Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/HMYF6_4se6-zijlekaRHSzmW9Jk.roa
File: HMYF6_4se6-zijlekaRHSzmW9Jk.roa (raw, json)
Hash identifier: eqBnyqMcI8I2Ft7undsWPPs8lpkvdgxjWJ94tuPWoXI=
Subject key identifier: 1C:C6:05:EB:FE:2C:7B:AF:B3:8A:39:5E:91:A4:47:4B:39:96:F4:99
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455ED67092A5E98F23244DDC130C39
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/HMYF6_4se6-zijlekaRHSzmW9Jk.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203499
IP address blocks: 2.59.108.0/22 maxlen: 24
2.59.109.0/24 maxlen: 24
2.59.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:d6:70:92:a5:e9:8f:23:24:4d:dc:13:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cc605ebfe2c7bafb38a395e91a4474b3996f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:86:3e:21:70:fc:02:92:9a:b8:85:a0:69:
3f:cf:cb:dc:1a:d7:87:37:67:3c:67:3f:3e:a6:e6:
a0:d0:c3:12:b4:96:24:4f:f5:ae:9d:fe:94:b1:46:
56:00:87:98:d5:a6:4e:4a:83:77:83:00:14:5e:5b:
32:09:2f:9b:05:d9:41:3f:bf:a4:45:99:ae:59:9d:
13:1c:8e:aa:c7:d1:54:0f:4c:1d:b2:41:7e:88:81:
56:bb:01:fd:61:50:7d:dc:ce:5b:83:a5:1f:b8:f1:
34:48:ff:18:43:15:a3:62:d1:cc:c7:21:69:65:b4:
4a:56:8e:2c:36:06:9e:da:ab:37:df:ee:ca:ba:9f:
e2:49:4d:ff:2c:95:17:1a:5a:92:9c:4c:33:60:99:
49:13:c6:0f:67:04:5d:a1:65:dd:0b:78:4d:65:e6:
5c:aa:41:06:3b:a6:13:9e:94:e7:d6:2a:19:1c:5e:
16:9a:aa:28:a9:ea:dc:32:cc:2a:79:8f:e7:42:0b:
26:16:2b:7f:5b:3c:90:d0:cc:2e:78:40:eb:2f:95:
86:83:6c:ac:7b:2c:d2:1e:2a:79:0a:e1:23:ee:e0:
88:78:6f:bc:39:c6:f8:77:15:9c:7b:bc:95:56:9f:
94:4c:15:94:9f:aa:a9:79:47:30:17:47:c1:c1:41:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C6:05:EB:FE:2C:7B:AF:B3:8A:39:5E:91:A4:47:4B:39:96:F4:99
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/HMYF6_4se6-zijlekaRHSzmW9Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:06:f1:26:9c:c7:ec:b6:ee:c4:5a:6c:8b:c1:4a:6f:28:a4:
67:b5:f0:7b:f6:8c:1d:33:a7:e2:e0:98:50:1c:da:bf:ff:dd:
20:67:b5:a9:bd:1d:70:10:da:95:c8:b4:ef:0f:7b:45:f4:93:
d6:ab:7a:49:58:f3:ad:2b:a5:a1:27:2d:87:53:c1:12:45:3a:
3d:f1:3d:b7:54:9b:e7:36:ad:d0:a3:f1:63:f9:a7:d8:09:d4:
36:67:87:ee:10:e0:a8:9b:4f:7d:12:14:3e:20:4f:92:46:c3:
c1:c9:2f:8f:52:b3:51:30:4b:45:b3:d3:c6:9d:49:89:14:28:
09:02:05:2b:7c:fe:e7:32:43:67:aa:13:8d:66:4d:9a:6a:64:
ab:58:8e:87:31:24:d2:95:38:0e:54:47:c8:ff:b4:e5:19:32:
d8:63:bd:46:44:13:36:04:63:4a:72:a4:e5:bb:1b:f4:15:48:
ed:60:53:58:ed:3a:42:f4:b8:00:70:4a:ce:1f:d3:02:f4:c8:
69:0a:40:0a:2b:d8:d8:6a:71:6b:9e:db:d3:eb:e1:40:d0:57:
5e:bc:75:35:91:d7:7d:92:ba:d2:93:58:21:78:b0:be:0a:62:
c1:3b:bc:95:95:f9:e4:8a:63:70:5a:ae:cc:a3:b5:23:d8:b2:
21:f0:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net