Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/hpiMnFFojGUv3DO4cAWmFHzZuPo.roa
File: hpiMnFFojGUv3DO4cAWmFHzZuPo.roa (raw, json)
Hash identifier: z9ndCvORD2nowL5q2osivhWztUk7qLUBWs2EnEjkBZg=
Subject key identifier: 86:98:8C:9C:51:68:8C:65:2F:DC:33:B8:70:05:A6:14:7C:D9:B8:FA
Certificate issuer: /CN=a609c33af20168169031255daee2d83d2662c990
Certificate serial: 018570D4F98AAB244192AC2D73C640015457
Authority key identifier: A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/hpiMnFFojGUv3DO4cAWmFHzZuPo.roa
Signing time: Mon 02 Jan 2023 04:54:43 +0000
ROA not before: Mon 02 Jan 2023 04:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12860
IP address blocks: 95.128.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f9:8a:ab:24:41:92:ac:2d:73:c6:40:01:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609c33af20168169031255daee2d83d2662c990
Validity
Not Before: Jan 2 04:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86988c9c51688c652fdc33b87005a6147cd9b8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:ba:d4:04:95:81:2c:0d:9d:18:88:ab:98:
85:fe:3d:2f:e5:81:34:31:48:d7:59:e6:d0:c7:e1:
7d:38:17:87:5c:88:e1:a4:0d:61:b5:f5:ba:e9:92:
85:be:4d:46:72:c6:b5:db:4a:69:14:d6:96:f4:e3:
b0:04:1c:bd:8c:74:b7:7f:ec:5c:78:ac:aa:a2:d5:
3a:0c:db:e2:b6:61:9b:cb:d7:d5:55:f7:93:a3:f1:
da:c6:e5:8e:a7:40:75:6f:28:6b:43:6f:76:7b:b5:
1b:a5:90:05:6b:a5:6f:55:fa:47:7e:ed:49:e0:a2:
1f:52:0d:ad:c5:17:55:ec:99:f4:3a:50:50:b3:5f:
af:6d:03:37:7c:ab:b4:84:04:35:4a:48:18:50:38:
8e:26:12:35:56:d2:d7:2f:0f:2d:65:63:a2:f4:e8:
ab:52:ee:0f:b1:45:e9:e6:dd:a3:5d:f4:95:6b:9f:
29:8f:05:81:96:fb:1a:68:60:33:52:d4:2d:7e:2e:
e8:5f:d7:6a:18:bd:b6:1e:08:35:af:f8:c5:43:7b:
6e:9c:df:78:9d:07:ed:61:6d:be:d9:c8:ff:f6:19:
3c:70:74:7d:a8:40:2c:6c:74:c1:b6:b8:1e:85:60:
38:90:31:70:8d:0e:89:64:b5:a2:37:ea:eb:38:9b:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:8C:9C:51:68:8C:65:2F:DC:33:B8:70:05:A6:14:7C:D9:B8:FA
X509v3 Authority Key Identifier:
keyid:A6:09:C3:3A:F2:01:68:16:90:31:25:5D:AE:E2:D8:3D:26:62:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgnDOvIBaBaQMSVdruLYPSZiyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/hpiMnFFojGUv3DO4cAWmFHzZuPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/d79f1a-5766-4685-b1ef-3d3b7924a3d1/1/pgnDOvIBaBaQMSVdruLYPSZiyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d0:b4:be:b3:b1:95:7f:8c:31:22:75:d9:75:67:2c:08:86:
92:0c:ad:6c:05:9c:06:0b:20:ff:96:f7:14:c2:d3:98:3a:5a:
82:1c:c6:7b:16:22:6a:6c:b8:8b:f9:3d:c0:2e:97:cd:23:0b:
0e:65:4a:9e:a0:1d:3e:dd:bd:93:18:dc:4d:a0:bb:03:ca:e9:
2a:23:99:bb:80:40:e1:b0:11:54:09:5d:e2:ad:76:24:1b:00:
a2:f3:6b:77:00:e4:73:87:f1:fa:2e:fb:55:7e:43:01:f8:73:
87:31:23:59:40:a3:e1:6a:8d:b3:1f:d3:06:4c:fb:a6:04:50:
16:f4:86:fd:12:de:ce:07:0a:35:94:7d:36:ed:6a:6c:b1:e8:
af:83:4a:c3:b7:c8:da:5e:a0:23:19:0b:9c:06:50:96:a9:73:
31:85:8d:24:bc:3b:6c:5e:b6:2a:11:fc:b7:71:dd:92:80:a5:
46:6d:68:10:f3:0a:3e:f2:74:4c:a5:ea:b3:44:cd:83:93:e7:
0c:2d:98:37:ec:4b:d8:cf:c6:0f:89:27:83:89:d0:aa:fa:01:
b0:69:49:e6:ad:70:90:ed:5d:ec:10:7c:2d:70:51:49:54:2b:
98:7f:1a:01:33:35:6b:ee:d1:b7:8e:f2:d4:f0:f1:8d:68:40:
e4:98:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:37 2025 by rpki-client