Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa
File: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (raw, json)
Hash identifier: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=
Subject key identifier: 1D:CA:9B:C5:CD:05:04:65:E7:CF:33:7A:BD:94:C4:0E:4D:B8:87:6B
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 019423D7F098CD89E1F123016E1A7643D883
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47292
IP address blocks: 194.110.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f0:98:cd:89:e1:f1:23:01:6e:1a:76:43:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dca9bc5cd050465e7cf337abd94c40e4db8876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:b0:df:04:f5:b5:c9:6f:d7:53:f3:be:13:
c7:5c:f9:29:6d:6b:fc:c7:c2:33:f7:a3:c3:bf:3f:
f7:54:7d:22:e8:6b:db:54:67:b0:6c:5a:ff:c8:6f:
4c:f0:41:d8:de:c8:b1:09:51:1c:f8:08:03:f6:ad:
3f:90:f8:2d:d5:4b:8d:d7:c1:00:1b:7a:de:c5:e4:
e1:79:9b:02:f6:99:6c:35:09:7e:44:c4:0c:b9:f4:
76:19:9a:f8:05:cb:b9:29:56:0e:27:e8:36:b4:7e:
d2:2d:20:02:9b:e1:bf:d7:f6:2f:26:ad:7d:fb:15:
b0:59:ea:95:99:24:09:e4:c5:b3:75:e3:0a:82:dc:
a3:ab:2f:43:3e:e5:23:58:08:04:47:0d:b2:a6:ee:
9e:df:30:3a:88:80:4b:ab:90:a7:6c:6c:e9:ab:66:
7b:7c:a0:fb:05:c5:90:2c:b5:55:c4:5c:45:d7:75:
bc:ea:14:02:41:6f:65:2b:06:79:57:58:92:2b:9d:
2f:75:ab:90:90:a4:1e:44:15:2d:7e:30:54:00:8c:
93:17:6e:3f:3b:4d:b8:c3:f0:b5:0c:12:67:81:2b:
c7:b3:e5:b3:7a:44:c2:a3:e2:3a:ad:55:15:32:23:
20:3a:47:b1:97:3c:7f:40:1c:bb:90:f8:50:af:5c:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:9B:C5:CD:05:04:65:E7:CF:33:7A:BD:94:C4:0E:4D:B8:87:6B
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.136.0/24
Signature Algorithm: sha256WithRSAEncryption
14:27:ba:07:94:57:ac:1d:a5:ac:26:11:98:c4:47:b8:77:06:
a4:d8:d2:89:b6:8a:b9:31:44:5a:bd:f1:0a:16:94:38:d6:d3:
b0:cc:24:4e:b0:af:2a:53:bf:9b:c4:00:23:19:b6:47:56:89:
dd:84:67:8d:eb:52:66:db:5b:5b:0f:2e:6a:f2:07:f3:22:d6:
af:b8:b3:9e:a9:f5:78:41:01:88:7c:86:d7:08:7a:3f:43:92:
07:63:39:64:06:84:2a:e1:be:3e:2e:aa:44:ec:b7:1f:96:e1:
ae:4c:c0:0e:e3:9e:22:43:ff:cc:f7:6e:a8:21:4e:b9:95:af:
c6:19:ce:51:66:80:a9:a9:33:fc:ee:ef:1c:6a:9d:36:9f:4a:
f7:46:30:44:04:74:88:09:53:c1:b4:ae:25:45:33:9f:ed:0b:
a7:2d:a0:46:6c:31:3a:50:71:ef:dd:3d:c9:32:ed:7d:42:52:
b7:c5:4e:28:af:b5:f9:83:93:87:ee:2e:f4:eb:92:81:39:8c:
6b:c3:f4:25:da:ca:4b:38:1f:5c:d4:11:43:a5:2a:59:38:20:
bf:9e:5a:87:91:cc:90:96:e3:ea:4b:84:fb:fc:cb:3e:9f:e5:
6f:08:1c:8f:18:e0:b9:85:52:9f:00:99:4d:64:8c:ba:4d:1c:
05:f4:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net