Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9YLCFGUD6J4CWLNsmxxlb0VsNo.roa
File: H9YLCFGUD6J4CWLNsmxxlb0VsNo.roa (raw, json)
Hash identifier: THPOfIwcgFLfrNiOCGYgXu9jQ6iFsuuFh6M86WQI/8M=
Subject key identifier: 1F:D6:0B:08:51:94:0F:A2:78:09:62:CD:B2:6C:71:95:BD:15:B0:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826936027D177983DA39F8E3255A8C6860
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9YLCFGUD6J4CWLNsmxxlb0VsNo.roa
Signing time: Thu 04 Aug 2022 14:15:23 +0000
ROA not before: Thu 04 Aug 2022 14:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:36:02:7d:17:79:83:da:39:f8:e3:25:5a:8c:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 14:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fd60b0851940fa2780962cdb26c7195bd15b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:6a:44:c7:9a:89:d0:d6:25:41:16:5b:a8:
54:65:3b:e6:ac:63:bd:36:bf:5c:43:c7:77:8c:9a:
90:6f:5a:50:c9:38:68:0e:ac:36:31:68:f7:1c:5d:
0b:49:31:67:ef:b8:18:14:89:e0:b4:2e:bb:ef:ea:
76:ae:d1:6b:cc:06:a1:bd:c8:e0:ee:41:62:87:39:
7e:cf:9e:83:1f:9b:0d:52:7d:c6:a0:74:8d:61:22:
04:ab:3d:f4:83:44:32:2e:0e:8d:39:e2:d3:54:f4:
9b:1a:75:88:88:75:9f:84:cf:31:38:30:be:14:07:
f6:6d:37:d4:61:f9:e7:48:cf:53:9d:a9:b1:00:c2:
f2:a9:2a:e2:7f:28:40:6c:b7:2e:15:97:34:7e:f5:
76:73:1f:00:ae:bf:db:f0:84:1b:a0:0a:5d:58:38:
b7:11:bb:3f:43:83:bf:93:b5:32:7c:92:a3:da:90:
7b:a0:b2:56:76:a9:11:02:41:f0:f0:d0:25:d1:a0:
b9:35:40:64:1e:79:46:a8:78:7e:73:7f:89:4e:b0:
f1:66:2d:e0:11:aa:e4:85:30:a5:16:cf:ae:e5:fb:
6e:62:04:bb:50:00:47:a7:bd:35:38:bb:a8:6a:e5:
5b:67:ee:a5:8d:ed:49:51:29:23:da:e7:2c:19:9c:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:0B:08:51:94:0F:A2:78:09:62:CD:B2:6C:71:95:BD:15:B0:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9YLCFGUD6J4CWLNsmxxlb0VsNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:7e:4a:91:92:93:7a:44:eb:9e:37:7c:a6:bc:e5:41:4b:96:
1d:2c:cf:4b:d1:03:67:ec:c4:f5:65:19:96:a8:5d:f8:d6:5b:
89:fe:68:fc:92:de:0b:5c:89:29:e6:6b:79:9a:ea:a0:d8:b1:
2e:83:2b:49:bc:45:92:15:19:74:c6:d6:e6:01:ba:4b:2e:ee:
6d:e7:c0:d3:8a:d1:ac:58:e9:0a:12:2e:2d:09:9b:31:b0:0a:
de:1b:fa:80:d2:0b:7f:f6:36:d2:45:b2:88:e4:31:db:d9:0f:
8b:fb:e5:0f:c9:e7:fe:a1:8d:72:b8:56:7f:94:53:ab:73:17:
37:b0:68:e4:62:1d:f0:2c:ed:4b:aa:a8:92:d4:7c:c7:f4:72:
54:0d:55:c0:29:49:53:8b:69:ce:e3:af:8b:30:48:ae:e5:6b:
e9:8e:7b:1e:84:4c:6e:df:e4:13:99:3f:68:d9:5d:88:71:a8:
eb:eb:96:e2:4f:3d:85:c1:36:b7:2c:ee:0b:f4:6f:72:05:78:
23:07:0b:3b:d3:43:fd:fb:2a:21:be:8e:ac:75:10:26:50:c3:
6d:03:be:53:6e:31:4c:4c:e6:ed:6e:f7:eb:66:10:c9:aa:d8:
26:cf:35:e7:da:e7:a0:b9:8f:f0:5d:ff:90:e6:c1:64:d0:2c:
34:62:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:26:26 2025 by rpki-client