Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hg_-4TPlOPZWLMJT6mBbKyTPHGs.roa
File: hg_-4TPlOPZWLMJT6mBbKyTPHGs.roa (raw, json)
Hash identifier: qR/GGX023iI0sD3oVoFYBdaL3EwpEpXkZ6eZL6yLtjM=
Subject key identifier: 86:0F:FE:E1:33:E5:38:F6:56:2C:C2:53:EA:60:5B:2B:24:CF:1C:6B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E601980720374BF19458BA36A7CA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hg_-4TPlOPZWLMJT6mBbKyTPHGs.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e6:01:98:07:20:37:4b:f1:94:58:ba:36:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=860ffee133e538f6562cc253ea605b2b24cf1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:00:19:30:7a:32:73:dc:3f:f2:26:e4:c5:
b5:fc:8e:02:c1:3c:50:1a:e2:0d:7a:6e:d0:1e:f8:
a1:92:5f:34:44:b6:5e:ea:52:b2:46:ad:97:64:7b:
b5:63:ff:c2:74:28:46:6a:08:b0:f7:6d:82:bd:b6:
2f:7e:83:25:d1:18:78:ff:84:f4:4c:4d:71:f3:77:
f7:ff:6c:ba:ce:df:c5:49:9c:cf:b6:ea:35:d1:a9:
e1:a7:aa:e0:b6:07:6e:31:59:48:f3:29:29:2c:76:
e6:b2:09:80:48:08:20:b7:36:01:91:22:d2:be:91:
3d:b7:17:c7:b5:0c:0b:93:d0:1d:f9:b1:47:8a:c8:
d4:74:77:ee:87:48:cd:01:cc:e7:08:49:19:35:26:
f7:bf:cf:c0:7a:71:2e:cc:0b:be:c9:55:13:fb:23:
7b:23:dd:e4:d5:36:0d:3d:92:12:94:6e:66:b4:a3:
b6:7d:a3:44:75:28:2e:29:83:29:68:fe:3c:85:e1:
3c:66:c2:60:9e:f4:39:68:4a:0a:30:1d:3f:1c:c5:
d7:4b:61:ca:13:0b:67:6b:2f:58:a6:7e:a3:9d:48:
e8:9b:d2:92:db:31:32:ef:97:35:f2:03:a9:c5:ce:
8d:ec:c0:72:fc:37:e8:c7:4c:d5:a4:3d:f7:9e:c0:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:FE:E1:33:E5:38:F6:56:2C:C2:53:EA:60:5B:2B:24:CF:1C:6B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hg_-4TPlOPZWLMJT6mBbKyTPHGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
Signature Algorithm: sha256WithRSAEncryption
69:0e:25:0b:ce:e5:e6:f3:b9:7f:41:7d:88:79:53:0e:64:34:
39:10:54:01:b0:0a:fb:0c:c2:f0:6b:9d:5c:ea:a5:a7:22:41:
41:67:8f:d1:ee:ca:3d:82:14:21:e6:f1:b4:49:75:68:ce:81:
09:c0:22:88:9f:5e:18:be:f7:d9:7e:62:48:92:6d:97:53:7e:
e8:41:53:1a:ae:2a:f6:db:4d:10:aa:6f:46:23:5f:99:1e:4b:
de:58:ae:4e:55:49:83:70:7e:86:d0:15:f4:fa:0a:2b:7f:d5:
cb:08:c3:78:14:a5:a7:3b:20:2f:19:e7:8e:83:d2:69:de:88:
e7:bd:c3:c5:4f:57:8d:6a:88:51:1d:0d:e5:5b:bb:a7:68:a9:
a6:ef:f4:e2:42:a5:ee:fc:23:c1:b8:84:95:84:5b:7e:36:df:
07:b5:89:35:c3:03:eb:e2:e5:a3:03:6b:05:9a:e1:ad:9c:60:
76:7d:3b:cb:f3:77:fc:c5:22:5d:b1:a6:61:69:3d:b5:84:d4:
8d:c2:ba:90:93:c7:be:63:b8:34:b1:81:0e:e3:a1:16:69:27:
10:30:60:d4:c9:c4:2a:db:bf:0b:de:ba:66:8b:7c:73:4d:4a:
9d:a8:e5:b5:4e:9c:17:0c:da:b0:0a:ad:58:a7:93:91:8b:06:
9e:a2:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:12 2025 by rpki-client