Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3xigcz3y0r7V527Kt1L32d1yTs.roa
File: H3xigcz3y0r7V527Kt1L32d1yTs.roa (raw, json)
Hash identifier: eEfEcZluRdeYPMzko+rVB8mRD7YqrQUlViRPLAzG1oo=
Subject key identifier: 1F:7C:62:81:CC:F7:CB:4A:FB:57:9D:BB:2A:DD:4B:DF:67:75:C9:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B6D31CF2AC4D8DD43BAD7F5BA5DD7436
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3xigcz3y0r7V527Kt1L32d1yTs.roa
Signing time: Tue 25 Apr 2023 05:11:41 +0000
ROA not before: Tue 25 Apr 2023 05:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:d3:1c:f2:ac:4d:8d:d4:3b:ad:7f:5b:a5:dd:74:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 05:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7c6281ccf7cb4afb579dbb2add4bdf6775c93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:ee:e9:fa:bd:8d:ec:16:56:11:86:6e:ed:
1f:7f:eb:cb:56:75:94:6d:65:0d:3c:98:f8:e6:85:
34:bf:53:ad:70:6c:b1:06:77:cb:e2:8f:13:e0:ae:
21:f7:e7:1d:2c:2e:d4:77:8b:dc:e6:22:76:64:e2:
24:71:37:2a:a3:7f:3a:ca:44:b1:16:38:a1:d3:86:
c5:04:9a:d6:49:e7:c5:7e:41:a4:d2:a8:c1:6e:a5:
e4:f6:89:cf:b1:99:a6:ce:29:50:0e:e9:90:39:5d:
c9:ce:ce:26:cf:c9:20:61:12:0e:70:f6:42:e5:37:
8f:28:96:21:18:28:ae:45:23:56:3c:3f:11:ee:6e:
55:bd:bd:d0:d5:9c:68:99:14:8d:eb:37:3e:b6:aa:
e4:a8:5d:e6:dd:85:18:30:73:76:76:5c:7d:9c:c6:
4f:12:c6:98:32:87:56:ea:3e:1b:01:b0:12:f0:27:
80:2f:cc:98:56:b5:01:09:bb:06:fe:a2:bd:9b:e7:
2f:dc:44:b3:8f:89:92:4a:8f:5e:79:11:09:2c:ba:
b9:9c:2c:27:a7:82:26:7b:9f:93:10:4f:03:02:5f:
0d:c4:1f:66:49:0d:d5:59:2f:94:e5:84:30:92:b3:
05:7c:f2:45:6d:54:29:3b:b4:64:bb:55:f0:8f:5f:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:62:81:CC:F7:CB:4A:FB:57:9D:BB:2A:DD:4B:DF:67:75:C9:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3xigcz3y0r7V527Kt1L32d1yTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:4c:83:55:c8:fa:f6:e6:d0:81:56:d3:e0:af:ba:27:fc:d0:
dd:61:8f:32:9b:dd:91:f7:bd:f2:d3:90:5f:d3:44:33:74:04:
41:73:60:ba:fe:4e:b0:d7:ae:d2:40:cb:d4:7d:4f:80:71:93:
f9:6a:1e:31:ec:ad:e2:b9:52:2b:d2:8f:a1:34:a8:b1:46:bc:
4b:2d:bf:81:e3:3a:50:56:5a:19:33:b3:63:62:a4:81:b1:83:
10:c7:4a:39:0c:c3:c5:b1:35:fc:b7:b5:2d:ee:2c:ee:92:cf:
9a:4b:14:bb:80:60:ba:2d:f6:39:5a:d4:08:cf:68:a0:95:87:
d2:45:a8:b3:eb:7c:83:5a:16:2d:48:9a:ff:16:86:c6:ce:3c:
c3:96:86:9a:b0:8c:22:2a:bf:a6:ab:f1:b1:8e:c7:bc:d4:d3:
76:ea:b8:f3:d6:7b:cd:5c:0a:d7:cc:c9:23:45:21:8f:8a:48:
de:95:55:9d:e5:39:1d:22:ca:a9:df:8b:33:05:64:f2:4f:1a:
37:59:5a:83:75:12:86:a2:4c:7e:58:07:4f:58:74:ba:9e:74:
99:5c:1c:5a:f8:8f:04:c2:34:7b:3d:6e:60:42:c1:14:e3:bb:
a4:01:6c:60:d6:95:0c:f8:71:f9:96:b8:e7:9c:fd:98:88:fb:
d4:6a:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:05:10 2025 by rpki-client