Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HQIxdqpbqK72OJd-LByFb-OVhY.roa
File: 0HQIxdqpbqK72OJd-LByFb-OVhY.roa (raw, json)
Hash identifier: yG+I0j6vEEeBjh0eLCcjSiUYWEsiQ83Y1LE0BRHX0/w=
Subject key identifier: D0:74:08:C5:DA:A9:6E:A2:BB:D8:E2:5D:F8:B0:72:15:BF:8E:56:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 733DD765
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HQIxdqpbqK72OJd-LByFb-OVhY.roa
Signing time: Thu 17 Mar 2022 13:15:25 +0000
ROA not before: Thu 17 Mar 2022 13:15:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933432677 (0x733dd765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 13:15:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d07408c5daa96ea2bbd8e25df8b07215bf8e5616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:b3:fe:54:00:c5:83:37:57:69:67:af:a0:
5f:3d:3c:0c:05:9d:56:24:e4:5f:dc:f1:ad:22:a2:
72:e7:80:57:60:d7:a2:b5:19:f5:e7:2e:11:cd:d0:
e4:c5:7e:f7:cf:4f:15:db:ae:03:01:76:40:17:87:
0e:20:4a:7b:6f:cf:24:53:5e:aa:16:f3:ac:c9:ff:
39:33:fc:a3:11:8a:a7:89:a9:bf:84:7b:80:0e:69:
94:57:03:af:ef:0f:4e:5f:ad:50:5c:05:07:b6:8d:
b4:47:2c:05:0e:a6:d4:e9:48:52:6c:3d:33:f3:a8:
07:a5:7c:0e:cd:a8:0e:5a:ea:14:4c:ac:f6:3c:dd:
34:18:10:65:0d:c1:09:48:d4:77:d0:ba:fe:5f:ea:
f5:12:19:42:d1:1c:e8:36:66:a1:a8:ba:77:71:9d:
f8:9a:9c:ff:62:29:11:84:04:f8:6f:01:81:60:14:
7e:8a:79:78:2c:9b:f3:0b:ce:33:93:43:c4:0f:63:
d9:14:28:f7:d9:5b:c1:eb:5c:7a:93:4b:e1:0a:36:
5f:ac:99:ea:9c:36:75:08:f4:96:da:09:dd:22:b9:
af:06:51:61:ed:0a:88:8f:6c:73:58:55:ad:0e:17:
0c:eb:9a:35:a5:fb:31:28:40:e0:fe:2c:40:ad:51:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:08:C5:DA:A9:6E:A2:BB:D8:E2:5D:F8:B0:72:15:BF:8E:56:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0HQIxdqpbqK72OJd-LByFb-OVhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:da:05:39:7e:d1:a1:f0:8b:a7:e9:25:2e:0a:a6:58:64:18:
d4:1b:fa:aa:25:8f:a2:cb:f3:d7:89:44:dc:ff:69:ff:bf:3b:
08:5f:76:61:3b:55:e5:e5:69:38:85:76:9b:85:2a:a0:aa:44:
6e:83:2b:13:dd:5d:61:44:5a:a3:b3:3c:60:b1:35:47:49:58:
5e:46:47:5a:0a:e1:38:85:3b:20:ce:98:6d:ee:78:a1:31:4a:
3d:22:8e:84:6b:a0:ba:73:10:b0:e9:bb:cb:78:d0:f6:5d:b4:
d4:44:ff:ba:5e:df:d5:0e:1c:d3:8e:c7:e9:01:4b:f7:ca:cf:
68:79:cb:99:92:31:0f:3f:25:5d:7f:bb:b9:87:c5:d6:b1:78:
46:38:af:41:41:aa:9e:94:22:c3:40:ce:94:bd:5b:93:fd:ee:
a1:30:36:67:76:76:99:6f:b8:3b:93:5f:4c:5d:4c:d7:8e:ca:
16:6a:5c:c1:cc:82:a8:c8:48:be:c0:6a:b1:a6:24:75:36:97:
84:ea:74:65:1b:2b:27:49:f0:a9:1d:b3:40:ec:24:1a:35:89:
ae:09:5e:9a:b9:84:b6:fb:24:4d:5f:9d:bd:49:96:75:35:e6:
c8:2d:32:cc:00:9e:25:b7:71:e8:05:79:dc:b7:a0:25:c2:1b:
d5:4d:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:19:57 2025 by rpki-client