Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H-avzQTOtap5iPeVlbLMPAfr16A.roa
File: H-avzQTOtap5iPeVlbLMPAfr16A.roa (raw, json)
Hash identifier: VtSc8w4rZArGNEG0yl+8MdAWgGIVMIUQAKmZqE9A+Z0=
Subject key identifier: 1F:E6:AF:CD:04:CE:B5:AA:79:88:F7:95:95:B2:CC:3C:07:EB:D7:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A30726BE7B878F480D83A8F9A9458DA76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H-avzQTOtap5iPeVlbLMPAfr16A.roa
Signing time: Sat 26 Aug 2023 06:05:19 +0000
ROA not before: Sat 26 Aug 2023 06:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3071:b31b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:30:72:6b:e7:b8:78:f4:80:d8:3a:8f:9a:94:58:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 06:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fe6afcd04ceb5aa7988f79595b2cc3c07ebd7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:2f:bc:47:bf:7f:4e:9b:a5:d0:04:c7:28:
57:a1:0c:45:8b:f4:d3:c2:bc:46:05:4c:e8:07:ee:
5b:fd:7b:cd:f6:ed:e5:06:f1:b4:97:41:8f:ec:04:
81:38:c1:3d:54:4b:74:21:82:90:79:01:d2:bf:b0:
15:e3:c3:4b:03:68:72:32:af:71:ba:fa:22:63:37:
66:eb:68:4a:cc:d5:3c:14:2b:5f:c6:72:67:e2:3b:
ad:e6:42:b6:c1:04:9d:c3:79:b6:96:7e:67:47:25:
f1:16:63:24:a5:4d:fa:de:b0:82:35:bb:e2:94:bb:
c5:2d:b9:68:ec:95:f9:b8:39:a8:e7:e8:a0:66:f6:
d9:78:c7:14:5b:12:ab:63:bd:6b:5d:c4:9e:63:4a:
7b:69:d7:27:f6:9c:e6:55:ed:6a:13:1a:8a:de:14:
7c:b8:93:2a:57:62:1b:03:f0:59:47:2c:1e:a6:bb:
03:de:95:93:48:af:d1:05:c8:7e:6f:ee:03:72:47:
fa:0d:ac:c1:10:a2:9a:ca:9c:c7:d4:c2:2d:23:4b:
73:ee:69:0f:f5:27:c0:bd:35:09:be:26:17:0b:1d:
4c:e1:a5:fb:e7:35:f4:9d:16:60:13:bf:18:fd:52:
0b:de:d2:c0:8e:f6:74:e0:2c:cb:de:b9:74:6b:f4:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:AF:CD:04:CE:B5:AA:79:88:F7:95:95:B2:CC:3C:07:EB:D7:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H-avzQTOtap5iPeVlbLMPAfr16A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:07:12:bb:86:0b:be:fe:c4:af:d9:29:d8:d3:b2:18:e0:b4:
e6:ca:9a:4f:8b:72:41:3e:12:37:78:34:4f:b6:f1:c5:45:a1:
67:f9:f3:ef:38:6d:f2:ee:8f:09:28:6e:a4:92:fc:e4:51:8e:
56:26:c4:4e:06:81:01:56:db:97:1c:b4:a6:92:f6:97:ba:26:
51:79:f7:e3:82:3a:4a:75:81:4b:0b:8c:4b:3b:f6:a1:cb:0d:
cb:16:64:f0:16:83:52:2a:c7:db:fb:4e:5b:a4:0b:d1:4e:a1:
50:e5:15:c7:8f:b2:2d:0a:da:30:62:d1:d1:04:44:6e:d2:0b:
a9:f7:4d:e4:88:a6:ac:3e:cc:dd:be:e9:5f:af:4d:85:f9:f3:
12:b1:66:5f:a3:fe:30:97:f8:3e:8b:bc:c0:a1:c7:5f:17:15:
d6:de:ed:32:d3:a8:b1:75:47:55:e4:f4:78:9b:41:aa:fd:97:
19:b4:bc:cd:8e:aa:ee:d3:80:be:14:b4:43:e8:de:81:3f:e5:
69:35:f1:c8:f1:3d:12:63:17:7f:75:b5:6e:34:4d:71:29:5e:
45:3e:94:4d:e8:5e:41:5f:57:3c:61:35:39:c9:aa:9f:76:7f:
dd:80:5b:9c:83:f1:e9:ca:57:ed:7c:8f:1d:e1:5c:78:8a:a9:
17:f2:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:46 2025 by rpki-client