Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HAiWoC6EXUtkdA2lQcXYPD1lCjc.roa
File: HAiWoC6EXUtkdA2lQcXYPD1lCjc.roa (raw, json)
Hash identifier: 2SM6fKKKp+pnETKRYNcUZVssyXW92Ek1L1XwkIUXrQQ=
Subject key identifier: 1C:08:96:A0:2E:84:5D:4B:64:74:0D:A5:41:C5:D8:3C:3D:65:0A:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85A191E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HAiWoC6EXUtkdA2lQcXYPD1lCjc.roa
Signing time: Fri 20 May 2022 04:11:29 +0000
ROA not before: Fri 20 May 2022 04:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241958370 (0x85a191e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 04:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0896a02e845d4b64740da541c5d83c3d650a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:24:14:1b:d0:2e:0f:4d:de:ca:13:df:71:
7d:34:af:aa:bb:02:8b:37:e2:6f:c1:0f:0e:d6:46:
a9:85:a6:16:0f:59:6a:51:cc:9b:d0:6c:01:7f:4d:
e6:59:78:44:9c:8a:8b:21:ea:cf:ff:f2:75:aa:b4:
52:de:36:cd:5a:8a:f7:34:d7:06:8b:02:61:45:97:
08:87:df:6f:b0:82:d9:26:5b:e6:79:91:8c:b6:35:
71:85:89:df:89:eb:ed:15:59:6e:14:8c:2e:50:e4:
3a:ec:76:45:95:24:cc:0c:99:f1:bc:da:37:92:b6:
09:98:bc:f9:f8:15:96:31:b5:37:ba:29:9b:5f:48:
e0:47:95:4a:0a:53:3e:b7:46:9f:ef:97:23:1f:48:
d7:92:28:b5:08:1c:90:55:9a:0d:f4:d3:30:62:0b:
cd:15:2a:3b:b2:4c:e6:21:f1:69:b1:af:eb:38:43:
89:6a:f1:7c:ae:80:89:95:8e:9f:d3:92:67:99:bb:
ec:63:ad:a7:ee:0a:41:87:b0:ce:d3:6d:dc:86:ed:
30:0d:d5:b1:09:61:72:61:05:4f:f5:da:a4:c3:dc:
41:04:d1:42:e1:e0:09:58:e4:ae:de:3e:ad:f3:93:
bf:50:ce:b6:dc:a8:e3:18:67:73:85:dc:bc:6b:5a:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:96:A0:2E:84:5D:4B:64:74:0D:A5:41:C5:D8:3C:3D:65:0A:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HAiWoC6EXUtkdA2lQcXYPD1lCjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:44:5d:e8:62:6e:74:13:85:74:08:39:e7:8b:52:4c:0a:0c:
74:a4:23:39:3c:87:fe:a8:bd:43:cd:b1:1f:8b:ff:cb:86:3c:
a6:71:f8:93:2b:f9:e1:86:c5:89:8a:5b:3f:b6:27:8e:c8:a1:
3d:b1:0f:d1:32:59:98:de:4c:ba:ad:af:0c:38:f5:f2:ab:4b:
25:73:2c:d2:9f:a7:c7:2f:1f:ce:e4:9a:95:1d:e6:95:d8:e5:
37:0b:6e:b8:49:e8:c3:39:b5:64:a2:ad:1e:42:fc:8f:37:c8:
f0:9c:f3:84:71:73:71:bb:6f:28:d3:c9:ac:55:95:60:9b:dd:
a1:96:6f:66:e3:f8:dd:c5:29:7f:7b:55:be:ff:89:0b:e6:75:
28:3b:22:d8:b1:2e:be:f5:8e:17:64:65:b3:28:28:08:dc:fc:
96:4e:e5:72:36:1c:5d:d6:27:72:af:88:48:a3:14:b0:0c:a3:
8a:aa:e1:1e:41:d2:4c:7e:24:e6:fe:a7:78:7a:14:d0:3c:e2:
23:e6:06:c0:4f:ab:95:8b:9b:34:e4:09:c7:d3:c4:34:85:b4:
5c:89:da:b2:17:82:22:93:cc:95:0e:cb:0e:33:51:03:38:26:
ca:24:5e:a4:78:10:13:96:8e:4d:42:f8:b8:92:1b:17:e3:7e:
aa:3c:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:11 2025 by rpki-client