Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNP3WgFcLgtCv3KootvkGlOgsMg.roa
File: HNP3WgFcLgtCv3KootvkGlOgsMg.roa (raw, json)
Hash identifier: vtOzsGC2PUsSbn8fQu7a5657dB2Cl7drETM1Ikvp2BY=
Subject key identifier: 1C:D3:F7:5A:01:5C:2E:0B:42:BF:72:A8:A2:DB:E4:1A:53:A0:B0:C8
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 01824A2DFA936BD4F39F11BEF60D101CB088
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNP3WgFcLgtCv3KootvkGlOgsMg.roa
Signing time: Fri 29 Jul 2022 13:38:23 +0000
ROA not before: Fri 29 Jul 2022 13:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 141.11.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:2d:fa:93:6b:d4:f3:9f:11:be:f6:0d:10:1c:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Jul 29 13:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd3f75a015c2e0b42bf72a8a2dbe41a53a0b0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:31:f9:64:66:60:68:f8:5c:e1:a6:95:4b:
01:cd:ca:fb:30:69:9b:e6:68:27:a9:db:e4:0d:8b:
df:23:b8:28:db:bf:00:9c:48:41:6b:8f:ca:58:e1:
c1:38:6e:af:07:05:e2:16:c5:60:77:a9:21:ac:b2:
67:2d:bd:08:cf:d5:7b:f1:14:38:fd:58:07:ab:03:
3f:ed:b4:f9:d5:5c:52:b3:27:7a:3d:48:c5:01:5f:
34:9a:9d:24:ce:9d:d1:96:ea:dd:79:d6:dc:d6:a4:
3f:5b:c7:7b:ee:0b:4f:f2:ee:87:23:69:96:f4:2b:
41:5b:d9:c3:e8:f0:1d:ee:08:5f:07:34:7e:f5:97:
ec:e8:6a:7a:aa:a0:37:76:2d:0f:96:69:fc:33:f6:
72:30:86:12:9f:d9:8e:ff:38:6e:c3:f1:e7:8d:5a:
c4:7d:ef:58:ec:20:a1:e4:bb:b1:0e:20:22:ab:b6:
1d:49:26:8b:b8:cf:ae:81:bd:36:e1:55:ec:57:33:
56:c3:17:06:bc:87:bf:a2:40:f8:1c:ef:25:d8:1e:
ea:6a:a2:8f:16:65:1c:fd:0d:47:11:b9:9f:d7:d2:
43:e4:b4:7c:fc:b0:c4:79:5f:1b:3d:c9:5f:21:b1:
1e:e4:11:da:fa:b7:e2:04:18:29:65:53:42:ec:b1:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:F7:5A:01:5C:2E:0B:42:BF:72:A8:A2:DB:E4:1A:53:A0:B0:C8
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HNP3WgFcLgtCv3KootvkGlOgsMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.103.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f6:53:c4:d2:9c:07:b1:60:73:94:29:e0:2d:31:b6:fe:c5:
15:ee:29:92:38:3c:fb:79:6c:12:4a:d0:7e:c1:f3:7a:65:8f:
c1:ea:7c:de:6e:60:65:91:9b:f0:44:22:25:4a:b7:12:21:9a:
8f:f7:1a:92:c9:57:7f:ae:d8:0f:79:b0:24:60:2b:9c:54:a7:
cb:85:58:4f:bc:06:9e:f4:75:33:0b:4a:6c:dc:ae:46:64:ae:
28:96:99:22:e4:c8:40:23:a3:cc:21:24:e4:09:d1:0f:5e:25:
d7:bf:81:2b:70:b4:5d:37:1f:4d:aa:cc:1a:41:18:6c:a5:6e:
73:eb:13:96:9e:9a:0c:c0:8c:4a:e2:8d:20:09:41:c0:21:d2:
f9:d2:e1:63:32:78:ab:dc:fb:a0:4b:0d:fe:89:03:06:42:87:
55:f7:8c:42:d3:e7:d1:86:4e:31:e0:02:8b:82:05:7a:c9:97:
46:7a:a8:8b:d5:99:df:8d:31:2e:a5:22:01:72:9c:c6:c4:69:
b2:53:4a:49:54:72:ea:48:c1:d6:04:08:c2:6a:b0:07:1e:ed:
74:b2:4e:2f:d1:92:a7:df:fe:5b:0d:c4:13:ee:66:ca:6a:9f:
be:0a:f4:50:4e:f7:9c:0e:4e:22:4d:38:6a:db:c1:45:8a:b3:
2d:f6:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:48 2025 by rpki-client