Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HwG_SQxzdiJ-vOtt0GmEjg14hg.roa
File: 4HwG_SQxzdiJ-vOtt0GmEjg14hg.roa (raw, json)
Hash identifier: v46JUcXTdSyt+mq7DR6BP0xf2D5DlZNPWWW4cfO8Nec=
Subject key identifier: E0:7C:06:FD:24:31:CD:D8:89:FA:F3:AD:B7:41:A6:12:38:35:E2:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89BD0821
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HwG_SQxzdiJ-vOtt0GmEjg14hg.roa
Signing time: Sat 04 Jun 2022 02:09:20 +0000
ROA not before: Sat 04 Jun 2022 02:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310866977 (0x89bd0821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 02:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07c06fd2431cdd889faf3adb741a6123835e218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:a6:1f:59:c0:88:4c:32:1b:c3:ca:d5:1f:
7f:d3:2e:18:f7:9c:26:80:93:d0:d8:52:84:e2:71:
95:92:f3:3d:b8:99:4f:14:11:24:f6:25:a2:36:94:
da:a9:fa:74:40:5d:15:bb:54:18:a5:d8:11:e8:2d:
f6:14:3b:22:34:67:f4:a9:b1:1b:cf:2e:40:07:f3:
ab:2b:ab:71:87:32:ac:eb:f5:de:a8:31:8e:7d:09:
04:a3:6c:57:b5:43:fa:69:b7:63:f2:6d:dc:bc:57:
17:21:e8:bd:a1:49:fa:98:e4:1d:c2:ac:6b:8e:9e:
26:9b:28:6f:05:c7:bf:b1:34:21:b3:d2:10:ae:e5:
a9:11:a5:b4:23:fb:e9:dc:73:a5:78:09:cf:0f:30:
91:47:e6:61:07:c7:b6:3d:21:7e:5c:bf:c3:99:bb:
88:dc:07:08:29:b4:6e:22:e3:1d:26:01:c2:a9:a7:
82:17:e4:69:7b:02:6d:75:01:f3:82:c1:d1:7e:42:
75:b9:62:ba:5c:55:ef:6d:c2:5b:27:5e:70:e5:5e:
6c:97:e3:98:a2:c9:b7:f1:30:85:6c:07:11:91:b1:
a5:01:93:3a:2a:27:a0:30:4d:44:e1:27:3d:a0:9b:
5b:21:f3:1a:cd:db:f5:71:aa:8c:73:ae:97:00:94:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:06:FD:24:31:CD:D8:89:FA:F3:AD:B7:41:A6:12:38:35:E2:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HwG_SQxzdiJ-vOtt0GmEjg14hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:d9:1a:df:a6:7d:23:b4:a1:0a:c9:a4:6e:a8:35:76:58:f3:
d2:a6:5e:8d:dc:a3:5e:c9:c6:6b:55:81:36:87:e0:35:81:5b:
f0:93:e5:1f:70:31:79:3d:be:65:6a:2f:90:9c:e5:93:62:c5:
66:ad:8f:37:3d:ce:4b:b2:37:44:9d:f8:c1:30:9b:0c:c1:48:
aa:97:4d:7c:5a:28:53:87:90:03:b2:42:d4:b4:0f:49:f9:78:
f8:b8:9c:31:49:c0:05:d2:04:cf:5d:91:a7:86:83:5d:8f:d1:
95:2e:02:fd:6c:5e:6c:a5:47:0b:16:93:f9:78:c3:3e:04:89:
7f:fa:2c:37:5d:60:d2:cd:a3:27:f2:c2:d9:f4:c0:a1:f1:ab:
6d:6a:9a:92:e5:e2:34:42:c9:5d:82:44:bf:a6:f3:dc:45:9a:
e0:42:ec:e7:a2:46:bd:57:4f:4c:db:6f:b5:0c:b5:23:43:ad:
3a:81:08:14:99:7d:75:df:87:72:69:23:de:8e:ef:5c:27:24:
13:e6:0e:cf:21:b5:1c:4c:b0:be:0b:59:7e:5f:d2:cb:73:b2:
a3:ad:36:a9:2b:17:4e:39:5e:55:d4:79:61:3e:30:6b:12:59:
aa:9c:0b:e1:fc:ad:4c:e3:36:d9:3c:78:18:32:9e:93:54:85:
4b:07:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:52 2025 by rpki-client