Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4ttmNUQiH3swqTYwijbHO8p9RA.roa
File: H4ttmNUQiH3swqTYwijbHO8p9RA.roa (raw, json)
Hash identifier: Fcy5e4mM/wIJ/6nApmJ6Xq0pF24nsQ5oWJgqHlOthZs=
Subject key identifier: 1F:8B:6D:98:D5:10:88:7D:EC:C2:A4:D8:C2:28:DB:1C:EF:29:F5:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018508D0B611679017E971617ED0E20D4EBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4ttmNUQiH3swqTYwijbHO8p9RA.roa
Signing time: Tue 13 Dec 2022 00:09:33 +0000
ROA not before: Tue 13 Dec 2022 00:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:d0:b6:11:67:90:17:e9:71:61:7e:d0:e2:0d:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 00:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f8b6d98d510887decc2a4d8c228db1cef29f510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:24:6c:d7:44:35:db:9e:8e:a2:10:68:90:
17:9d:13:be:db:23:f7:73:a6:61:11:6f:62:e4:32:
32:2a:aa:3a:c1:4a:53:68:9d:7a:32:de:00:92:aa:
87:6f:3e:79:6a:03:f8:70:67:cf:51:20:9b:4c:13:
d5:6c:90:38:f2:78:c8:cc:a9:99:3e:e1:dd:71:56:
36:46:c0:82:05:d3:5e:c5:c3:f7:1d:5a:26:f2:52:
93:15:04:c4:4e:91:9d:d8:df:88:87:a5:65:23:51:
9d:c2:49:20:d4:09:b5:54:0e:ee:07:19:14:2d:f9:
59:b2:03:1c:0e:31:11:48:82:f2:ac:fe:b3:01:a6:
a5:11:89:71:80:52:ec:77:c1:7d:d3:a3:f6:55:09:
c7:9d:03:cf:fd:93:3f:0d:76:20:b2:cb:a5:e4:28:
68:8a:ed:8b:3d:ac:20:27:09:88:f7:64:34:0e:c3:
6d:61:bc:07:08:62:a7:35:86:4c:ca:af:73:56:1a:
d4:c6:b4:df:42:a8:1d:07:20:9e:57:b5:76:ba:1d:
74:6f:e3:0b:d1:aa:96:78:7f:2b:66:b5:b1:ef:d7:
b9:be:3f:79:29:a8:fe:10:d7:eb:2e:63:cb:71:8a:
a8:d8:cd:95:d8:0c:75:bc:50:c2:87:14:f6:0a:f1:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:6D:98:D5:10:88:7D:EC:C2:A4:D8:C2:28:DB:1C:EF:29:F5:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4ttmNUQiH3swqTYwijbHO8p9RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:33:d1:ff:84:9d:d6:f5:17:cc:be:33:8d:a0:13:b9:ca:10:
f4:bf:11:75:ff:dc:0a:9f:76:d6:dc:b1:99:46:5c:9e:4e:da:
dd:2b:68:83:2d:f1:db:95:77:68:99:72:37:d3:aa:3b:9e:34:
07:a5:9a:ad:22:33:7a:0c:12:7b:b0:97:a3:e4:e6:51:da:ad:
a4:6d:23:ee:5d:a8:dd:3e:a5:12:03:1c:71:24:3f:c8:3f:b3:
e4:0c:ec:f7:4a:70:09:61:2b:27:25:33:f7:48:dd:81:51:60:
ae:fc:7c:30:2a:04:27:ff:a8:fb:ba:d4:5c:d5:1c:b9:77:08:
92:e2:14:20:3a:d4:3c:b9:17:2a:91:73:c6:e8:a4:5d:86:b8:
12:c5:7b:e0:73:04:02:ba:2d:ff:08:55:70:46:dd:7a:a8:db:
0a:dc:a1:ab:70:b4:a8:46:df:25:39:e7:a6:d1:06:17:31:a0:
24:2d:f1:78:73:91:84:0e:c8:e4:8c:3a:42:95:6b:9f:00:35:
7a:3c:bc:68:40:13:74:e7:61:d0:26:e2:ed:3a:a3:e4:6d:67:
04:e0:7b:a4:f2:a0:d2:cd:f6:d7:ce:82:02:17:f1:69:77:01:
58:9f:f1:f0:b3:fe:03:ae:06:c9:19:d3:34:f8:57:9c:4b:1b:
7f:5d:a5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:59 2025 by rpki-client