Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HE6baQZWk1vxXegB3jyGQ1h73g.roa
File: 0HE6baQZWk1vxXegB3jyGQ1h73g.roa (raw, json)
Hash identifier: cbJYJmdcPb1aHP0JjqdyhchXocyb7R2Lsjk1l9IHsxc=
Subject key identifier: D0:71:3A:6D:A4:19:5A:4D:6F:C5:77:A0:07:78:F2:19:0D:61:EF:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8056DD4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HE6baQZWk1vxXegB3jyGQ1h73g.roa
Signing time: Mon 02 May 2022 05:10:37 +0000
ROA not before: Mon 02 May 2022 05:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153176398 (0x8056dd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 05:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0713a6da4195a4d6fc577a00778f2190d61ef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:eb:d8:90:13:73:19:1d:1d:19:05:87:b3:
9f:b0:99:01:0e:4e:26:05:08:27:3d:70:2d:f6:1e:
12:3f:95:f5:4e:2b:4b:6f:7d:98:93:8f:82:62:c0:
bd:c9:60:60:66:6a:90:68:46:23:f4:38:66:c2:cb:
f7:91:8e:65:70:fa:bc:ba:28:b8:2f:dd:67:15:b3:
7c:3a:f2:8a:4c:36:db:b3:0b:45:a0:1d:a8:58:c3:
17:82:79:8f:a7:77:ff:96:6d:42:af:04:2f:53:2d:
25:2d:7b:ae:79:96:7e:0f:3f:e1:ea:d9:67:48:d7:
4b:45:02:34:88:d6:88:5e:9c:ce:6b:d3:8e:bb:57:
a0:f7:bf:dc:00:4f:f0:b1:5c:18:47:92:6b:0b:73:
71:6f:8e:73:f6:c9:79:56:44:b1:46:c3:76:53:8a:
32:57:5a:ea:70:bf:a8:3f:ec:f8:ed:45:1e:ea:83:
69:90:cd:79:b1:10:54:a5:27:98:c3:25:16:78:d4:
55:9c:1a:c9:e8:3a:05:dd:58:09:b3:b6:6c:55:99:
94:02:d5:7c:ed:e9:ad:42:75:65:22:67:24:b9:81:
ff:89:d5:37:0f:ba:82:61:54:60:a9:3e:68:37:4b:
0a:19:cb:bf:ef:64:05:a2:cd:fe:5f:fd:59:80:88:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:3A:6D:A4:19:5A:4D:6F:C5:77:A0:07:78:F2:19:0D:61:EF:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HE6baQZWk1vxXegB3jyGQ1h73g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:51:51:e9:37:9c:e1:db:0f:b5:1a:03:7a:1c:ca:23:b2:15:
f2:af:3f:37:99:40:16:0f:36:aa:36:40:59:46:74:70:3e:d3:
50:79:3f:bf:a6:53:84:6b:6d:e2:80:8d:3a:ad:6e:6d:87:1f:
13:61:8c:80:1f:30:b2:f3:13:ea:89:5d:e9:8c:48:4d:41:8f:
d6:c1:de:3c:4b:2a:11:31:1d:ab:8d:b2:a6:d0:8b:02:84:4a:
39:fe:b2:56:23:c0:0e:6e:ba:a2:7b:03:d1:61:14:0d:f2:d2:
18:e4:6f:a9:72:13:9f:5d:8d:83:c0:7d:13:af:27:26:d6:50:
96:5b:53:21:44:c4:ee:53:3d:0e:15:1b:9a:e8:5f:b4:ad:22:
3d:4f:a8:44:6d:f4:39:b2:a6:fc:a0:7c:39:27:e8:a8:e2:db:
f0:fc:b5:98:b4:e2:f2:be:82:38:42:74:b6:10:20:26:5d:7a:
ee:d1:05:38:c0:30:03:46:c3:6f:3e:57:0e:88:8e:13:6a:47:
24:0b:06:7f:70:da:27:82:87:48:9e:2a:93:65:89:b2:d3:7c:
da:ad:43:76:85:2d:2f:f6:aa:a8:c8:20:06:5f:06:c0:99:5a:
14:f9:52:4e:09:74:7b:b8:74:6f:68:5a:aa:78:b3:8c:a7:26:
c0:73:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:35 2025 by rpki-client