Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HGPsZY40wPv7yoibyucpPvNCI6M.roa
File: HGPsZY40wPv7yoibyucpPvNCI6M.roa (raw, json)
Hash identifier: xO2oDS3e9Wn4s9IxF+sNth7lWGha1OrcgC2ldhN9P0U=
Subject key identifier: 1C:63:EC:65:8E:34:C0:FB:FB:CA:88:9B:CA:E7:29:3E:F3:42:23:A3
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0518060F
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HGPsZY40wPv7yoibyucpPvNCI6M.roa
Signing time: Sat 01 Jan 2022 11:02:43 +0000
ROA not before: Sat 01 Jan 2022 11:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133398
IP address blocks: 79.141.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85460495 (0x518060f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 11:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c63ec658e34c0fbfbca889bcae7293ef34223a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:d5:f8:7b:e6:91:05:42:75:5c:19:44:4d:
a4:64:60:67:d3:3b:f3:13:c5:00:4d:3e:24:06:59:
62:65:6f:a5:e6:fc:44:e4:75:d3:e9:4d:f4:9d:8a:
6d:62:5b:2c:35:52:a8:10:0d:3b:a7:28:e9:62:4c:
fa:3b:13:3b:ad:87:03:32:b4:c4:f9:16:fc:21:22:
e8:ba:d8:7f:23:86:89:4e:91:3f:9b:ee:0e:05:5e:
f5:14:31:68:5e:f0:f7:52:25:f6:36:df:fb:3a:73:
0e:76:8d:0e:41:47:b1:a9:69:5a:4e:96:dc:dd:ba:
be:00:7a:aa:b2:9c:2c:2e:c7:62:f5:69:99:a2:79:
4a:87:9f:00:78:be:67:5e:b7:8e:ee:a3:fe:55:87:
08:bd:67:76:5d:79:08:df:6b:fc:c9:2b:22:01:c4:
21:f3:17:2c:e7:a4:ac:06:d9:82:8a:2f:8a:5e:82:
a3:cb:f7:f0:2a:61:a4:ea:2d:78:95:18:01:ee:6b:
62:30:76:70:4a:05:26:b0:82:c7:c3:14:12:32:50:
02:52:5b:0f:ca:1b:76:e9:58:d8:99:8a:da:9a:0b:
5d:fc:30:59:be:72:ec:cc:d2:b6:a7:1d:40:57:0d:
8f:2e:59:69:24:95:4f:89:9e:04:84:4d:09:5a:89:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:EC:65:8E:34:C0:FB:FB:CA:88:9B:CA:E7:29:3E:F3:42:23:A3
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/HGPsZY40wPv7yoibyucpPvNCI6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.168.0/23
Signature Algorithm: sha256WithRSAEncryption
51:cd:4e:88:0a:d3:7e:7c:66:21:ea:b9:6f:68:f4:0f:78:67:
8c:1d:8c:76:ec:e2:58:fd:ec:83:00:e0:cd:6b:dc:46:5c:fd:
9b:5e:bd:c9:f8:ea:b6:e0:0c:44:23:54:48:fa:84:ac:4d:3a:
86:05:de:74:47:9e:32:b5:3e:a1:ba:17:b6:a1:17:94:d8:54:
08:52:66:c9:c6:01:68:5a:67:ef:6e:43:2c:c5:86:42:62:0f:
e8:3a:94:53:3f:f5:7b:bf:3d:3e:ad:a6:c6:be:83:9d:0c:1f:
73:cc:b2:f8:88:93:a9:83:af:f1:5f:00:61:ef:a2:24:2f:31:
20:9d:b4:e7:f5:6e:f4:3f:7f:d3:33:86:48:97:ab:e8:5f:d0:
e1:17:4c:27:17:21:fc:14:27:8a:83:07:44:e1:04:d0:63:02:
5a:d0:ed:0a:21:98:ed:e9:65:f2:e0:71:76:c4:20:1b:b4:dd:
17:83:ac:92:2a:d1:34:4a:f1:a0:c6:9f:33:55:91:78:40:17:
87:52:aa:84:b6:5a:e1:f1:18:60:70:c3:d6:52:98:84:e4:0f:
41:f3:b9:cd:a9:dc:f4:b6:b3:2b:ed:a6:db:5e:be:ee:02:14:
e8:b0:9d:e7:6e:8a:fe:d0:54:dc:1d:f3:cd:d9:2a:4b:d5:68:
44:ca:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:35 2025 by rpki-client