Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hLMPjFoHwi3clcx2_gPfuwdijM.roa
File: 0hLMPjFoHwi3clcx2_gPfuwdijM.roa (raw, json)
Hash identifier: zIL/m7XGDGqx+Tc6rCN3HKj/tzmFAgj2lGuk6KG7KmI=
Subject key identifier: D2:12:CC:3E:31:68:1F:08:B7:72:57:31:DB:F8:0F:7E:EC:1D:8A:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A05228C36CB90D4C264366372CA803CA6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hLMPjFoHwi3clcx2_gPfuwdijM.roa
Signing time: Thu 17 Aug 2023 20:14:24 +0000
ROA not before: Thu 17 Aug 2023 20:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:22:8c:36:cb:90:d4:c2:64:36:63:72:ca:80:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 20:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d212cc3e31681f08b7725731dbf80f7eec1d8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:36:ad:13:6c:70:75:6f:d8:78:65:cd:d6:4c:
1e:5c:b3:80:e4:82:77:93:f4:f9:9c:8e:40:9f:52:
b8:cf:f4:18:53:67:51:52:66:35:03:34:30:06:2e:
fe:08:8d:1a:eb:dd:36:9f:0f:ea:fb:d3:ad:ba:63:
a9:e4:7e:ff:53:d3:1c:06:8e:de:3f:81:79:05:81:
2c:e7:5d:f6:a9:c9:cf:b6:d9:42:8f:10:46:73:c8:
c8:39:35:41:bd:3f:35:bd:79:9e:98:c9:4c:41:23:
f2:60:20:6e:07:fb:36:bb:78:16:76:68:8c:65:69:
00:c8:05:ed:f8:2d:5f:60:77:59:6e:76:e8:07:7e:
5b:ba:81:db:05:05:0c:be:56:60:af:0b:cc:2c:a8:
f1:09:2a:ca:51:54:60:fc:62:1f:df:a2:07:de:29:
fb:53:01:aa:e4:83:01:e8:ba:a9:4f:cd:95:76:6b:
97:85:58:0e:66:aa:aa:9a:94:f8:05:23:54:4f:0f:
d3:82:94:ce:ea:b0:97:8b:39:e1:f8:44:7c:11:fd:
e1:25:7b:1a:22:88:a2:8a:bc:8a:2e:a4:da:f2:88:
b6:5b:5a:e8:25:5a:69:ab:79:7c:d8:de:eb:23:a5:
96:7e:38:e3:48:ab:84:3e:79:9b:b3:ea:bc:1e:d7:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:CC:3E:31:68:1F:08:B7:72:57:31:DB:F8:0F:7E:EC:1D:8A:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hLMPjFoHwi3clcx2_gPfuwdijM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:61:d3:69:7e:99:3f:e2:55:39:96:5c:36:61:56:60:11:8a:
c0:1a:1c:e9:6d:54:30:e7:3c:7c:22:1e:8c:5c:9c:80:fd:95:
02:c7:3f:53:90:66:7f:8f:24:cb:6b:ea:2a:2a:7d:a4:9c:36:
97:82:a0:87:ae:ac:34:a1:a8:25:f7:5c:db:3f:13:a2:6f:6a:
62:00:3b:55:15:db:a2:66:cb:be:a0:9e:d7:84:57:5b:31:7a:
d3:25:f8:ec:68:bc:d1:f2:ce:7a:7e:fb:14:63:3a:fe:02:06:
47:50:a8:64:20:ef:dd:4a:06:44:a4:fb:7a:69:31:d1:ca:9e:
83:f3:53:c2:d7:98:7f:88:da:be:3f:6a:2f:6b:c7:01:c9:70:
04:d3:6a:fa:08:85:5d:34:81:d9:76:34:b7:66:31:79:09:09:
4a:48:c4:34:0e:4c:8d:06:1c:e2:fa:b8:e2:c3:2d:fb:71:5a:
21:60:79:6a:4e:22:53:18:e0:e9:37:f6:76:53:83:54:54:46:
9d:08:86:5f:a8:48:3e:df:6a:0f:9b:64:4a:24:06:47:72:4c:
0e:2e:80:01:5a:29:13:ca:54:c9:c5:3b:1f:4e:3d:65:b2:f9:
4f:e8:6b:ba:f9:6b:ba:da:ed:25:45:14:b8:c2:25:63:27:33:
5f:7c:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:46 2025 by rpki-client