Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/HJ-7bXvUgqx4d0KxiFI0jM9_jxw.roa
File: HJ-7bXvUgqx4d0KxiFI0jM9_jxw.roa (raw, json)
Hash identifier: 6ncTDYbGxjoD6L3id6r9+Kbl2P+Srjt73WqkYjKCtJY=
Subject key identifier: 1C:9F:BB:6D:7B:D4:82:AC:78:77:42:B1:88:52:34:8C:CF:7F:8F:1C
Certificate issuer: /CN=1f44878ce4969120575ef049c9d6b9148c29db5e
Certificate serial: 01857315C6FC64DA27246DBE69F73018933F
Authority key identifier: 1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0SHjOSWkSBXXvBJyda5FIwp214.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/HJ-7bXvUgqx4d0KxiFI0jM9_jxw.roa
Signing time: Mon 02 Jan 2023 15:24:45 +0000
ROA not before: Mon 02 Jan 2023 15:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44149
IP address blocks: 31.222.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c6:fc:64:da:27:24:6d:be:69:f7:30:18:93:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f44878ce4969120575ef049c9d6b9148c29db5e
Validity
Not Before: Jan 2 15:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c9fbb6d7bd482ac787742b18852348ccf7f8f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:37:5b:ae:6d:82:82:d5:f0:5c:61:27:b1:
f8:ac:c8:c0:82:6c:0a:fb:26:8b:02:6e:d2:d3:d7:
b1:2a:ce:4b:ad:ba:f0:69:1b:3f:cc:f6:2e:22:ae:
48:60:3c:da:a7:d6:13:a0:c9:38:cb:1c:9c:02:92:
9b:32:4d:6f:a0:d3:5e:13:59:14:79:48:0a:93:7d:
be:c4:8f:19:fa:9b:54:43:d5:2f:41:ce:e4:b0:c5:
14:be:98:ee:3b:12:44:0d:91:c1:8d:fc:d2:9e:7d:
3c:24:12:86:32:25:17:7d:0f:c4:09:a9:2b:c2:ff:
45:87:bb:1c:65:c6:70:88:f6:79:f4:c1:0c:bb:69:
8a:7f:35:05:3d:54:2a:77:ee:7e:ae:7a:a3:ab:21:
3a:ed:75:55:ff:5b:fc:18:a6:17:6f:02:af:68:30:
c4:c9:74:4c:c9:b3:d4:3f:44:13:3d:b3:95:6c:f1:
28:ec:72:a9:3b:a4:67:66:1d:18:be:31:a3:e5:2e:
f1:d3:69:ba:a0:87:6e:d6:6a:e5:f1:6b:0f:1f:34:
2d:c4:49:5c:e9:16:7d:0a:58:d2:df:d8:e6:f3:31:
e1:14:ae:5b:26:b4:69:a9:3d:75:18:7a:82:43:b3:
c0:d9:db:94:f9:5b:b8:b7:dd:d6:c4:9e:3e:7d:ef:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:BB:6D:7B:D4:82:AC:78:77:42:B1:88:52:34:8C:CF:7F:8F:1C
X509v3 Authority Key Identifier:
keyid:1F:44:87:8C:E4:96:91:20:57:5E:F0:49:C9:D6:B9:14:8C:29:DB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0SHjOSWkSBXXvBJyda5FIwp214.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/HJ-7bXvUgqx4d0KxiFI0jM9_jxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/de33ac-bf6a-4c50-97c4-93ab5ab261b2/1/H0SHjOSWkSBXXvBJyda5FIwp214.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.224.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9e:88:7c:28:bb:ba:55:72:cf:6e:19:15:42:e1:74:83:ab:
5e:db:7c:cc:bc:ad:7a:6b:a7:26:a7:9e:c1:44:a4:e3:d0:b1:
cf:da:2a:ac:61:ba:81:61:5f:0f:41:53:8e:f9:6f:7e:a8:1b:
3e:67:1d:f0:a0:65:54:b3:95:1e:6f:3e:71:29:07:47:5a:42:
9a:50:8e:0a:32:b6:aa:ed:03:ec:70:d5:32:92:5f:48:57:94:
58:e2:59:6f:8a:cd:78:b2:38:de:06:7d:0b:52:24:18:89:21:
b8:f0:4c:ea:13:b2:42:cc:b0:40:98:e0:0d:3a:87:c1:8b:eb:
1e:4f:60:d7:d3:08:4c:3b:cf:12:96:a7:52:c8:92:a8:c5:db:
5c:0f:76:6f:cd:06:79:02:56:22:84:e6:3e:85:87:c7:95:a8:
88:fc:9a:03:18:5e:48:10:43:68:ae:51:3a:80:73:ec:9f:25:
09:b6:d9:5e:ff:fc:1a:b5:3f:21:f3:76:e9:06:e5:92:08:94:
75:65:02:0a:50:5d:2f:c5:22:ab:49:24:c7:78:ee:12:22:13:
8f:55:68:8b:d9:39:23:08:15:4d:93:c7:9d:92:1c:0a:66:8f:
f8:4d:60:6b:d3:3c:d7:00:99:06:cb:ca:7a:a8:0d:b6:5c:1e:
26:97:f9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:31 2025 by rpki-client