Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H09Q_XDM96BXG4bNFtnOtCLgrx8.roa
File: H09Q_XDM96BXG4bNFtnOtCLgrx8.roa (raw, json)
Hash identifier: AvOs2Ekki8QFuTUQ0ibjxbLz8LI5zfmCK5v0UD0Rhx4=
Subject key identifier: 1F:4F:50:FD:70:CC:F7:A0:57:1B:86:CD:16:D9:CE:B4:22:E0:AF:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018545180B5F7D0848A6A6374E0C19FD74FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H09Q_XDM96BXG4bNFtnOtCLgrx8.roa
Signing time: Sat 24 Dec 2022 17:04:41 +0000
ROA not before: Sat 24 Dec 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4517:9c39/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:45:18:0b:5f:7d:08:48:a6:a6:37:4e:0c:19:fd:74:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4f50fd70ccf7a0571b86cd16d9ceb422e0af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0a:b7:ad:20:8c:e2:57:9f:b3:b0:c4:2c:b5:
06:7c:4c:c9:f8:68:d0:7c:6a:e0:0c:41:d9:b3:05:
ef:5d:00:ae:05:83:40:0a:b0:b1:8b:3e:87:a3:13:
22:a5:4e:b3:5a:90:a7:51:84:d9:a6:bf:1d:12:06:
e3:b3:1e:44:5c:3c:ee:2e:87:97:3a:85:e9:2f:ef:
92:c9:6e:f4:e6:7c:db:d0:5a:e6:57:53:15:c2:dc:
ef:72:65:8e:09:8b:43:21:86:7d:a6:b5:a5:f5:26:
d2:23:c0:b9:77:cd:76:88:60:40:79:f3:13:23:26:
b0:5a:c5:26:80:64:64:ac:80:f8:26:1b:ad:88:92:
9c:d2:07:f9:69:b1:09:e1:48:e2:ac:f4:9f:92:37:
20:d9:5d:6c:97:3d:f9:76:97:07:e2:78:48:fb:94:
fb:7a:cf:94:6c:20:79:03:2c:42:9f:ce:82:0a:9e:
eb:4b:dc:55:ef:97:b0:3e:4e:12:06:ce:e3:9a:4e:
f5:f6:94:08:78:bc:eb:8c:5e:66:70:73:9d:23:a8:
ec:6e:be:40:1f:3e:f8:3d:a4:e2:ca:f6:5e:61:20:
39:5d:cc:0f:91:64:a7:c1:31:2f:b0:cf:15:01:b9:
bf:fd:20:30:ba:fa:30:fd:d5:23:c1:0b:5d:3d:67:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:50:FD:70:CC:F7:A0:57:1B:86:CD:16:D9:CE:B4:22:E0:AF:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H09Q_XDM96BXG4bNFtnOtCLgrx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e9:eb:24:08:8c:1e:5d:32:df:3e:5b:8a:78:c3:ad:f8:89:
a2:ca:84:3d:08:f6:f6:ce:75:09:74:d6:53:7e:15:22:e1:7e:
3e:24:a6:f4:4c:f4:a7:7f:e4:5d:fb:da:1d:35:c2:75:c2:03:
5b:4c:74:5c:12:46:28:1f:30:1e:c0:ce:1b:f8:c4:6e:a8:11:
3e:a1:6e:5a:43:c6:2e:0c:30:59:16:e7:b8:6d:da:d5:89:18:
61:e5:c3:fa:6d:e2:50:d3:11:5f:fc:01:d3:ee:87:64:57:ea:
f0:fa:e5:3a:fd:7a:37:b4:aa:04:03:96:71:0c:be:2c:f4:9a:
6b:a7:ce:c5:ce:dd:77:6c:90:15:72:e3:94:37:89:fe:b6:97:
fb:d4:f4:b6:8b:21:a2:a8:97:e8:38:8c:9f:5c:14:25:85:d4:
79:df:af:33:95:f4:85:16:ef:50:d8:05:5a:33:9d:67:db:79:
d6:33:81:09:fc:94:ec:bc:64:48:8a:b7:18:17:9f:4f:c7:bd:
ec:17:28:f6:61:0d:0e:21:1b:e7:dd:b1:97:93:10:bd:d8:80:
21:6f:0a:06:10:f1:66:e8:9b:9a:c0:4e:28:51:cb:2c:26:30:
bf:bd:aa:98:69:39:98:43:dd:f5:85:0d:20:da:34:d8:2b:1a:
f0:f9:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:36 2025 by rpki-client