Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Hhn2uqgcdBaFGhN1A5eGIE4BqI.roa
File: 2Hhn2uqgcdBaFGhN1A5eGIE4BqI.roa (raw, json)
Hash identifier: ow+D79Nd01D+Hj0qU+0KBQyuw7sf8eeGE0gMjHVmzO8=
Subject key identifier: D8:78:67:DA:EA:A0:71:D0:5A:14:68:4D:D4:0E:5E:18:81:38:06:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 924149EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Hhn2uqgcdBaFGhN1A5eGIE4BqI.roa
Signing time: Mon 04 Jul 2022 06:12:25 +0000
ROA not before: Mon 04 Jul 2022 06:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453752300 (0x924149ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 06:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d87867daeaa071d05a14684dd40e5e18813806a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:cf:5a:3c:d1:84:14:55:ab:98:e1:d3:9d:
eb:ff:8b:c8:0a:09:85:65:16:ce:83:ba:d6:80:f6:
81:84:0e:72:9f:c9:32:71:7b:48:78:ab:b1:c5:54:
bf:cf:17:f4:e6:d5:78:fa:00:c2:a7:2e:0b:44:e0:
b2:c7:d2:9a:6b:9d:f5:9d:35:4e:fb:c1:61:8c:d8:
69:18:df:20:1b:6e:f3:9e:39:b1:b4:32:67:34:cb:
d5:18:18:ca:06:38:16:db:ae:fe:99:11:e5:2f:8a:
bb:18:8b:30:d1:bc:f1:b6:5b:fc:e0:22:28:9c:9f:
c0:89:38:1a:64:c5:94:51:50:1a:ad:34:61:97:f6:
3b:25:fe:04:43:38:93:3c:4e:86:f6:ba:07:6f:81:
e4:ba:0b:61:89:af:9f:99:a8:ee:f1:2d:88:1d:05:
e8:e6:5e:c8:12:90:59:aa:5e:18:3c:d7:e1:3c:8d:
c3:e2:6d:8b:c1:a1:cb:b6:25:15:9b:39:80:c3:f5:
cd:ec:34:a1:38:6c:19:62:1c:6e:81:ac:d7:74:2f:
9f:0a:8c:96:ae:6f:a7:a9:ca:7e:d6:dd:e2:76:d9:
fa:94:6c:69:73:3b:f9:75:65:f2:4c:23:88:e0:85:
e5:a8:96:0c:1e:87:41:ee:c5:c5:83:0f:f6:a9:00:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:67:DA:EA:A0:71:D0:5A:14:68:4D:D4:0E:5E:18:81:38:06:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Hhn2uqgcdBaFGhN1A5eGIE4BqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:b0:90:00:e3:83:d8:cd:83:92:97:3e:ef:66:2e:97:a1:97:
40:d1:b8:71:60:7c:f5:e1:13:6c:f8:7e:c6:00:2d:95:fc:cd:
16:b0:60:8e:76:f2:99:9a:b3:bc:bf:bf:e4:0d:9e:a8:67:31:
03:ac:15:f9:4b:31:c2:64:5c:eb:2b:1f:d2:f1:a7:60:23:b1:
93:bd:90:7f:a2:a1:52:56:e0:23:4c:f6:fb:ea:ae:38:a6:28:
20:14:9b:73:29:4a:fb:81:92:de:0e:ee:b8:b8:28:c5:11:00:
d8:ee:76:23:fc:54:1e:4f:41:d1:d6:4d:2d:71:6e:53:27:10:
27:b8:7d:c3:f3:e2:55:77:b4:56:03:62:c0:71:27:8f:54:ee:
b3:e9:63:f8:f8:8f:09:fc:75:6c:a9:87:39:74:c5:73:57:20:
f1:e3:82:15:36:fc:c1:10:fd:59:28:d4:f4:52:ea:09:d9:c7:
2b:b0:ce:12:92:97:ba:97:74:55:85:5a:52:d7:a0:c5:10:b5:
e4:66:f5:d6:f1:4b:b2:9c:2b:d6:60:68:a2:1b:07:c9:b9:1b:
3d:56:65:71:84:f0:3c:05:55:e1:66:50:03:46:20:81:9a:54:
7c:6f:43:4a:c7:5f:8e:e7:f0:0c:85:a8:8c:3d:48:38:64:f9:
df:5a:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:34:20 2025 by rpki-client