Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b7263f-e10e-46df-b7a2-728b734636b3/1/HEZSBMqV5yCFE78cD87Z77uP4k0.roa
File: HEZSBMqV5yCFE78cD87Z77uP4k0.roa (raw, json)
Hash identifier: VU0lTHFh+meeR/oaTXPoGfS+2FuyFcMvdLBRRGpQ92s=
Subject key identifier: 1C:46:52:04:CA:95:E7:20:85:13:BF:1C:0F:CE:D9:EF:BB:8F:E2:4D
Certificate issuer: /CN=eb656a1a72c6524624d764231055731d70733eeb
Certificate serial: 034842E3
Authority key identifier: EB:65:6A:1A:72:C6:52:46:24:D7:64:23:10:55:73:1D:70:73:3E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62VqGnLGUkYk12QjEFVzHXBzPus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b7263f-e10e-46df-b7a2-728b734636b3/1/HEZSBMqV5yCFE78cD87Z77uP4k0.roa
Signing time: Sat 01 Jan 2022 16:10:47 +0000
ROA not before: Sat 01 Jan 2022 16:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50376
IP address blocks: 212.6.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55067363 (0x34842e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb656a1a72c6524624d764231055731d70733eeb
Validity
Not Before: Jan 1 16:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c465204ca95e7208513bf1c0fced9efbb8fe24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:0f:9c:56:60:c1:58:0c:f5:ba:7b:03:aa:
b9:e8:2c:a2:30:75:af:1a:5e:25:d1:13:c5:b7:e8:
00:be:2f:b3:8a:47:9c:8c:71:5f:ad:f0:7c:96:2b:
66:5d:07:8c:1c:a2:90:87:57:9a:c0:e3:e9:e9:53:
77:81:b4:3d:fe:67:3a:1c:ae:a1:a6:7e:57:bb:15:
78:53:4d:c8:76:f8:e3:85:b1:49:87:97:2f:0c:5d:
5c:98:af:32:30:0f:ca:4b:4f:3c:55:2f:d4:35:29:
bc:34:3d:0d:e5:be:52:00:b0:43:d0:40:a4:68:30:
0f:cc:f7:f1:4e:1f:71:10:0d:1e:2a:0d:83:53:9d:
77:27:2b:f5:23:31:e8:9f:75:4c:9d:d0:35:83:df:
6c:0b:d2:8a:02:9d:1a:72:6c:7f:cf:e0:45:75:10:
cf:81:f7:74:b5:81:48:89:10:73:fa:58:a3:fb:8b:
8e:e8:b5:e7:ad:16:cd:6c:94:d2:28:ce:93:e2:e8:
e7:64:26:77:2a:f7:06:27:60:2c:0e:51:f8:9d:48:
05:ee:53:68:4d:52:51:a4:61:bb:f4:f0:28:67:e6:
0c:0f:6a:40:4e:8a:9a:9b:e9:af:69:21:ef:bd:9c:
eb:c5:60:3f:f2:cd:4d:83:23:ad:95:36:46:a9:87:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:52:04:CA:95:E7:20:85:13:BF:1C:0F:CE:D9:EF:BB:8F:E2:4D
X509v3 Authority Key Identifier:
keyid:EB:65:6A:1A:72:C6:52:46:24:D7:64:23:10:55:73:1D:70:73:3E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62VqGnLGUkYk12QjEFVzHXBzPus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b7263f-e10e-46df-b7a2-728b734636b3/1/HEZSBMqV5yCFE78cD87Z77uP4k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b7263f-e10e-46df-b7a2-728b734636b3/1/62VqGnLGUkYk12QjEFVzHXBzPus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c2:ba:c7:c0:22:f9:b5:3f:2d:8f:32:e1:92:5a:9d:14:6f:
0b:1c:62:0f:e2:98:3f:ad:03:7b:0b:1f:1f:51:32:b3:84:60:
68:a8:69:45:5c:cc:78:70:80:c3:14:ed:2b:74:4c:d7:a9:e0:
32:3e:4e:11:b4:fe:96:18:46:3a:63:41:5a:a6:db:41:bd:29:
17:20:52:f7:92:aa:bb:1f:17:98:58:d1:20:ce:58:cb:86:e2:
99:5a:86:23:d9:ec:78:f5:d9:6d:cb:0a:64:32:01:5d:73:fc:
ee:c0:24:f1:bc:96:36:f3:ff:3c:3d:44:36:70:a1:73:47:63:
e5:e8:df:dd:c9:7b:28:ee:2e:a0:f4:9d:f7:b2:7f:a4:06:d2:
09:7f:c3:45:c2:2c:15:e3:e7:5f:ee:00:cd:25:38:39:ce:9d:
30:17:dc:0e:5b:e3:05:91:4c:d2:c4:de:e8:bc:2c:b3:10:e1:
67:ed:2a:93:3b:be:21:2e:20:e1:41:9a:e4:cf:92:41:9f:c4:
44:74:ed:26:83:6d:9c:1b:3d:e8:7d:f2:66:12:e7:79:de:3d:
78:a5:28:52:63:12:7c:9d:f8:90:f7:21:b8:fa:5f:93:fb:f1:
85:02:cd:40:f4:a9:39:2f:8f:47:77:2c:fd:c1:f1:7c:03:59:
ea:10:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org