Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zng4kY3rcM8h6JdIu-XvvGxUQ.roa
File: H5zng4kY3rcM8h6JdIu-XvvGxUQ.roa (raw, json)
Hash identifier: SEHQMD0uBAt5q8uKk8YAEn4NlQaBSiToZpk0G5pdQr4=
Subject key identifier: 1F:9C:E7:83:89:18:DE:B7:0C:F2:1E:89:74:8B:BE:5E:FB:C6:C5:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825AD3C18D7501FB04E71491D132BB2C54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zng4kY3rcM8h6JdIu-XvvGxUQ.roa
Signing time: Mon 01 Aug 2022 19:13:23 +0000
ROA not before: Mon 01 Aug 2022 19:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:d3:c1:8d:75:01:fb:04:e7:14:91:d1:32:bb:2c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 19:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f9ce7838918deb70cf21e89748bbe5efbc6c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:0a:c7:90:51:30:bf:66:64:91:e6:c9:ee:
c0:eb:20:7b:5c:65:8f:70:40:f2:55:ed:72:f0:d9:
06:2d:4e:cb:8c:d2:97:dc:b4:54:bd:28:d8:df:e6:
5b:86:83:66:1d:b7:4a:d0:b9:ff:e3:74:5a:27:93:
5e:2d:22:bb:cd:d4:77:67:b1:98:e6:b6:1f:d5:d1:
fe:20:0f:ce:79:00:b1:19:82:43:d2:d8:08:17:31:
82:86:ef:da:af:1e:1e:ac:bd:0e:33:ba:8a:c4:59:
15:6e:b7:4d:81:df:0a:cd:7e:fa:3c:e6:cb:f7:7f:
9c:bc:06:de:4e:d6:57:95:bd:58:32:ec:bb:a1:0c:
0c:b8:a9:c8:e8:2a:db:e2:1e:39:b4:9e:48:4b:51:
75:70:92:c9:39:68:d2:38:00:a0:a0:a8:f3:d5:59:
ef:29:dd:74:48:f6:ee:82:31:0b:0a:2e:d0:01:00:
a3:a6:66:d6:77:84:04:c5:d7:9d:d9:53:df:13:c4:
fd:49:72:46:d5:3c:fa:aa:1e:86:d5:68:d6:49:5b:
ec:6b:2d:da:17:2f:c5:7e:ef:60:85:02:17:b7:00:
89:d2:28:de:8d:9a:54:ae:38:b0:2f:4e:c1:88:23:
c4:34:5a:8a:28:36:c3:c8:66:18:03:2f:55:01:5a:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:E7:83:89:18:DE:B7:0C:F2:1E:89:74:8B:BE:5E:FB:C6:C5:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zng4kY3rcM8h6JdIu-XvvGxUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e2:ab:24:2e:c4:cc:ab:d3:2e:ff:a6:c9:6a:2b:4c:11:11:
23:ef:51:a2:be:6a:ce:4a:5b:2b:f1:cb:97:a9:3f:e8:30:0d:
c6:ec:ad:d1:15:d7:83:19:d8:97:07:d1:e6:7a:35:bf:1b:34:
50:5e:57:04:f9:b5:cc:ed:b2:e2:5f:bd:aa:e5:de:25:23:dc:
89:84:a9:4c:00:89:22:d0:5e:25:92:11:4d:4b:da:52:11:45:
00:58:80:14:15:b7:46:63:56:6f:38:ec:43:fd:3b:10:39:5d:
c7:cc:59:a0:96:b0:94:b7:de:09:b6:75:8c:65:e4:83:c4:a4:
dc:73:de:2b:23:18:88:b6:e1:61:1c:a8:c9:f2:a4:7c:d2:19:
d5:a8:2f:89:53:bc:8d:88:3d:4a:fa:01:81:48:d4:5e:c7:bd:
38:f4:f1:f9:e8:c8:f8:d5:d6:8a:63:59:fe:7f:c1:c9:99:b7:
49:bb:ba:c6:7c:e4:c8:a0:e1:ff:be:95:02:55:1d:7c:3e:86:
7f:b0:74:99:cf:08:72:09:40:bf:92:57:2b:c6:eb:14:13:4b:
20:e6:6d:b0:61:33:c5:ea:28:37:15:3d:d2:e2:d1:3a:4e:75:
7e:81:57:0c:a3:3c:45:d4:79:42:be:0b:16:72:ec:d9:67:9b:
af:6a:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:00:40 2025 by rpki-client