Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/HKIpu_8d0Cqq0D5e80N4uVExJJg.roa
File: HKIpu_8d0Cqq0D5e80N4uVExJJg.roa (raw, json)
Hash identifier: jh8LsX0f6+DC03aD+w8/E7j94SaTCTl2VIzG3nTCtoY=
Subject key identifier: 1C:A2:29:BB:FF:1D:D0:2A:AA:D0:3E:5E:F3:43:78:B9:51:31:24:98
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019425FC35D91F99559A3974E62F5565CCB5
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/HKIpu_8d0Cqq0D5e80N4uVExJJg.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209505
IP address blocks: 78.41.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:35:d9:1f:99:55:9a:39:74:e6:2f:55:65:cc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ca229bbff1dd02aaad03e5ef34378b951312498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:df:c8:99:94:28:ff:71:96:21:1f:fa:53:
66:22:40:5f:0a:ac:59:c6:49:0b:fe:75:01:ac:b3:
87:ef:d8:36:dc:ae:f4:6d:79:dc:2e:c5:d3:29:46:
fa:d0:77:fc:92:2d:fd:d1:b5:bc:a6:35:84:17:ec:
c9:8a:cf:7e:d5:48:1c:29:c3:9a:e1:a1:5c:10:a8:
0c:2f:82:af:47:67:98:b0:72:34:a2:eb:df:e1:91:
94:86:1e:24:b6:98:c0:a4:17:89:48:f5:12:4d:b6:
f0:63:ab:7f:f3:b1:ec:fb:ab:b1:30:9b:d1:dd:63:
d8:e3:fd:32:44:bb:dc:df:44:80:17:3b:b1:57:21:
1e:2a:b6:f3:b6:9b:a1:0b:99:11:8b:bf:a7:07:32:
e5:b6:8e:54:4c:fc:bb:bc:ca:97:3f:7c:3d:39:78:
4e:85:00:62:4a:aa:9b:31:0d:42:2b:4c:80:d8:d3:
20:c3:26:e7:50:47:b6:59:fc:58:b8:5b:87:21:b6:
a9:8f:eb:56:f5:de:be:0a:74:a3:91:ec:41:6c:e4:
72:d1:1e:01:59:14:d0:0f:bd:d7:ae:04:3a:61:c4:
fa:7c:1e:a1:89:c3:23:34:e7:83:f7:be:6a:71:05:
ae:cd:04:32:c4:bd:45:0e:01:ee:8d:76:a8:d8:4d:
cb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:29:BB:FF:1D:D0:2A:AA:D0:3E:5E:F3:43:78:B9:51:31:24:98
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/HKIpu_8d0Cqq0D5e80N4uVExJJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:89:f3:fd:1d:7b:79:62:4b:fe:fd:76:d2:55:a0:5a:3d:d4:
f5:b0:89:62:d4:8b:36:18:e0:ae:12:ab:34:9e:c3:a8:c0:f7:
ae:0f:02:4c:02:12:a8:3f:4c:5d:6f:92:0e:6b:7a:50:2b:38:
68:60:05:55:6c:44:6f:19:82:6d:5e:a9:43:04:d6:e7:c1:5c:
66:bc:1f:84:ee:8c:5a:ed:fe:80:0a:29:18:71:c0:e5:9f:00:
e8:2f:e0:7b:ce:7a:09:5b:c4:8b:13:1d:aa:d5:a4:b0:d3:e9:
d9:b2:7f:25:3f:68:9d:4c:87:94:8a:52:24:b4:d0:76:16:17:
b9:ea:df:bf:7a:85:15:e6:3c:7a:63:e8:46:03:92:3c:28:87:
e7:94:d7:8a:c9:63:39:3a:0d:46:f0:e7:f4:75:37:8b:5d:b2:
53:3e:cf:89:f4:dc:17:42:c1:2e:c4:9c:6f:2a:2b:3a:4f:40:
99:4a:98:3f:7d:05:f7:b3:b0:26:b1:01:26:f3:65:bf:2a:ce:
2e:33:54:26:df:d8:3b:d3:77:21:c6:7e:e9:75:d0:7b:7c:90:
9b:53:f5:01:cb:06:f7:b7:cb:e5:57:48:1e:66:3d:7a:f0:d8:
5b:eb:f6:a4:b9:a3:23:95:9f:5b:c3:1a:5f:64:ed:62:38:e3:
3e:70:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 15:56:03 2025 by rpki-client on console.sobornost.net