Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/HCDIx_S4CsiVKHgwyzCub1HKm_c.roa
File: HCDIx_S4CsiVKHgwyzCub1HKm_c.roa (raw, json)
Hash identifier: 52KHFPHv9ERfIIHxVFMQUIFL2JSISCdKkVe6bZPtGU4=
Subject key identifier: 1C:20:C8:C7:F4:B8:0A:C8:95:28:78:30:CB:30:AE:6F:51:CA:9B:F7
Certificate issuer: /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial: 0183FA21FBE42A204A7EEA5ADEAC449EB96A
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/HCDIx_S4CsiVKHgwyzCub1HKm_c.roa
Signing time: Fri 21 Oct 2022 10:41:14 +0000
ROA not before: Fri 21 Oct 2022 10:41:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203511
IP address blocks: 193.169.239.0/24 maxlen: 24
193.169.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:21:fb:e4:2a:20:4a:7e:ea:5a:de:ac:44:9e:b9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Validity
Not Before: Oct 21 10:41:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c20c8c7f4b80ac895287830cb30ae6f51ca9bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:8b:e0:c6:d0:cd:55:cb:39:53:f7:7d:05:
a8:12:b5:43:66:fc:00:67:17:22:17:2e:82:ba:02:
bb:7a:f1:8c:83:1a:33:fb:54:01:1d:b1:b6:b5:10:
d2:47:91:db:c8:a7:c2:1b:11:5c:d4:f0:bb:5f:c9:
26:31:d6:c7:65:0a:d7:82:99:06:da:eb:a2:31:9a:
6f:3f:ed:42:bb:4c:44:fd:c4:1c:8e:6e:c4:a7:b4:
f4:0d:cb:42:f5:3a:e1:24:a5:b9:39:be:00:e7:f9:
97:c5:50:78:f2:6a:bb:5c:4e:d0:58:56:9e:f7:3c:
13:67:ca:a5:c4:30:76:40:00:a0:66:80:c8:a6:89:
20:e1:c5:54:42:92:34:bd:7a:02:9d:65:7a:e5:55:
16:fe:5e:a1:09:e1:91:d5:11:59:35:8e:f1:d6:21:
51:fc:08:c7:4c:76:d7:98:1b:c0:83:92:ed:fd:52:
4e:84:18:4d:73:9c:38:9d:da:09:7a:10:29:d2:25:
8c:1c:78:88:a0:36:d8:16:84:74:b3:d0:ab:a1:e4:
01:a6:56:8f:24:6d:14:54:42:47:ba:90:45:bc:40:
bc:84:f3:09:17:e6:9b:fb:ae:b4:a7:df:aa:fb:cd:
25:cd:33:a9:86:46:41:df:22:8f:d1:82:fd:aa:b5:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:C8:C7:F4:B8:0A:C8:95:28:78:30:CB:30:AE:6F:51:CA:9B:F7
X509v3 Authority Key Identifier:
keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/HCDIx_S4CsiVKHgwyzCub1HKm_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.239.0/24
193.169.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:da:9b:51:5a:3f:d1:2a:25:ad:c8:9a:24:74:ee:d7:6a:9b:
c3:0b:08:f1:39:28:04:21:49:b9:e0:50:1c:a2:ef:5c:c3:c9:
09:f1:c3:e7:42:da:0e:eb:9e:ad:0e:e2:28:95:57:47:ae:2f:
9a:d2:6e:4f:75:9b:28:05:16:25:d2:80:ff:13:df:86:2b:ed:
15:dd:a2:76:d4:f3:19:c2:4b:d8:79:f0:b6:25:0a:3d:77:80:
5b:70:84:70:4e:5f:0e:04:48:61:d6:04:d1:dd:7e:fb:14:ad:
a3:60:67:01:db:0e:a4:75:ff:01:5f:4f:0d:3c:36:3d:9b:3c:
43:25:7a:c8:52:0d:50:dc:0d:89:11:e7:f4:05:74:35:92:f4:
a9:ad:3c:55:a9:63:c4:5a:73:01:af:f0:b2:c8:aa:2e:83:d4:
a5:74:ea:ef:9a:50:0a:77:81:40:f6:cb:d8:4b:dd:14:17:67:
49:fa:3b:ab:cd:1f:5f:5e:db:8d:92:93:a6:8e:62:4e:2c:18:
dc:46:73:fa:7e:e8:92:a1:32:23:c1:5d:3d:d9:76:db:26:b7:
77:53:8d:66:10:2f:5f:45:e2:17:71:59:bd:f1:b6:ca:1d:fe:
ae:cc:bc:c2:2a:52:6a:aa:11:0d:e5:5e:8f:7f:ca:65:7f:d8:
a2:aa:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org