Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0fHUWaIgT66hivHmRkO2kjdzZ0Y.roa
File: 0fHUWaIgT66hivHmRkO2kjdzZ0Y.roa (raw, json)
Hash identifier: HyAsDCKFIsi7UJH3xRXESgmaa4fFI1IRff8n1bGSJl4=
Subject key identifier: D1:F1:D4:59:A2:20:4F:AE:A1:8A:F1:E6:46:43:B6:92:37:73:67:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A4C45C5D008A6CAC8F81C8D0D084A11C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0fHUWaIgT66hivHmRkO2kjdzZ0Y.roa
Signing time: Sat 10 Jun 2023 10:05:11 +0000
ROA not before: Sat 10 Jun 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:a4c3:81a8/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:c4:5c:5d:00:8a:6c:ac:8f:81:c8:d0:d0:84:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1f1d459a2204faea18af1e64643b69237736746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:c3:31:9e:a1:2d:8b:80:65:cb:3d:99:82:
1a:58:2e:3b:fd:62:9f:a9:4e:89:46:f3:46:02:63:
47:15:98:06:cc:c3:60:f6:3a:01:b2:35:5e:2e:c6:
4e:67:2b:f0:71:7c:31:a3:51:d9:2c:e3:58:e9:2e:
66:05:d6:ed:50:64:3a:b3:82:c6:ae:b5:d2:3d:14:
62:0d:78:5b:de:7d:28:87:8a:f5:f1:76:1f:4d:23:
08:46:ef:97:44:6f:a0:fe:04:71:54:b2:40:46:21:
40:49:b0:16:a9:2e:54:22:0b:39:47:1c:fe:7e:08:
d0:a4:2f:45:62:af:68:83:a2:97:a1:8a:39:b9:38:
18:53:56:80:da:ae:9d:59:1a:ac:73:e5:43:84:04:
99:04:cc:44:f8:8b:78:17:33:43:8b:2b:83:46:e7:
77:9b:41:f2:09:04:c6:8d:54:7d:1c:a3:13:f7:e5:
5b:16:7d:6d:9d:c7:d8:72:f1:2e:13:02:ed:e6:4c:
88:b3:88:df:7d:74:4f:86:8a:03:e3:18:c9:66:37:
75:07:b7:8d:dd:54:71:98:f1:11:6f:66:8d:fe:8d:
25:21:e3:2f:a3:23:67:5f:01:12:4d:f7:bf:ce:9e:
10:91:0f:eb:89:23:40:c1:49:96:6b:79:0c:0f:b1:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:D4:59:A2:20:4F:AE:A1:8A:F1:E6:46:43:B6:92:37:73:67:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0fHUWaIgT66hivHmRkO2kjdzZ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:d3:0f:8d:53:95:ed:35:b5:db:8b:9d:fa:8c:7e:fa:e8:1e:
1f:9f:2c:a3:40:5a:7c:26:57:52:6b:c3:9e:09:ff:d9:bb:e7:
81:62:2d:71:91:ec:ac:3c:f7:f0:ce:e2:41:b7:77:d5:70:2c:
bc:ff:0f:4e:d5:e9:e3:7a:e2:e8:97:91:77:3d:ed:80:cc:90:
a9:1c:36:69:47:24:6a:83:57:cc:92:dc:3d:fa:38:81:1f:eb:
94:fa:3f:a7:8e:8e:3b:58:94:cd:2b:5c:5f:64:02:91:6f:a5:
0b:b4:fd:96:e1:92:5f:ab:8c:15:c9:16:fc:e8:2e:bc:36:33:
24:f6:d7:d0:57:3a:51:a8:f8:ca:60:5c:65:69:7d:67:de:b3:
d2:8f:2a:14:cb:cb:c6:44:8b:db:e3:4f:63:ce:63:39:d8:38:
91:d5:1e:ab:3d:3d:8f:7b:bb:64:c7:1e:31:41:0a:03:0a:e9:
0e:8b:78:04:a1:72:7d:36:af:fc:f2:69:2e:9c:8f:f7:c3:33:
a0:ef:ff:08:13:c8:c5:b8:66:89:e2:74:3a:6f:ea:d2:8e:fe:
05:9c:f8:6b:49:78:70:d9:2e:ce:73:07:40:3e:c7:3f:a7:0a:
e5:54:16:3c:3c:4c:83:6a:4e:96:35:a0:ce:58:b1:4e:d5:cc:
3f:c4:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:07:56 2025 by rpki-client