Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HBfWYl2JiAPG_i3ufdW7kM1SKnE.roa
File: HBfWYl2JiAPG_i3ufdW7kM1SKnE.roa (raw, json)
Hash identifier: xhpAfmQofyImfKOvnkbceMlfqi3X897hHxZQkdbujiE=
Subject key identifier: 1C:17:D6:62:5D:89:88:03:C6:FE:2D:EE:7D:D5:BB:90:CD:52:2A:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A18E04199BEB61484CCA2B2ACEFD11430
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HBfWYl2JiAPG_i3ufdW7kM1SKnE.roa
Signing time: Mon 21 Aug 2023 16:14:24 +0000
ROA not before: Mon 21 Aug 2023 16:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:e0:41:99:be:b6:14:84:cc:a2:b2:ac:ef:d1:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 16:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c17d6625d898803c6fe2dee7dd5bb90cd522a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:59:4c:8b:38:1f:cf:cc:35:aa:26:ac:f5:
df:49:25:06:43:38:40:1b:9b:95:d8:52:f1:4f:5e:
2b:90:bf:2b:4f:51:6a:24:70:cf:c0:dc:2c:68:d0:
da:d7:5d:2d:bf:b2:58:b8:6c:ef:3b:14:92:bf:46:
f9:6c:49:b9:68:8c:c2:fc:7d:2e:72:39:b3:c4:4b:
c8:d5:94:f0:92:67:15:a9:d6:20:c4:04:b3:5c:f9:
f4:90:10:b7:08:ea:68:e0:8f:91:ed:38:74:2e:d1:
dd:46:f6:29:6b:41:cc:98:df:b3:15:96:7b:42:e2:
28:85:cd:98:39:4a:ac:c8:e4:ec:67:de:42:dc:a3:
a2:6c:e9:e3:18:3f:1c:56:a9:e7:8c:0e:b9:77:99:
fc:70:72:7f:5e:b6:23:58:ba:54:58:f1:f7:ce:40:
05:78:6e:ed:45:2d:a2:46:e3:60:8f:7e:b8:a7:b7:
78:01:25:8f:b8:2e:08:87:02:e6:72:0b:65:c4:10:
2a:9c:2e:f4:49:15:90:f8:24:9a:4b:f1:8d:b4:47:
b0:af:71:60:d8:58:3c:16:97:03:ff:60:93:ad:e6:
5b:f5:3f:79:3f:b6:51:ad:eb:00:ab:72:f1:fd:13:
cf:86:56:ad:cd:ec:72:68:ca:62:c4:b2:f3:ec:8b:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:D6:62:5D:89:88:03:C6:FE:2D:EE:7D:D5:BB:90:CD:52:2A:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HBfWYl2JiAPG_i3ufdW7kM1SKnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:b8:99:56:5c:fe:f3:33:7b:eb:bb:b7:29:d7:1f:dd:d5:58:
1b:dc:c2:51:ac:c9:0c:2a:0d:fa:c8:6e:5c:0f:ed:51:e2:8a:
7b:1c:22:85:30:a0:4f:e7:42:6d:b4:b2:e1:3a:6e:47:d1:8d:
a0:6f:a4:a9:d9:85:30:fb:0c:80:36:a2:5b:21:22:2f:f8:58:
27:df:57:b4:63:7f:f7:dd:3d:14:7e:1e:f1:b6:b6:78:b4:cf:
fb:4a:77:70:f9:d6:37:d3:eb:fb:91:f2:2c:17:55:8b:15:c9:
3e:d8:d6:f9:99:9a:9a:ec:22:81:62:41:2a:4a:a4:8f:25:47:
44:2d:0b:6a:d6:2b:74:72:21:35:75:d7:9c:ec:25:c1:74:6d:
36:69:66:93:8f:31:4a:1a:67:cc:2e:b9:76:92:df:28:30:25:
f5:0c:59:c5:8e:df:01:47:e2:6a:3b:da:fb:8c:16:ca:ab:d7:
e5:dc:4e:5a:7e:10:5b:d3:1e:8f:0e:81:f5:cb:d6:c9:86:28:
d0:ca:24:28:c4:39:aa:a3:0f:f3:65:cd:d2:73:2a:c3:06:94:
98:f9:16:7d:04:f6:fe:9a:59:02:14:74:9e:47:74:b3:67:59:
4b:d7:4c:69:d3:9b:8b:9f:50:da:a0:a7:98:b1:f7:26:b7:3b:
27:c7:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:45 2025 by rpki-client