Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4388WbzmFyoyGiWobSxVT-dp04.roa
File: H4388WbzmFyoyGiWobSxVT-dp04.roa (raw, json)
Hash identifier: mWvxjfgE/cKQBz/4enJDj/PtZri9Qmx+nxYaQS+omLs=
Subject key identifier: 1F:8D:FC:F1:66:F3:98:5C:A8:C8:68:96:A1:B4:B1:55:3F:9D:A7:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D03259999A257756594289A3051ADD07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4388WbzmFyoyGiWobSxVT-dp04.roa
Signing time: Tue 05 Jul 2022 21:09:29 +0000
ROA not before: Tue 05 Jul 2022 21:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d0:32:59:99:9a:25:77:56:59:42:89:a3:05:1a:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 21:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f8dfcf166f3985ca8c86896a1b4b1553f9da74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:03:dc:af:85:ba:50:b4:84:cc:04:dd:2a:
9c:9c:c2:d7:3a:b9:ea:2c:fe:c4:69:40:c1:20:96:
3a:2c:d1:13:9c:0f:5c:fe:8c:20:27:de:be:b7:77:
f3:52:9b:43:1b:2e:1c:69:c0:6c:c1:3c:15:4f:f7:
7e:42:a2:aa:89:07:de:29:38:15:30:d2:6e:9b:04:
04:70:af:13:a5:7a:f0:71:10:c5:c3:88:f8:ef:85:
1c:87:53:b6:ed:bf:5e:49:7d:40:80:30:15:d5:80:
e4:52:14:7e:36:7a:a9:8b:98:49:36:a0:51:32:ab:
04:d3:15:d4:a0:cc:70:16:28:b2:97:ce:1d:60:66:
1c:4d:04:4a:f3:a8:8e:11:05:7d:43:2d:80:5d:5a:
a9:e1:69:ff:54:00:e8:7b:f9:f1:c3:01:6a:b1:15:
46:cd:97:0d:2c:fc:ca:32:49:15:1f:24:6c:e6:0f:
5b:6e:09:2e:69:5f:c0:51:cc:ee:92:c6:f7:7b:ea:
39:1b:51:99:77:21:b3:e2:0b:b8:dc:98:81:66:9f:
e1:79:f8:2b:d2:4f:62:58:28:93:b6:d6:54:d9:61:
ab:f6:05:9c:ef:75:d7:2e:f7:1a:3e:82:fa:b6:96:
1d:15:cc:9b:63:03:38:79:3c:51:0f:2d:3f:b0:26:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:FC:F1:66:F3:98:5C:A8:C8:68:96:A1:B4:B1:55:3F:9D:A7:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4388WbzmFyoyGiWobSxVT-dp04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:c9:68:12:3a:65:97:da:8d:f5:90:f3:3f:fe:90:22:6c:2d:
c0:b7:96:51:90:59:72:65:6f:2a:f3:9b:e0:82:e9:ae:f6:29:
dc:f7:90:13:9c:08:2c:33:0e:90:11:53:64:59:59:ad:55:64:
c6:9e:9a:97:82:67:82:2e:e3:a7:cd:2f:d7:9f:6e:fd:58:9d:
16:44:5d:c3:92:62:72:84:b0:1b:87:ed:ef:ee:d1:c5:bd:11:
8a:f2:e1:90:7b:ad:7a:f9:02:e3:62:09:af:42:01:87:e2:c4:
cf:7a:9c:eb:07:de:af:1f:42:f4:2d:f5:c0:26:27:38:9c:43:
71:01:e0:ed:2e:10:23:c3:23:3c:07:de:fd:08:99:3e:d9:93:
92:c0:11:50:0b:5d:2d:7b:a6:fd:7d:d0:27:bb:7e:32:be:5d:
62:b9:07:fa:2e:73:50:41:cc:9c:01:71:60:c6:65:93:0f:f0:
2d:7e:2a:b8:74:69:6b:9b:ce:50:e8:df:59:cd:6c:2a:ba:e0:
4a:8b:15:96:17:49:16:90:d6:97:ae:be:06:71:ca:6a:b2:b1:
38:bd:70:41:34:23:5c:ae:91:8e:38:b1:75:59:fe:97:ef:41:
87:10:1e:d6:7f:1e:de:d6:39:7f:5d:87:4a:01:1b:25:82:a2:
86:b8:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:51:57 2025 by rpki-client