Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa
File: HKlJx626LV4jBrcjY02vHshRD0c.roa (raw, json)
Hash identifier: aBWs5ohRIh/jY/phElLJHxLPWuen6wWrXZv/NJJuwUQ=
Subject key identifier: 1C:A9:49:C7:AD:BA:2D:5E:23:06:B7:23:63:4D:AF:1E:C8:51:0F:47
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 090EF497
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa
Signing time: Thu 20 Jan 2022 21:23:22 +0000
ROA not before: Thu 20 Jan 2022 21:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 45.66.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151975063 (0x90ef497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 20 21:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ca949c7adba2d5e2306b723634daf1ec8510f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:83:a7:f7:5e:79:8d:47:5c:d3:38:d1:f9:31:
35:6f:36:c3:b3:39:4e:9f:d5:97:bc:67:1c:cd:aa:
99:10:18:0d:6f:5f:4a:11:5f:d0:18:9d:89:49:9c:
23:74:a8:b5:06:12:02:63:14:5b:77:48:1c:b8:a4:
35:4a:85:da:94:54:a3:ca:55:84:ae:81:4d:dd:88:
74:bb:3b:98:a2:3f:36:5e:96:b3:7b:f4:61:74:a8:
13:54:a0:b9:9b:a5:f2:11:be:79:c6:3a:73:60:cc:
67:8f:58:67:d3:af:ee:ab:4b:78:b9:a5:5f:8e:76:
00:3c:b4:91:16:29:29:be:9d:5f:1c:8b:23:c7:32:
a6:96:55:91:36:76:62:7c:10:dd:2b:91:3e:73:87:
80:56:91:9e:2c:1d:49:34:22:c2:8c:a9:5f:d7:e7:
93:3c:db:d2:99:1b:a0:d8:74:1a:58:58:2b:0a:e3:
59:83:ed:a9:f4:e8:00:cc:8e:5b:57:db:fe:65:48:
b7:aa:34:9e:5f:12:24:96:74:7c:c5:df:70:39:aa:
10:81:8d:1a:f7:8c:a6:09:20:02:4f:07:16:b0:5d:
b5:d5:61:90:0b:e0:e3:7d:46:ae:06:b7:87:ad:29:
5a:65:a6:16:e2:2c:5c:06:e7:f6:3d:a9:da:bb:ff:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:49:C7:AD:BA:2D:5E:23:06:B7:23:63:4D:AF:1E:C8:51:0F:47
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/HKlJx626LV4jBrcjY02vHshRD0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:86:d3:c1:79:f4:92:21:9c:3c:ef:26:2c:18:67:59:2e:77:
69:e5:7b:bd:45:81:e0:82:56:f5:84:1d:99:b0:3d:91:a8:9c:
9d:9e:be:7b:0b:77:f8:59:e7:16:69:fe:28:c6:b8:f2:1a:1b:
ac:f9:9d:3d:20:de:5a:29:5c:58:ac:f2:53:52:4a:c3:2e:30:
dc:8c:4a:e4:ad:6a:82:3c:5b:fa:1f:e0:40:c1:d9:85:82:25:
3f:25:23:6f:2d:7f:8b:b7:04:ff:f8:bf:77:0f:c5:81:fc:22:
66:9e:ce:b9:a3:82:e7:ff:ac:b3:3e:8f:34:a1:40:51:8e:f0:
87:03:f9:a9:ad:07:b0:7f:1b:22:ba:d8:86:5f:f3:c9:89:83:
46:c4:4d:46:af:5e:be:ff:77:87:dd:32:d2:ae:19:83:da:f4:
bf:6b:90:9f:a2:1a:85:73:f3:f0:d5:f3:e7:5d:da:52:8d:e6:
f2:f5:a8:04:3f:46:8e:c5:83:f1:b2:e9:45:9e:ff:c9:73:97:
8f:4f:61:a4:3c:d4:49:51:e7:b6:56:4c:be:8a:a8:24:7a:2e:
f8:c3:43:4c:6a:a0:75:d4:d2:cb:dd:22:02:4b:e5:5f:dc:e9:
07:2c:34:0c:59:69:61:86:9f:30:77:61:48:8d:e6:6b:40:3a:
ce:8b:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org