Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H81vKqya6BJUYHFiIAUYEW-8Iz8.roa
File: H81vKqya6BJUYHFiIAUYEW-8Iz8.roa (raw, json)
Hash identifier: NLxcrabGPUZ9f2ruRBk7qjORtGlb7/GSdOT02taVXHA=
Subject key identifier: 1F:CD:6F:2A:AC:9A:E8:12:54:60:71:62:20:05:18:11:6F:BC:23:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A976C76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H81vKqya6BJUYHFiIAUYEW-8Iz8.roa
Signing time: Mon 14 Feb 2022 18:11:35 +0000
ROA not before: Mon 14 Feb 2022 18:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788308598 (0x6a976c76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 18:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fcd6f2aac9ae81254607162200518116fbc233f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:3d:ed:90:fc:90:86:11:5b:11:6e:4b:f5:
b2:12:dc:69:58:28:47:d8:fe:85:97:28:84:50:88:
fc:56:56:8e:f1:0c:12:ae:c1:a6:45:9e:a1:80:f3:
83:a4:1c:85:17:eb:48:3d:a6:c2:63:1e:43:e0:f7:
0e:29:dd:22:ed:26:7e:c6:78:4a:47:9f:c1:93:ce:
36:e4:36:f9:92:a7:71:69:d0:12:7b:fe:40:7d:d2:
2a:72:22:02:38:e5:9d:b9:ab:6f:e5:43:4b:b1:11:
a8:e0:05:37:9b:75:44:c9:9a:00:01:4f:32:b1:1b:
4f:3d:88:da:1f:3c:18:a9:ad:8b:6c:a1:39:f3:3d:
fc:a1:e1:88:45:1f:85:63:77:1a:19:95:3d:48:1a:
12:df:c2:90:dd:4c:06:fb:7b:26:3b:70:32:1e:76:
db:f4:e9:f9:9b:c3:16:44:40:23:37:b6:8d:82:26:
a0:01:3c:24:41:36:fc:4b:01:09:fd:21:23:e0:ba:
bd:3e:3a:1c:32:49:90:b8:c4:2a:bb:0c:f7:3b:60:
0d:b4:36:5a:e4:b5:57:42:05:17:e9:ea:85:84:3e:
51:40:76:9a:c2:3d:05:e0:7d:00:81:19:c4:d4:99:
23:8e:28:d5:89:ea:41:79:2a:e5:3d:45:9c:b3:37:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:6F:2A:AC:9A:E8:12:54:60:71:62:20:05:18:11:6F:BC:23:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H81vKqya6BJUYHFiIAUYEW-8Iz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:39:75:62:5e:06:4b:65:f5:37:75:32:b6:3c:ad:a4:76:7d:
c9:54:1f:51:d9:87:5b:44:35:ae:49:b7:d4:29:2e:4c:85:4b:
c0:3c:f4:12:fc:e0:e9:73:b9:55:23:05:db:ab:c6:84:fe:a2:
27:5e:c5:21:4e:ea:5d:c1:0a:db:d1:a1:60:00:09:9d:73:e9:
0d:87:2c:42:7d:5b:bb:17:8e:e9:97:0a:f2:91:66:b0:d4:ec:
c3:25:09:06:f6:79:98:bb:28:93:52:4c:a1:9c:bf:93:78:ff:
b6:4d:3c:30:6e:7a:a7:7f:dc:5a:74:c8:9b:96:52:a9:9f:c4:
9d:45:51:18:3b:db:e4:6a:fc:e0:7b:3d:06:b4:45:7a:ba:a3:
bf:89:f5:39:44:54:e7:17:f8:f5:df:ac:fa:08:5e:b7:58:49:
90:9a:65:cf:64:e1:91:49:91:a6:a5:2d:49:f2:c4:90:34:73:
f8:83:72:cb:d3:93:12:09:b6:80:0e:e0:59:e3:4c:b5:b5:76:
cb:b8:c6:27:e8:32:de:b3:e8:8b:32:cc:e2:ad:5a:30:db:ff:
ee:1b:54:24:7b:f5:43:1e:20:d7:78:37:38:43:4a:e2:08:4d:
16:fb:a1:b5:8c:e1:6c:a4:cf:58:5d:86:dc:be:67:1b:13:40:
39:02:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:24:15 2025 by rpki-client