Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/HCSuRu3287bNnXln1--8HQeyZ1w.roa
File: HCSuRu3287bNnXln1--8HQeyZ1w.roa (raw, json)
Hash identifier: jD1poNDqAil36M4rur1XWYa1RClhfi9DYZntBrVVTco=
Subject key identifier: 1C:24:AE:46:ED:F6:F3:B6:CD:9D:79:67:D7:EF:BC:1D:07:B2:67:5C
Certificate issuer: /CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Certificate serial: 01857295FEAC3C2E8199F975402A16DD278F
Authority key identifier: A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/HCSuRu3287bNnXln1--8HQeyZ1w.roa
Signing time: Mon 02 Jan 2023 13:05:10 +0000
ROA not before: Mon 02 Jan 2023 13:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 176.100.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:fe:ac:3c:2e:81:99:f9:75:40:2a:16:dd:27:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Validity
Not Before: Jan 2 13:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c24ae46edf6f3b6cd9d7967d7efbc1d07b2675c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:50:b7:d6:b1:ac:70:0a:ac:e6:2e:3a:3e:
75:fc:43:be:e3:53:97:50:8f:03:c9:36:86:e4:2c:
db:37:4b:c0:6e:0d:d4:a5:87:57:f4:04:89:ed:73:
8b:d2:67:13:5e:fd:5c:58:87:2d:0a:f9:98:12:b1:
98:26:76:16:23:95:a9:8e:55:8f:15:77:da:53:26:
3c:2e:ab:24:79:e3:d6:91:9a:4c:7d:98:5d:67:1a:
83:99:52:e3:f4:8c:00:6d:2e:7e:d4:56:2a:0e:ca:
85:4c:e7:ce:fc:14:61:54:39:8b:c8:16:ec:3d:e9:
1e:b0:1e:e5:09:c8:0e:50:95:5e:26:f1:d3:86:3e:
d8:1b:17:5e:10:85:90:16:d9:7d:0b:03:91:8d:31:
fb:78:e1:53:db:56:35:8d:38:19:33:b2:2f:df:40:
67:85:3c:7b:0d:f1:d6:63:46:a8:32:8c:94:c8:9c:
df:c6:24:e9:dc:0a:b9:6c:fa:ec:5d:9f:c9:9e:b9:
a4:6f:65:35:16:76:2f:36:a7:b0:ed:e5:ef:0b:bc:
68:5c:f6:3a:8c:fc:c4:66:85:70:80:4b:c8:01:b2:
c3:c1:a6:05:8d:b0:3c:af:37:ce:cc:4a:fd:a7:77:
b0:b3:c7:5f:fa:78:ad:48:6f:4a:c0:5e:ac:50:91:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:AE:46:ED:F6:F3:B6:CD:9D:79:67:D7:EF:BC:1D:07:B2:67:5C
X509v3 Authority Key Identifier:
keyid:A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/HCSuRu3287bNnXln1--8HQeyZ1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.44.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a7:d7:1c:9e:4d:b2:42:8d:f3:7b:b1:95:0c:bd:9e:88:cd:
e5:38:7e:22:33:eb:af:2f:ad:d1:42:af:d4:83:dc:7a:d4:3f:
58:94:76:89:fe:d6:bd:de:e9:a2:16:75:a6:51:dd:99:dd:e5:
0c:b8:b1:d6:36:35:dc:97:bb:7f:c0:d3:5d:e9:74:4b:9b:70:
11:81:84:44:91:b9:e0:1c:3f:f1:4b:36:1a:af:05:68:14:a5:
3c:50:49:a7:ee:62:34:01:27:bc:96:65:88:bf:e6:e5:35:dc:
f2:77:98:1a:1f:0c:6e:3e:83:4c:dc:a2:ee:d6:60:3f:58:ba:
6f:b9:17:19:05:ac:63:8f:e9:67:5e:d5:7a:d2:22:4f:7e:00:
05:18:2d:4c:73:48:bb:8f:72:f6:24:53:0a:b0:ba:85:03:20:
8f:eb:01:b9:76:e7:13:19:ba:e2:53:64:85:a9:ee:d9:25:6a:
24:19:71:f8:2c:18:26:f6:19:fe:95:7c:41:8d:7f:d9:23:9a:
c7:d1:d2:08:36:45:88:3c:2c:36:e4:a8:29:a3:af:e1:fc:50:
2d:af:7d:6a:a4:31:ec:6e:3c:b5:78:d2:0e:66:ff:ea:b7:7a:
6b:e5:8b:a4:a6:4a:2b:52:91:12:b4:79:95:de:95:be:d8:78:
e0:f5:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:42 2024 by rpki-client on console-ams.rpki-client.org