Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/HPcQZ0kpSVtlLFOoBmuhijx2F0Q.roa
File: HPcQZ0kpSVtlLFOoBmuhijx2F0Q.roa (raw, json)
Hash identifier: CA5vrKxn+Hfj5I+1E0z84Yc3+IlC54t8n3JU2EcZ6Bw=
Subject key identifier: 1C:F7:10:67:49:29:49:5B:65:2C:53:A8:06:6B:A1:8A:3C:76:17:44
Certificate issuer: /CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Certificate serial: 012BF526
Authority key identifier: 4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/HPcQZ0kpSVtlLFOoBmuhijx2F0Q.roa
Signing time: Sat 01 Jan 2022 11:04:21 +0000
ROA not before: Sat 01 Jan 2022 11:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 84.246.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19658022 (0x12bf526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c297f5828aa4e1c8e041e9dbea7abd39b5584d7
Validity
Not Before: Jan 1 11:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cf710674929495b652c53a8066ba18a3c761744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:b0:1e:01:8f:52:6f:88:0e:92:1d:11:38:
a0:ef:a5:54:f8:28:06:d8:21:12:13:7e:57:c6:8c:
0c:f9:58:ce:71:df:63:d9:c3:a3:51:ae:55:6e:8c:
0f:81:09:8a:0e:a4:37:d2:8b:11:e3:c2:ff:92:60:
28:24:b9:57:42:a4:a6:1b:76:66:76:76:84:dd:0b:
bf:13:fd:85:fc:fd:9f:51:91:3e:73:2d:4d:91:2a:
8a:a8:18:72:b8:5c:a7:c3:31:56:3f:21:bb:79:3f:
fc:48:2f:16:de:c9:b5:63:65:b7:db:a2:9d:e6:7f:
1f:de:74:06:9c:6f:bb:41:28:41:dc:e5:9d:b4:bc:
75:39:8b:df:9b:e5:ed:6b:67:8c:36:6c:cf:df:01:
3a:48:64:06:93:2f:f9:1e:94:00:bf:35:0f:40:af:
bc:ee:bb:d0:ea:b5:bd:fc:0a:20:97:18:27:df:c2:
e0:99:3b:2e:e2:a4:07:ee:23:da:cb:7e:46:99:ea:
a2:64:aa:ef:d3:aa:e1:72:9e:1b:8d:e8:93:6f:83:
d3:7f:d8:a6:57:55:39:0e:fe:71:66:7c:16:78:47:
4d:3e:ed:a8:6d:2f:4d:ee:6c:6a:3f:62:cf:0d:6e:
c2:3a:dd:e9:02:a7:05:c4:48:35:70:5d:04:38:20:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:10:67:49:29:49:5B:65:2C:53:A8:06:6B:A1:8A:3C:76:17:44
X509v3 Authority Key Identifier:
keyid:4C:29:7F:58:28:AA:4E:1C:8E:04:1E:9D:BE:A7:AB:D3:9B:55:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCl_WCiqThyOBB6dvqer05tVhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/HPcQZ0kpSVtlLFOoBmuhijx2F0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/9264a0-ed7b-4712-a910-c7f698dedd68/1/TCl_WCiqThyOBB6dvqer05tVhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e6:65:c3:78:dc:60:81:5c:02:70:f8:5e:94:a7:20:27:f4:
d5:93:b6:05:55:2e:9c:1b:62:14:d7:1e:29:71:31:30:fe:24:
1a:b8:57:c2:a3:0b:1f:80:a6:6d:4d:a7:f8:57:b2:80:3d:2d:
91:29:db:f0:4e:c4:b8:bb:b2:7a:85:fd:cb:f0:3d:91:e0:13:
3e:00:97:ee:b5:8e:83:c6:40:dd:2e:9e:43:60:35:b1:6f:dc:
f0:2a:20:40:ed:34:89:aa:2e:f1:ab:85:52:bc:af:1d:28:4a:
18:db:c0:a8:5f:29:b4:63:94:39:c1:e9:4e:b0:35:b5:2f:75:
da:0f:4c:8e:4c:38:55:6e:61:31:31:35:12:83:1e:b2:74:59:
ea:c2:01:cb:3d:60:33:a8:0c:a3:79:7f:d6:c7:46:af:ec:ef:
b0:85:cc:1a:e6:2d:62:8c:20:1f:98:1d:3f:d0:93:c3:f3:63:
13:c8:76:eb:a9:a6:d9:fd:cd:e9:ce:ec:78:7c:ed:e1:69:04:
de:3d:7b:3a:d0:da:af:6f:6e:2c:94:f5:a8:ac:6b:80:72:4d:
0f:10:05:6b:e8:fe:ba:53:46:7c:80:1b:c6:b5:dc:a9:48:63:
46:c9:34:3a:39:e2:92:94:58:a9:f0:31:a1:22:e3:ec:03:81:
32:eb:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org