Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/hhweeQlwDMBbfLBoLNJRxL2IF7g.roa
File: hhweeQlwDMBbfLBoLNJRxL2IF7g.roa (raw, json)
Hash identifier: 7NWye6PV2IyUPA+TTvhqJAsmog68LYvcu4e+dd6iD6M=
Subject key identifier: 86:1C:1E:79:09:70:0C:C0:5B:7C:B0:68:2C:D2:51:C4:BD:88:17:B8
Certificate issuer: /CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Certificate serial: 0184F9A2B436387A1510DF9689C752D746A1
Authority key identifier: 63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/hhweeQlwDMBbfLBoLNJRxL2IF7g.roa
Signing time: Sat 10 Dec 2022 01:25:00 +0000
ROA not before: Sat 10 Dec 2022 01:25:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 212.23.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f9:a2:b4:36:38:7a:15:10:df:96:89:c7:52:d7:46:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Validity
Not Before: Dec 10 01:25:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861c1e7909700cc05b7cb0682cd251c4bd8817b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:0e:bc:37:0e:98:8a:a7:65:69:9d:99:33:
7a:30:5c:1c:44:23:29:fc:fa:41:6c:42:d9:93:86:
cd:b1:f8:b0:c9:66:e9:f0:dc:29:03:f4:5e:af:64:
70:aa:a9:07:25:57:d7:6f:15:9a:eb:c9:61:38:68:
79:89:a5:07:59:78:44:8c:f2:85:cf:94:9e:15:6a:
22:d0:7b:04:83:66:00:65:15:2f:e7:eb:7c:2f:82:
b8:87:b7:51:9f:97:41:d7:43:78:bb:2f:a4:16:e8:
59:bb:b3:e8:04:1d:8a:1b:b2:a0:e5:c6:83:18:e0:
b4:47:1b:d9:70:34:bf:d1:a4:d5:6e:1c:aa:07:10:
f1:4a:ef:e1:44:b8:e6:b4:5e:68:85:0e:51:5f:e4:
b7:11:24:61:dd:11:9d:df:c8:67:3a:98:ac:83:c2:
ae:91:db:9a:99:9e:57:9f:2f:3f:76:7f:97:3c:69:
23:8b:d7:34:ef:fa:47:3d:b1:9f:6c:c2:3e:8d:79:
9d:d8:c4:64:f6:5d:45:50:8a:a4:c6:55:4a:de:ef:
d2:a2:6e:44:d4:cd:19:a9:5a:eb:b1:45:b6:f0:29:
2b:a4:40:4b:46:b7:9d:4b:01:cd:63:0a:08:6d:72:
cc:9e:6b:64:e7:55:c0:f4:eb:61:65:84:3f:cb:74:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:1E:79:09:70:0C:C0:5B:7C:B0:68:2C:D2:51:C4:BD:88:17:B8
X509v3 Authority Key Identifier:
keyid:63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/hhweeQlwDMBbfLBoLNJRxL2IF7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.210.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f1:a6:18:26:bb:ca:52:c2:d2:fe:76:40:3c:e1:e3:f9:3d:
65:35:cc:d2:e0:ca:80:c2:5c:b6:c2:6c:2a:7e:14:b6:56:1e:
f4:15:ac:76:01:f2:70:de:4d:28:ef:ca:ca:a2:7b:93:6b:d9:
0b:17:7f:86:3f:b2:92:ba:37:88:8c:3b:7b:bf:40:41:52:72:
cf:a4:b8:5d:d5:93:02:b9:1b:12:9c:f3:d3:b4:67:2b:9f:d7:
e1:2d:b6:0f:67:d6:cf:19:b9:4f:ba:91:cc:8c:42:77:cd:b9:
79:4d:b7:dc:cf:df:57:b6:ca:8b:7c:f4:51:6f:a1:40:39:eb:
a8:4e:8f:35:1e:4f:3b:64:4d:ed:1b:42:9a:0e:a5:c6:eb:5d:
a2:6f:2f:bb:a6:c2:06:52:ad:58:4e:fe:76:f2:38:38:a9:d6:
ea:a8:6e:2b:11:6b:c8:3e:f9:88:19:52:e9:3e:86:83:19:54:
20:39:1b:b4:c7:13:9b:78:f6:22:14:e3:11:15:2f:14:81:85:
0f:df:5d:13:0d:ac:e5:b6:16:02:e5:20:72:90:bb:a3:56:87:
af:26:98:28:69:fe:e7:55:19:d3:34:b4:05:04:ed:4b:69:3a:
14:d7:b6:53:e8:df:f0:65:87:c3:ee:04:90:9c:c7:3c:fa:5a:
b4:10:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:12 2024 by rpki-client on console-ams.rpki-client.org