Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/HyxaCugvdhgYXL7GR4X_xrMu8JI.roa
File: HyxaCugvdhgYXL7GR4X_xrMu8JI.roa (raw, json)
Hash identifier: Pxj7NchRxft6zMaskanZ2heO9Yvy9zlIn1/O4Et/qKo=
Subject key identifier: 1F:2C:5A:0A:E8:2F:76:18:18:5C:BE:C6:47:85:FF:C6:B3:2E:F0:92
Certificate issuer: /CN=6610295ff286ff4e79b557eee3cc943c03e72a5e
Certificate serial: E90822
Authority key identifier: 66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhApX_KG_055tVfu48yUPAPnKl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/HyxaCugvdhgYXL7GR4X_xrMu8JI.roa
Signing time: Sat 01 Jan 2022 03:52:02 +0000
ROA not before: Sat 01 Jan 2022 03:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 193.3.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15271970 (0xe90822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6610295ff286ff4e79b557eee3cc943c03e72a5e
Validity
Not Before: Jan 1 03:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f2c5a0ae82f7618185cbec64785ffc6b32ef092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:4b:86:7b:1c:bc:de:70:1a:8f:11:22:84:
89:f2:67:1d:61:82:f7:05:bf:e3:45:2e:2c:e0:0f:
70:60:30:6b:30:58:8f:a9:f7:1a:42:ee:4a:dc:4f:
8b:91:99:0d:89:4b:24:85:b5:10:eb:0b:68:10:7c:
55:be:27:db:97:29:64:99:da:16:38:b9:8a:e4:4d:
40:c2:55:00:39:5f:43:3d:39:19:0a:21:17:01:f4:
08:6a:70:fb:ba:6d:e9:c7:5f:a6:54:b5:8b:62:23:
cd:d7:9c:8a:d0:89:b3:85:ed:e3:31:c3:af:99:6b:
22:63:41:8f:45:e4:41:d7:53:94:5b:2f:c4:48:df:
dd:2e:8a:3e:06:bc:78:9c:a2:ec:48:ff:84:93:8f:
eb:9c:71:5d:7b:3e:77:f0:ce:8f:da:a7:d0:60:0b:
38:ed:53:8c:d4:ca:8f:d5:11:89:1e:a2:63:d2:a4:
eb:94:fb:bc:49:68:4f:ab:05:a6:1f:24:b6:fc:2f:
f1:d1:53:a4:c6:73:96:27:9f:3c:13:78:2f:1a:21:
d1:d4:f0:a6:82:01:ca:cb:96:08:ce:3d:03:76:3e:
38:c9:bc:3a:f6:75:88:4d:93:f4:56:06:12:07:48:
af:d4:3d:3d:54:ff:99:c6:e3:7a:3e:31:41:51:a5:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2C:5A:0A:E8:2F:76:18:18:5C:BE:C6:47:85:FF:C6:B3:2E:F0:92
X509v3 Authority Key Identifier:
keyid:66:10:29:5F:F2:86:FF:4E:79:B5:57:EE:E3:CC:94:3C:03:E7:2A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhApX_KG_055tVfu48yUPAPnKl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/HyxaCugvdhgYXL7GR4X_xrMu8JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/6a2a59-379c-4179-abd7-8847c34a4857/1/ZhApX_KG_055tVfu48yUPAPnKl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.19.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a3:c2:8d:eb:ef:2a:c4:05:7d:32:95:82:fd:97:4b:bd:5d:
0c:ca:a1:c6:a3:95:15:65:f0:d2:b6:47:44:9f:40:30:40:af:
47:ea:31:11:ab:93:bc:c0:c7:ed:b3:c9:96:ae:3f:b3:08:28:
9f:c5:e7:22:2b:74:75:96:1a:96:0b:11:48:1f:34:34:64:00:
4b:b7:e7:82:38:d5:6a:1a:60:ee:67:81:f6:78:3a:b2:21:bb:
f3:26:23:31:c7:85:5b:63:4b:b6:52:2e:43:c0:8f:4a:dc:66:
76:8f:8f:48:b5:09:45:0b:f0:93:ce:07:20:34:8f:40:5d:a7:
ed:52:5e:2d:36:0a:dc:f3:58:f0:ec:fc:fb:5d:fb:dc:50:4b:
43:d5:c9:b5:f1:16:d6:9a:06:14:99:61:90:43:98:69:c6:09:
7b:93:f2:6a:10:df:c6:66:f1:f0:88:7a:61:92:58:4e:aa:70:
dc:b3:de:8a:08:5d:ba:b5:77:5b:2b:90:21:9b:d8:a1:d3:96:
67:a3:32:d0:b9:b6:19:a6:34:ff:51:00:a2:8d:e2:10:52:01:
6f:b7:2c:55:88:ec:22:da:24:23:a6:58:7a:42:36:f5:ea:ca:
95:c1:93:5e:eb:d6:76:1f:05:97:ea:b2:68:12:af:5b:23:f5:
b0:85:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:12 2025 by rpki-client