Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hn5_PzzfTec18eIUGShu0x__N3w.roa
File: hn5_PzzfTec18eIUGShu0x__N3w.roa (raw, json)
Hash identifier: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=
Subject key identifier: 86:7E:7F:3F:3C:DF:4D:E7:35:F1:E2:14:19:28:6E:D3:1F:FF:37:7C
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01948F15ED7E63D76AD450F467A308C95A66
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hn5_PzzfTec18eIUGShu0x__N3w.roa
Signing time: Wed 22 Jan 2025 17:36:06 +0000
ROA not before: Wed 22 Jan 2025 17:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202611
IP address blocks: 91.107.80.0/22 maxlen: 24
188.72.103.0/24 maxlen: 24
188.72.104.0/24 maxlen: 24
188.72.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:15:ed:7e:63:d7:6a:d4:50:f4:67:a3:08:c9:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jan 22 17:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=867e7f3f3cdf4de735f1e21419286ed31fff377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:4c:05:98:e7:77:94:29:cb:f6:20:e2:46:
01:5c:77:7d:58:fa:90:72:85:4c:aa:45:4c:62:a7:
93:f9:96:e0:5c:e3:c2:b8:e2:91:5a:1a:eb:f1:a2:
d0:18:00:ab:f7:62:c6:56:18:49:ac:5a:90:1a:02:
51:de:a3:5f:f4:c1:cb:86:ac:f6:9d:98:2c:ee:fb:
54:38:71:83:3a:e4:6e:25:08:3d:40:77:6c:bf:61:
df:64:90:fd:fd:72:c7:87:50:3a:d5:ce:a1:96:fc:
3e:4c:ae:ee:68:71:18:a4:bb:b1:d4:70:3b:38:b2:
64:df:23:92:b0:ce:38:78:55:6a:25:98:0d:2e:40:
8d:86:70:92:32:57:9a:a4:66:94:43:89:c2:0b:bf:
41:ea:5c:6e:2e:ee:95:2c:1c:78:99:da:ab:a7:99:
41:66:76:fd:43:35:db:cb:62:99:e0:49:c3:61:17:
28:a5:15:50:41:42:63:c1:44:0d:b3:4c:41:f2:ba:
61:d9:b3:17:e4:04:a8:af:d9:60:da:09:31:e1:6d:
42:73:e7:0c:83:1d:fd:4a:c2:1e:65:88:1d:54:8e:
44:08:8f:e6:42:a9:ca:7a:1a:28:f5:78:6b:c6:1e:
97:fc:00:42:bb:4a:88:35:92:0f:cc:cc:41:0a:01:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:7F:3F:3C:DF:4D:E7:35:F1:E2:14:19:28:6E:D3:1F:FF:37:7C
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/hn5_PzzfTec18eIUGShu0x__N3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.80.0/22
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
54:5f:67:41:7c:30:13:87:68:ff:79:70:15:20:ba:da:a9:96:
71:25:16:0e:8e:de:fc:b8:27:a9:fe:a4:e9:8f:e1:9f:2c:87:
31:89:2f:73:41:ff:71:29:a2:2f:9e:43:80:23:2f:2d:6f:bf:
76:7b:f2:d3:6c:6d:97:36:8e:cd:f9:45:8d:dd:7b:f5:67:b2:
06:a0:2b:56:5a:01:be:3a:9a:e4:6a:3d:26:67:d1:8c:e1:0a:
f2:31:70:82:fb:0f:e8:d9:48:af:49:59:30:01:d9:da:bc:7b:
0b:87:7b:6b:ac:93:cd:8a:9e:db:8a:9f:49:7b:64:b8:c4:6a:
10:88:66:f8:f1:c2:dd:02:15:c9:00:37:b3:49:70:21:07:9e:
c4:0b:02:1a:a0:0b:32:0b:4d:67:be:1f:8c:6f:83:81:aa:be:
19:6b:c3:66:06:db:d5:25:65:b0:15:62:2d:10:9c:d9:68:e7:
42:1a:28:51:ea:41:19:5c:00:9b:f2:05:06:93:78:23:b8:4a:
f7:7d:75:c0:bc:d9:dc:6d:72:e6:b5:5b:61:4b:7f:35:13:33:
8f:8b:e9:73:15:05:5d:3e:33:e9:12:36:46:75:be:c9:5a:2a:
59:32:74:78:6a:79:58:92:f5:73:b4:80:57:2d:72:e5:39:10:
13:af:65:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net