Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/hGRkctXtfO_HTP_NL-LMlfbuUgs.roa
File: hGRkctXtfO_HTP_NL-LMlfbuUgs.roa (raw, json)
Hash identifier: 2G+HdOnm4wUovAfX0lOsqosnoayIdOp0QQgBEXyAz4o=
Subject key identifier: 84:64:64:72:D5:ED:7C:EF:C7:4C:FF:CD:2F:E2:CC:95:F6:EE:52:0B
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 01914AD5515C440BC7BA54041FA59C715B1B
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/hGRkctXtfO_HTP_NL-LMlfbuUgs.roa
Signing time: Tue 13 Aug 2024 08:22:59 +0000
ROA not before: Tue 13 Aug 2024 08:22:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43838
IP address blocks: 217.12.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:d5:51:5c:44:0b:c7:ba:54:04:1f:a5:9c:71:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Aug 13 08:22:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84646472d5ed7cefc74cffcd2fe2cc95f6ee520b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6e:4b:1d:6a:67:d1:5b:0e:70:80:06:0d:da:
b8:e3:c1:32:f2:d0:53:5d:67:d1:50:4a:44:73:38:
95:e1:52:8c:41:4a:6d:7c:ed:72:15:fb:d1:62:40:
4f:d3:3d:c8:43:21:c6:7e:01:5e:30:f4:31:de:f2:
3f:30:31:c0:5d:64:d8:1c:55:aa:70:0a:8e:6f:eb:
19:8c:11:c2:aa:2b:3c:2d:dd:02:86:9f:de:c9:63:
1a:ae:6a:04:9c:f9:22:b3:49:be:e3:61:f4:e4:72:
e0:76:b3:9a:a4:a8:a4:c6:42:18:10:44:34:42:a6:
1a:7c:30:3d:15:82:21:64:6c:3a:d0:05:b1:b7:2a:
e3:8e:d6:8f:1c:13:e2:7e:30:91:a6:46:be:c6:41:
19:7b:a3:84:16:e5:7a:c8:95:8e:32:59:fc:49:62:
fc:64:b4:01:52:b5:36:99:f4:d3:f7:da:e6:2f:91:
0f:35:5b:9f:54:e8:fd:c3:62:ac:5b:4d:30:52:13:
75:2c:da:2c:6c:d1:ff:88:ab:5c:29:e2:81:8d:aa:
2b:22:17:38:ae:ea:d8:57:22:7e:7d:a6:56:0b:56:
44:fd:c3:88:69:00:2c:a3:1a:1a:ae:ea:69:17:95:
93:5d:b3:33:93:3f:80:0a:34:44:f6:5a:c9:d7:71:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:64:72:D5:ED:7C:EF:C7:4C:FF:CD:2F:E2:CC:95:F6:EE:52:0B
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/hGRkctXtfO_HTP_NL-LMlfbuUgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:fc:33:f5:7f:9b:41:0d:81:e0:d8:7f:18:cd:5e:b5:d7:df:
77:9e:b8:dd:c6:48:95:16:01:d7:e4:92:8c:08:81:2f:f5:73:
e0:9c:1f:9d:5b:74:1d:f2:23:9f:8b:03:f0:4f:64:66:60:05:
fe:f0:b9:8e:df:83:75:19:1a:34:73:be:cf:1a:fd:4e:cd:a5:
14:0e:79:cc:bd:7a:6d:ee:b1:53:a4:9e:bc:fe:bc:08:90:5e:
d3:e8:e4:1f:9b:d7:6a:79:ac:c5:33:c7:db:bd:9a:4a:67:23:
b0:79:b7:cc:4a:c4:bd:c1:71:f6:c3:61:14:b2:ce:3f:43:f4:
eb:89:ef:a2:68:5d:c2:c1:29:4e:24:87:72:d4:0e:05:42:ff:
21:03:80:a3:df:be:11:2f:95:51:6d:5b:1c:e9:28:57:12:16:
83:47:7c:1d:f3:eb:8d:fa:53:8d:1b:0b:bf:4b:58:ca:80:d6:
e0:44:14:33:f0:87:58:37:e9:f8:76:dc:ef:b7:80:35:51:07:
fa:09:30:6c:51:5f:0e:83:16:f2:f3:c3:43:52:a0:4c:ac:78:
17:be:33:c6:17:06:25:d5:45:81:ea:95:85:51:f4:0c:9e:81:
62:96:81:69:74:b0:d5:ec:99:5f:06:56:c1:0a:e8:6a:3d:22:
87:4c:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 07:19:14 2024 by rpki-client on console.sobornost.net