96:24:ad:d4:03:37:f4:6d:4c:92:60:21:68:
78:22:29:1d:70:51:3e:0b:a9:51:83:d9:ba:da:84:
68:a8:eb:0b:99:0e:24:e8:10:a3:3d:f2:a1:c6:1c:
f5:aa:79:b0:5e:b5:9e:93:14:1a:02:cd:3e:7f:4d:
39:9a:21:a9:9b:77:19:d2:e5:d0:77:96:95:45:ea:
1a:7d:0e:d0:1e:ca:e8:b4:a7:26:1f:2a:b3:28:3d:
7b:5c:6a:2c:c5:25:03:49:70:29:c5:d0:f2:5a:ad:
96:a3:c3:dd:69:0b:8c:6e:39:41:4c:e0:af:dd:07:
44:bc:ea:83:44:2b:f3:25:3d:32:27:7f:dc:f2:69:
47:a5:12:1b:4f:70:c0:da:d1:fc:31:94:77:1e:5a:
d0:c3:8a:b8:ed:f3:81:02:cd:62:12:7e:9d:8b:81:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B2:A6:49:95:35:27:B8:33:80:BF:27:46:55:FB:7D:DA:36:94:93
X509v3 Authority Key Identifier:
keyid:08:4B:24:08:AD:F9:48:0E:82:68:B7:73:3B:E4:81:27:43:3C:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEskCK35SA6CaLdzO-SBJ0M85NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/HLKmSZU1J7gzgL8nRlX7fdo2lJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c19da3-7a3b-4938-b7c7-17fb64fd8250/1/CEskCK35SA6CaLdzO-SBJ0M85NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.224.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e6:58:18:52:f9:11:f6:e8:88:71:66:d3:b2:e1:d1:e8:ae:
c2:49:1d:f6:ae:a1:2e:ca:b3:04:cb:71:c3:be:b7:46:8e:57:
cb:e4:11:0b:c2:54:5c:e1:8f:a4:73:92:d6:40:5c:0f:10:2f:
d2:7e:f7:00:aa:4c:28:d6:4f:0c:e9:c4:72:ac:18:0e:b7:e6:
0e:95:54:52:e1:ad:d0:dd:be:01:a4:b5:34:e7:23:32:80:ed:
92:f0:c6:df:f5:a3:56:f3:56:68:61:6e:3a:e9:9f:6e:10:ce:
ac:fe:a9:9d:1d:75:94:26:de:c7:34:18:e0:e3:a9:cc:4f:c4:
d7:4d:59:e6:e6:f3:66:db:d3:ae:c5:c3:60:8c:30:4e:18:41:
9f:3e:8e:5c:c7:22:55:48:6e:4d:c6:ba:36:b2:50:70:e2:cf:
48:86:19:54:1a:4d:e2:5e:be:95:39:c8:ce:80:26:f8:a9:19:
12:cc:79:09:54:41:a3:90:78:b7:d2:a7:ea:dc:f7:1d:e3:cc:
52:d8:6c:4e:e3:2d:25:d4:b0:ec:d3:2b:59:83:11:dd:21:ca:
3a:7a:b6:7d:17:f1:98:07:23:3e:07:97:b9:dd:e6:87:77:9d:
31:c8:60:fd:ca:62:0e:7f:ce:4e:68:c0:a8:a8:68:75:2f:4d:
d0:c4:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:55:05 2023 by rpki-client on console-ams.rpki-client.org