Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/hng9TudKvqonDyI54LANM5oMdTI.roa
File: hng9TudKvqonDyI54LANM5oMdTI.roa (raw, json)
Hash identifier: V7Scce9Qo8eg4QDDr6nduzt44ANXa9n17UMh+pQjjPk=
Subject key identifier: 86:78:3D:4E:E7:4A:BE:AA:27:0F:22:39:E0:B0:0D:33:9A:0C:75:32
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 012E32A1
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/hng9TudKvqonDyI54LANM5oMdTI.roa
Signing time: Wed 09 Feb 2022 12:09:35 +0000
ROA not before: Wed 09 Feb 2022 12:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19804833 (0x12e32a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Feb 9 12:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86783d4ee74abeaa270f2239e0b00d339a0c7532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:99:65:4d:5a:2d:53:ef:55:f5:9a:fe:52:
12:2c:48:67:44:98:5a:03:34:a0:6c:48:46:6a:e3:
eb:d0:fe:cb:96:f2:ea:82:5b:23:9c:9b:23:e6:52:
8c:2a:8f:16:6f:68:eb:cd:a0:9a:6a:3a:29:dd:9a:
81:95:78:f6:2d:2f:2d:b6:00:2c:f9:70:d8:d2:16:
99:d6:9a:55:37:be:22:15:5f:41:bb:f4:bf:07:ff:
71:76:96:cb:45:31:54:48:f1:a1:7b:38:61:14:ac:
cb:f2:eb:08:94:27:5b:0c:63:9b:1c:d1:e7:15:a5:
a1:d4:10:c8:df:6d:10:d9:65:01:d4:dc:ae:04:cd:
be:a7:0e:a6:d9:76:8b:6a:26:9a:22:fe:2f:71:da:
31:73:50:e9:68:71:20:bc:f1:fc:40:88:1f:9a:52:
14:ad:7a:a9:36:cd:c2:3d:81:26:09:32:46:13:a5:
f4:8a:2f:01:c8:fd:30:94:e2:ca:18:26:c9:0b:99:
a8:a5:ef:3e:71:b5:91:14:14:f9:e4:b8:9a:c1:1e:
09:9b:3c:d6:df:ce:d5:f5:82:15:20:9a:95:37:bd:
80:63:b6:4e:2f:e7:25:5d:d4:a1:7b:4d:d1:32:08:
e0:51:fb:69:12:76:ae:7e:11:b7:0d:fd:cd:41:60:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:3D:4E:E7:4A:BE:AA:27:0F:22:39:E0:B0:0D:33:9A:0C:75:32
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/hng9TudKvqonDyI54LANM5oMdTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
42:92:bf:48:7a:61:f2:1e:8b:b0:17:09:80:2a:55:08:ac:cc:
b1:69:0e:b9:e3:d5:85:61:b4:0d:47:01:9c:20:86:8e:1d:89:
9e:69:44:89:41:bd:92:f0:fa:f5:31:81:1d:58:c0:ce:dd:8d:
57:0b:91:69:20:17:12:1e:31:52:ba:c2:89:37:a1:ef:82:7e:
03:09:ec:18:5e:1f:07:1f:bf:e7:63:ea:e7:33:bb:58:f9:d2:
da:d0:ca:93:64:04:fd:6a:9d:85:24:2a:81:2e:c4:9c:bd:42:
4c:61:63:a8:74:24:ac:aa:72:f5:60:c7:7c:46:94:12:93:00:
3a:cb:7d:71:a6:6e:b1:db:7c:14:bc:27:95:76:74:66:c0:b7:
f5:24:21:5c:53:8f:6b:c6:d6:60:d6:33:13:7f:d7:39:b6:68:
66:b3:76:7d:d5:02:31:39:f0:ef:85:fe:8d:7f:ec:b0:19:5a:
86:4a:97:0d:07:64:47:86:23:c1:f2:6f:2e:a3:1c:b2:6e:5f:
27:10:bc:dc:bf:19:32:86:ca:c5:c0:3c:4c:25:b7:f2:90:df:
de:b5:e7:85:e8:42:eb:6a:8f:57:07:a8:3d:75:c4:08:87:f3:
2c:c5:74:c5:3c:16:65:6b:b7:46:0c:fa:27:00:88:39:f3:80:
df:8d:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:23 2025 by rpki-client