Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HA_cOVDbexqLrSmYiYod4ILR29g.roa
File: HA_cOVDbexqLrSmYiYod4ILR29g.roa (raw, json)
Hash identifier: r/IJitROy0k5YEZnZK86lSVDqyazEP7BYGoM52qc0Po=
Subject key identifier: 1C:0F:DC:39:50:DB:7B:1A:8B:AD:29:98:89:8A:1D:E0:82:D1:DB:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823CF804C84CA57B63DF6ECE8F243A3A12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HA_cOVDbexqLrSmYiYod4ILR29g.roa
Signing time: Wed 27 Jul 2022 00:04:23 +0000
ROA not before: Wed 27 Jul 2022 00:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:3cf7:de6f/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:f8:04:c8:4c:a5:7b:63:df:6e:ce:8f:24:3a:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 00:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0fdc3950db7b1a8bad2998898a1de082d1dbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:47:4d:91:38:3f:0d:60:1d:ed:b4:29:3d:
52:07:45:80:0a:ec:2e:13:0b:5c:39:59:cc:57:50:
c4:1d:65:b4:2d:23:68:61:ff:03:f2:2b:32:b7:20:
85:64:39:95:f1:88:57:1b:7f:88:bb:1c:7a:0b:4c:
e0:d1:1d:c1:72:0f:2b:ed:82:a2:91:0c:56:77:2d:
30:65:37:d4:15:c4:cb:6b:7e:0a:cb:08:dc:1b:a9:
cc:2f:4e:9b:a9:ff:14:77:06:65:6e:30:c7:23:6f:
d8:14:dc:01:71:11:ce:18:dc:0a:61:ac:f2:49:36:
e7:98:6e:82:fe:b7:39:67:7a:90:22:c2:60:42:05:
53:a1:4e:e6:59:cf:23:11:33:0d:34:c5:13:09:eb:
55:e4:4f:38:7e:ac:51:be:52:9c:67:d3:0b:32:2a:
95:68:83:76:b7:f9:e9:0c:55:04:74:01:46:90:c0:
0f:cf:13:fb:35:ea:d4:cb:a0:e1:5b:a4:a0:28:bd:
7c:5e:ea:f1:06:f0:fd:e6:9d:0e:65:28:44:f2:f5:
69:45:a4:da:ba:b9:98:e5:14:70:09:9a:a1:ac:4a:
29:5d:5c:32:27:12:c7:f4:5d:71:e0:22:44:90:9f:
54:cb:1a:b7:7e:b5:4d:13:95:54:ed:83:6f:81:00:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0F:DC:39:50:DB:7B:1A:8B:AD:29:98:89:8A:1D:E0:82:D1:DB:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HA_cOVDbexqLrSmYiYod4ILR29g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:ae:d6:03:21:47:4d:50:51:40:cd:64:7f:d1:d4:46:b4:54:
57:13:96:70:13:86:ef:f9:6c:08:08:03:a5:e7:cd:d8:09:36:
3b:92:5e:fe:c8:6a:3e:94:6c:df:8c:65:d1:e1:0e:56:7d:b8:
5c:39:92:45:18:9c:2f:3d:7c:e4:79:84:52:8f:34:a3:14:6c:
dd:13:9f:a5:e6:ab:72:04:5c:ea:86:98:de:e7:a5:7a:a3:31:
cb:0e:8f:a1:44:8c:57:9e:47:18:37:32:6f:cf:63:a5:c1:e3:
54:69:28:ae:23:5a:9f:69:12:4f:35:d4:34:f4:cf:ba:2a:ab:
d7:fd:ac:c9:b0:90:e4:e9:32:90:6d:43:24:04:45:09:cc:14:
a8:b5:d3:33:06:ff:e4:87:de:00:43:ce:9a:12:fd:d6:83:7e:
e0:6d:d8:5e:7e:6a:08:f5:1b:08:72:a3:fa:de:d8:8f:d5:40:
b6:8b:2a:90:2e:da:bc:6e:e7:45:7a:a9:d1:2c:a3:11:cf:58:
f7:e3:25:f4:82:65:81:d2:03:f3:f9:44:b4:a5:1f:f0:f4:74:
45:a7:62:b7:dc:cf:44:11:95:ae:5e:30:ca:a8:0e:84:a4:82:
ca:68:33:1e:77:7a:4d:34:8e:1f:c2:59:00:01:3f:bf:b2:6e:
a7:d2:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client