Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/HxLA-r1BsgVNduisy26A7oq8oek.roa
File: HxLA-r1BsgVNduisy26A7oq8oek.roa (raw, json)
Hash identifier: LJb57FKrf2KNaiuNokAF98S4P21DF3+HsZ4UyowBBpU=
Subject key identifier: 1F:12:C0:FA:BD:41:B2:05:4D:76:E8:AC:CB:6E:80:EE:8A:BC:A1:E9
Certificate issuer: /CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Certificate serial: 4979C6
Authority key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/HxLA-r1BsgVNduisy26A7oq8oek.roa
Signing time: Sat 01 Jan 2022 02:53:22 +0000
ROA not before: Sat 01 Jan 2022 02:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 146.19.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4815302 (0x4979c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Validity
Not Before: Jan 1 02:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f12c0fabd41b2054d76e8accb6e80ee8abca1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:e3:b2:95:29:f5:47:6b:42:77:44:31:9b:
1e:e5:43:3d:ae:a3:fc:36:fc:22:ca:3f:be:e2:f6:
76:c9:69:c2:da:b6:3f:90:d6:d8:8d:85:73:b0:d9:
ec:a9:e5:70:c5:d9:eb:16:61:77:85:dd:ac:1b:69:
3f:fc:53:36:51:45:61:b4:ec:df:72:33:93:da:61:
4d:51:1d:49:93:9e:49:a1:f1:99:b6:3b:42:6e:fe:
f3:65:50:19:97:ba:d1:4b:de:4c:5d:b3:37:39:5b:
53:58:00:ca:20:1d:5a:88:eb:b7:5e:f7:e5:b6:7a:
6a:c9:f1:28:24:7b:a6:a5:63:a1:bc:43:1c:ea:a0:
75:18:7a:ea:85:60:ac:b2:9c:30:30:6a:43:0a:da:
aa:db:80:55:19:d4:67:e8:6b:5f:78:e6:6a:07:90:
7b:e7:5e:ce:74:f6:23:f2:50:89:ed:32:2a:f6:15:
d8:a6:71:09:88:a9:d1:6d:41:7d:65:dd:c1:85:e0:
7f:b9:d8:27:9c:09:8b:be:44:1d:47:b2:5b:1a:72:
87:29:7c:fe:04:86:a0:30:59:65:a8:49:a5:63:95:
25:d0:59:68:e1:30:29:fd:00:52:09:8a:a5:b6:8a:
74:b1:e9:42:e4:e9:f2:54:59:db:3c:0a:e4:63:98:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:C0:FA:BD:41:B2:05:4D:76:E8:AC:CB:6E:80:EE:8A:BC:A1:E9
X509v3 Authority Key Identifier:
keyid:4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/HxLA-r1BsgVNduisy26A7oq8oek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.57.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b8:bf:65:d6:21:2e:09:2d:17:1a:46:96:63:c7:77:c7:8c:
5f:8d:1e:a4:49:37:6c:fa:36:2b:43:94:98:28:f4:91:45:61:
e5:76:93:d3:e2:1d:1e:1a:69:66:c0:94:2d:9d:f0:32:45:65:
3f:9b:78:87:2f:29:55:e4:fc:4b:f0:02:1d:58:02:6d:ce:ff:
b8:cc:ef:21:32:f1:41:31:55:2f:fe:36:ba:e4:08:ab:2c:83:
1a:7e:90:6b:49:a3:89:08:fa:7d:15:51:cb:53:f5:98:c3:c6:
ab:79:68:d5:fe:d0:5c:9a:51:0f:82:ab:64:03:98:99:db:89:
0b:20:9d:39:2c:27:70:bf:62:da:3e:86:48:62:4b:cf:4c:89:
ce:8f:ab:b7:1c:7c:79:a3:3b:62:e6:45:c9:be:34:9d:28:c5:
17:17:f4:45:00:f5:96:0f:d2:09:d2:61:20:32:74:7d:c5:42:
25:7e:77:09:a3:7b:79:a6:a2:15:cd:fc:1a:f4:ff:51:3f:f3:
d2:7a:98:ed:c7:4a:57:c5:ea:d3:d2:1d:43:07:29:cd:2a:51:
14:80:2c:a5:30:c3:b2:12:6a:6b:1e:88:11:41:33:53:40:09:
fd:7e:0a:29:cf:aa:12:f2:4d:06:52:b5:09:e0:67:94:41:57:
85:60:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:34 2024 by rpki-client on console-ams.rpki-client.org