Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/Hkk29WCyNoX08G_Hn-5Vj_lDDA4.roa
File: Hkk29WCyNoX08G_Hn-5Vj_lDDA4.roa (raw, json)
Hash identifier: hD0VBBBiFSAizWULvTL2cnHFleP1Y6IW8nUNoOq7jMk=
Subject key identifier: 1E:49:36:F5:60:B2:36:85:F4:F0:6F:C7:9F:EE:55:8F:F9:43:0C:0E
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 01856CEF47781563D7FA0077E957D97499BA
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/Hkk29WCyNoX08G_Hn-5Vj_lDDA4.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 176.53.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:47:78:15:63:d7:fa:00:77:e9:57:d9:74:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e4936f560b23685f4f06fc79fee558ff9430c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:df:69:36:9b:0a:1c:c6:7d:6e:cf:9c:e4:
d3:44:94:3f:d5:bb:6f:cb:b3:af:55:d8:c4:2f:56:
05:4e:71:f3:1c:2e:d0:23:3d:eb:3d:48:0f:31:ac:
81:c2:a2:3c:c2:66:00:b7:68:81:7a:14:40:27:67:
e6:6e:ae:11:3c:94:ed:5b:34:69:87:5a:5e:cb:66:
be:69:a0:73:f0:5b:4a:70:e2:c5:fa:f8:24:97:f7:
e7:0b:b4:20:98:58:d0:6e:88:34:04:b6:49:73:0c:
61:ac:08:48:db:9b:a2:5d:9c:01:0b:65:a8:9a:68:
b7:07:4f:ad:47:e8:e5:b5:7e:4b:3c:c7:29:a6:3a:
5a:1b:b3:28:3d:8e:0e:1f:ed:7e:ef:de:5b:08:75:
a7:3b:9c:64:ac:29:5f:a7:ee:ef:82:f7:3e:d8:ce:
e4:b2:01:eb:da:e3:a6:ea:03:3b:a8:2e:26:92:a9:
f6:51:90:af:d0:a5:34:ce:23:db:78:e8:19:df:97:
2e:9e:50:51:b0:8f:9c:bd:26:0c:19:bd:56:74:a9:
7e:ed:e5:e7:78:a0:31:30:ca:ca:ec:e2:11:f1:7c:
49:12:3c:47:2e:3f:3b:c8:72:78:8b:49:a0:59:7f:
01:29:46:2a:4e:63:3b:ec:9e:f0:bc:2c:95:af:97:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:49:36:F5:60:B2:36:85:F4:F0:6F:C7:9F:EE:55:8F:F9:43:0C:0E
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/Hkk29WCyNoX08G_Hn-5Vj_lDDA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.132.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b5:3a:46:53:d1:19:0c:71:69:f9:7f:f3:28:d5:81:55:23:
bf:d8:0f:26:5a:44:28:e1:d1:56:9c:f1:3f:f9:53:60:de:da:
3c:70:46:3c:ad:10:7c:06:ed:c6:d6:71:da:18:e2:b1:03:04:
a8:4f:9e:b1:1d:81:2e:8d:71:a5:5c:02:09:87:72:38:12:27:
87:a1:4a:d4:5d:70:41:45:de:c3:38:ce:22:b8:d5:27:b9:79:
ee:c2:26:0a:9d:e9:5f:86:f4:0e:74:55:3c:c3:d9:18:d1:b1:
1f:40:f5:17:69:20:ab:bb:f0:5d:b7:66:4b:b3:9a:41:f4:b5:
ef:72:1f:a5:76:43:78:18:c3:4f:af:ea:f3:5e:91:1a:78:1b:
b1:3f:93:a1:d9:e8:6f:d7:28:da:67:fb:8f:d2:e6:28:ba:0a:
21:f5:c1:6b:84:40:f8:1d:f1:79:f3:03:37:55:aa:36:a2:28:
a2:3b:85:5b:de:ac:f4:de:91:90:f9:0f:64:3c:a2:ca:2c:cb:
8d:69:85:ee:98:2d:40:02:b3:0d:7c:8a:ee:ef:bc:93:b0:9a:
a8:3f:31:da:81:84:3d:75:ed:3d:82:92:cd:9d:f8:3a:bb:82:
91:a5:49:59:f3:24:a2:0d:10:52:a3:5c:91:9b:10:01:a9:fe:
80:ab:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org