Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/HcTZ55L4MSrkLfHwNTyTNa60af4.roa
File: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (raw, json)
Hash identifier: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=
Subject key identifier: 1D:C4:D9:E7:92:F8:31:2A:E4:2D:F1:F0:35:3C:93:35:AE:B4:69:FE
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0194221F71768B0C98574CAE0C84E2F56011
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/HcTZ55L4MSrkLfHwNTyTNa60af4.roa
Signing time: Wed 01 Jan 2025 13:47:53 +0000
ROA not before: Wed 01 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216445
IP address blocks: 95.130.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:71:76:8b:0c:98:57:4c:ae:0c:84:e2:f5:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dc4d9e792f8312ae42df1f0353c9335aeb469fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:65:82:53:5f:e6:17:c9:9d:60:09:8f:9e:a5:
22:5d:c6:8b:a3:ec:5f:b6:ba:5a:c7:62:09:12:db:
a4:b0:a2:a2:0d:7f:17:8a:de:bb:18:13:f4:d7:64:
e5:1f:64:97:7f:4b:b2:34:3e:7f:4b:4d:43:ba:3a:
68:ea:b2:01:02:03:ff:e9:39:a0:a4:a3:f2:61:15:
e0:74:93:a9:6c:21:dc:f6:3e:dc:aa:01:30:e8:ec:
df:f7:31:67:df:a8:79:5d:88:fe:cf:b4:19:f2:20:
8b:a3:9a:df:67:0b:f1:ff:94:2b:d5:6e:63:e9:06:
b7:4b:8a:c1:5e:a9:dd:2f:b5:77:a2:02:78:35:13:
0b:c9:48:83:22:92:ed:97:35:2c:e4:12:98:65:5d:
21:ba:cb:1e:fb:53:ff:df:d2:40:96:7c:58:d9:de:
4a:75:87:ba:8a:e6:68:90:1a:0e:41:64:00:51:00:
43:17:d2:f6:c2:dc:43:bd:32:c4:82:b9:4e:12:5d:
82:52:b3:5f:4d:2b:6f:61:cd:49:ee:36:ca:55:f4:
8e:85:b7:bc:45:c2:97:19:c5:be:0a:47:3f:a1:a3:
13:6b:93:14:d8:9e:42:03:01:c8:34:85:ba:80:b7:
d4:48:ab:7c:8f:87:ab:a2:66:bd:99:00:79:7b:e7:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:D9:E7:92:F8:31:2A:E4:2D:F1:F0:35:3C:93:35:AE:B4:69:FE
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/HcTZ55L4MSrkLfHwNTyTNa60af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.172.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f9:50:ff:47:f7:66:38:41:0f:a1:0a:8d:cb:fc:c0:0c:96:
4a:d0:af:8b:58:74:c0:72:c2:0b:4b:ac:ad:33:99:3b:b3:82:
23:c5:ab:6b:d7:28:5f:b1:4e:85:ee:0e:4e:37:58:ab:93:f4:
51:8f:20:6b:31:9f:2a:43:fd:4a:8f:8b:0d:34:3d:4b:80:ae:
f8:39:6b:f2:30:be:58:6e:a8:a0:53:61:37:a0:f6:9a:d3:d9:
74:e4:f3:76:81:23:25:ac:f3:59:42:e9:c2:01:4a:0f:12:54:
13:35:10:13:a2:96:04:2a:ee:2a:4e:b7:db:a2:ee:a0:97:72:
42:91:a5:c2:f6:1e:6b:cc:04:b0:8c:38:8b:ce:f5:4d:24:a8:
02:18:e5:46:ca:a0:8f:eb:21:4c:48:c9:7a:f3:56:4a:78:00:
c2:e0:68:2b:ba:24:40:fc:f8:3f:02:fd:40:81:2c:20:bd:21:
5d:f9:19:a7:e0:34:82:20:e1:94:ad:0d:38:0a:4f:f3:a6:ac:
82:30:c9:37:6a:14:d6:70:91:3d:b5:e9:30:a4:cc:cb:d0:0d:
c2:cb:a6:51:1c:62:5b:89:af:e6:73:17:89:15:81:76:94:0b:
8a:e6:08:be:03:54:66:1e:43:fa:52:34:3a:20:04:3f:50:b7:
2c:82:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net