Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/HGgZhuw6nZPKuAVbqG54f0jYRSQ.roa
File: HGgZhuw6nZPKuAVbqG54f0jYRSQ.roa (raw, json)
Hash identifier: PbzQ46dLgmN9cwC12T0+h9Ce5wFCW11NpshmjfZFpxA=
Subject key identifier: 1C:68:19:86:EC:3A:9D:93:CA:B8:05:5B:A8:6E:78:7F:48:D8:45:24
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 01856BD3545C1CE4A2F49A0F24F4CE32DCD2
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/HGgZhuw6nZPKuAVbqG54f0jYRSQ.roa
Signing time: Sun 01 Jan 2023 05:34:49 +0000
ROA not before: Sun 01 Jan 2023 05:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 217.198.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:54:5c:1c:e4:a2:f4:9a:0f:24:f4:ce:32:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Jan 1 05:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c681986ec3a9d93cab8055ba86e787f48d84524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:cc:ea:e1:89:2c:a5:45:86:65:15:fd:18:
8d:8f:74:be:12:d1:6d:c9:85:7b:22:56:62:ba:4d:
3b:ff:e0:65:b3:44:19:cd:0c:0a:98:3b:3b:ec:b0:
0a:71:a8:86:6c:64:b6:f8:92:7e:a6:8d:8a:9d:74:
f6:2c:5d:8c:7e:9c:13:df:42:39:31:46:13:8f:96:
52:fd:12:a6:19:3a:49:75:71:18:f0:f8:e4:97:a3:
81:8e:fe:a9:ca:55:c6:f8:70:6c:64:de:ef:95:85:
a8:2f:0c:2f:3f:98:f5:0e:5b:01:d4:6b:e4:a6:b8:
b4:2a:ae:53:45:3c:70:6e:d2:29:91:07:86:fd:26:
dd:17:ba:fd:d2:5e:fe:73:d2:5a:e6:70:01:33:e8:
ec:72:70:3f:81:1d:cc:2e:cd:bd:aa:e5:cc:f5:ad:
59:b1:ac:0e:4f:64:7d:55:ff:2c:b3:27:d0:8b:2e:
23:56:05:65:1d:05:3c:de:8e:6f:5e:7c:7d:43:03:
da:cb:82:d2:20:49:d8:96:c4:20:2e:98:19:21:eb:
60:ac:1b:05:75:f3:83:c2:e9:51:55:e1:2b:19:c9:
ca:2e:90:7e:e9:80:0a:a9:bf:cf:1a:fe:ad:b1:ff:
0b:dc:eb:38:8a:93:66:2d:96:81:52:5b:5a:ab:92:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:68:19:86:EC:3A:9D:93:CA:B8:05:5B:A8:6E:78:7F:48:D8:45:24
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/HGgZhuw6nZPKuAVbqG54f0jYRSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:34:d3:9c:1c:7c:a5:d9:7d:8f:59:97:4e:a7:a0:b7:d5:a3:
df:19:3b:ba:02:a0:3b:05:2d:74:2b:28:a6:83:85:33:e9:d3:
cd:4c:49:4f:9a:8f:78:d7:bd:ac:6f:67:f6:e0:ab:7c:7c:98:
2a:57:ed:71:76:0d:06:24:be:8d:4d:6b:9b:db:55:2d:22:c4:
b3:0b:9f:ff:7b:e7:bc:b8:a0:01:d5:bf:a9:f7:ac:04:f7:ff:
7e:72:a1:32:df:ff:c5:a2:3f:23:c7:87:da:fc:59:ea:67:7c:
63:18:4c:7d:78:19:42:cf:8c:a7:42:a6:06:4e:30:7f:5b:b5:
65:e2:70:9d:7f:6b:f8:d4:b7:b3:1f:fe:89:4a:85:eb:ee:7a:
75:0c:72:99:c7:65:2c:f0:18:75:47:a1:48:36:ef:bb:e6:0b:
ea:14:4c:61:30:de:fc:5a:cf:2a:c6:a9:fe:a0:f7:f7:6c:27:
74:87:48:10:d0:65:86:2b:d1:c3:44:c5:73:5c:7c:f8:ae:9f:
c7:06:7c:de:38:ef:1a:94:b6:68:5b:bf:0b:8e:c2:18:4a:09:
de:b6:c1:5d:30:93:0c:7b:1f:0a:4f:e5:ff:bd:c0:7e:dc:cb:
96:b4:9a:1a:72:45:d5:f2:7d:cf:e6:7c:9e:eb:33:ea:d4:b7:
70:b3:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org