Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hsvptHXH_Mt1PJFFqPS3CWIdEZU.roa
File: hsvptHXH_Mt1PJFFqPS3CWIdEZU.roa (raw, json)
Hash identifier: etoKDmAgT0G9ejuPWCg0CxuoR84uTYX6O49QO1lVKis=
Subject key identifier: 86:CB:E9:B4:75:C7:FC:CB:75:3C:91:45:A8:F4:B7:09:62:1D:11:95
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0184390C7C3D31193B34EDA43BF5887C230D
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hsvptHXH_Mt1PJFFqPS3CWIdEZU.roa
Signing time: Wed 02 Nov 2022 15:53:50 +0000
ROA not before: Wed 02 Nov 2022 15:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 141.11.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:0c:7c:3d:31:19:3b:34:ed:a4:3b:f5:88:7c:23:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Nov 2 15:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86cbe9b475c7fccb753c9145a8f4b709621d1195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:84:f6:da:6d:cb:8c:c8:67:44:48:67:09:
e5:c7:6a:c7:6d:d3:d7:19:bc:7b:cf:e4:a9:a8:d4:
3a:0d:7c:44:a2:e6:d7:84:32:eb:1f:30:04:17:ad:
eb:5c:e4:d1:37:07:1f:bd:89:86:c9:4d:48:9e:b2:
c7:52:00:e3:31:3d:22:a2:84:79:25:c7:df:01:84:
f4:54:4d:d2:18:33:ab:4d:c9:4c:5d:4a:41:05:c1:
19:3c:48:4c:69:64:49:c0:b4:bd:b4:f5:63:f5:a6:
94:dd:57:0b:f3:9e:0a:95:1c:f4:0d:45:5d:73:77:
af:ce:33:64:d0:a1:42:74:10:9e:96:55:10:bf:04:
99:9f:70:ac:05:8c:b8:f7:a1:58:32:5b:06:f2:44:
4b:19:be:00:59:ac:50:8d:e2:92:f7:24:91:10:a0:
26:43:c5:07:af:e2:2f:8f:11:5d:12:ca:e2:d8:3a:
95:7a:84:1e:bd:93:3a:e1:31:74:8d:db:15:f6:43:
48:44:4a:a1:df:a9:60:5d:dc:cd:58:3f:70:19:3c:
5d:88:16:78:92:fb:f2:75:cc:b5:38:d9:98:87:aa:
b4:bd:2f:87:f5:33:4c:a7:9c:cd:4e:8b:3b:ae:14:
1c:fe:8d:7b:64:95:0b:f4:6b:50:ad:99:7c:5f:b5:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:E9:B4:75:C7:FC:CB:75:3C:91:45:A8:F4:B7:09:62:1D:11:95
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/hsvptHXH_Mt1PJFFqPS3CWIdEZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.45.0/24
Signature Algorithm: sha256WithRSAEncryption
20:51:e6:3e:db:12:3b:98:48:ac:db:ed:14:a9:b0:5d:aa:f9:
5a:77:5a:1f:71:b3:7f:52:9f:e0:0e:1d:1a:b7:c8:ca:b9:c8:
b9:59:98:7a:31:aa:34:d2:12:f3:c9:f8:21:5f:12:93:82:ff:
68:57:c3:cf:03:40:c5:a2:2e:9e:71:e3:5b:3e:d5:1d:29:b8:
3d:ac:5e:62:68:ea:d7:5c:4f:4c:11:de:52:b6:66:61:5b:05:
09:8b:97:48:89:25:fe:82:0a:0c:40:7c:9d:f3:f7:e9:70:03:
d9:e0:e4:62:0c:e2:35:76:35:25:d2:fc:e6:b4:d1:f2:ab:48:
a3:0a:3f:05:c4:5e:c4:9a:6b:38:f5:f2:67:71:ac:ee:d0:e7:
79:50:2d:db:36:69:8d:bd:de:1f:17:21:d0:09:28:fa:b5:63:
49:f6:49:87:e8:ee:bc:a1:b8:10:cf:33:cf:33:df:15:66:73:
19:f0:79:ad:33:80:5f:7d:57:e2:54:7a:3f:a1:e8:10:35:c7:
39:80:b8:2e:ee:be:53:8c:d7:0f:ac:95:d2:93:5c:53:ac:43:
9f:2c:22:46:51:99:46:c2:b5:58:31:2a:9b:dc:08:0c:35:2e:
98:1d:fa:fd:73:9a:fb:fc:ad:70:e3:d0:cc:33:27:ce:a5:64:
61:96:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:12 2025 by rpki-client