Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H1e2Zp2e3IGQFmxq0Sxy89zWrlY.roa
File: H1e2Zp2e3IGQFmxq0Sxy89zWrlY.roa (raw, json)
Hash identifier: mZ8MWhLXcRpi4GgVJVZOnq5cCTbmIUvOyC7Nyt1bo+Y=
Subject key identifier: 1F:57:B6:66:9D:9E:DC:81:90:16:6C:6A:D1:2C:72:F3:DC:D6:AE:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018682E1671CDF1FBB76A869A851A5CB6D97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H1e2Zp2e3IGQFmxq0Sxy89zWrlY.roa
Signing time: Fri 24 Feb 2023 10:04:15 +0000
ROA not before: Fri 24 Feb 2023 10:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:82e1:498d/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:e1:67:1c:df:1f:bb:76:a8:69:a8:51:a5:cb:6d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 10:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f57b6669d9edc8190166c6ad12c72f3dcd6ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:be:ff:43:3f:fc:54:46:6c:23:a1:43:e4:
8a:89:77:6f:a7:3c:3c:f8:a9:23:66:80:21:d4:f0:
58:83:1f:6f:54:bf:ff:5d:bf:56:61:be:9a:9d:69:
b9:97:44:52:7b:7b:8a:ac:74:b9:87:f2:2d:82:4b:
01:d2:99:a7:05:66:27:b0:e4:b3:00:29:5c:5b:da:
fa:a7:0c:54:24:e5:04:d0:7e:90:1b:c9:ce:59:b3:
37:5c:df:71:5b:46:19:eb:af:6b:d4:04:fb:b1:37:
ec:16:16:62:2e:3d:c6:cb:7b:2b:d8:c0:a4:62:a8:
db:38:07:7f:ae:1d:12:75:aa:9c:63:80:2e:68:52:
20:00:b4:a8:05:40:6c:fe:91:36:9a:10:b5:8c:3b:
23:ea:94:ce:fd:a8:cf:01:ab:c8:1b:78:90:59:7a:
f7:be:0b:e8:da:96:c8:f5:c4:37:32:13:66:be:9d:
e6:e0:35:5f:66:ac:47:19:6c:bd:40:c3:78:b1:70:
50:58:c1:d1:44:73:ee:67:9c:73:0e:c7:14:ae:66:
f8:85:7e:3a:11:39:90:34:79:69:0c:27:f7:97:13:
c6:da:29:04:03:f4:cc:be:85:df:bc:a8:16:cf:36:
f3:06:24:20:67:60:c6:bf:54:5d:df:2f:fc:05:01:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:B6:66:9D:9E:DC:81:90:16:6C:6A:D1:2C:72:F3:DC:D6:AE:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H1e2Zp2e3IGQFmxq0Sxy89zWrlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:61:89:9d:4f:9f:e0:a3:13:49:d9:35:1d:02:28:cb:86:49:
2e:1b:ce:e7:98:79:dd:be:e9:23:2f:49:59:66:d6:34:61:a0:
c5:6e:b0:d8:b1:bc:83:4c:43:81:2a:00:3c:29:b8:2f:bb:af:
98:a5:39:be:52:23:07:6e:0f:ee:e9:be:60:c9:25:54:71:22:
f7:5a:1b:81:30:e3:13:26:fc:e3:e6:17:b0:d5:f3:70:ff:1d:
a3:2a:87:aa:e2:00:6d:ca:3d:2c:77:94:9a:99:38:32:bb:c5:
e2:86:ac:d5:e9:1e:67:bd:58:54:a2:0d:f4:56:53:3a:18:de:
47:b0:aa:24:03:86:b9:fd:6f:86:0e:fe:f0:2d:bf:55:4d:d1:
08:68:c5:b2:fd:5e:51:49:2d:cb:6c:7d:98:cd:64:ce:49:e1:
e1:0c:82:98:85:3a:bf:e2:3a:70:25:91:83:c1:96:91:52:51:
3e:29:d3:9c:11:bb:50:bd:de:86:7c:b5:d7:56:ed:33:16:3b:
c7:63:ca:ea:7a:a1:2e:e4:61:49:72:44:af:be:8e:35:aa:83:
8c:f4:c3:f7:b2:7b:8d:6b:b2:71:44:73:12:94:79:c2:a4:9d:
43:16:88:26:f8:71:98:2d:fe:00:a1:dc:8b:e1:42:c5:84:d0:
9f:0e:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:17:57 2025 by rpki-client