Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HDk6mOfuomihCEr2LO03uIExDPs.roa
File: HDk6mOfuomihCEr2LO03uIExDPs.roa (raw, json)
Hash identifier: UiXhzx0mi6WnIO9C3oGT+2PH5DO/XMn42w1v91iEj/4=
Subject key identifier: 1C:39:3A:98:E7:EE:A2:68:A1:08:4A:F6:2C:ED:37:B8:81:31:0C:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E72A986A282827194791E65C36F86091
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HDk6mOfuomihCEr2LO03uIExDPs.roa
Signing time: Mon 17 Oct 2022 18:17:51 +0000
ROA not before: Mon 17 Oct 2022 18:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:2a:98:6a:28:28:27:19:47:91:e6:5c:36:f8:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 18:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c393a98e7eea268a1084af62ced37b881310cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:df:0a:8d:7c:d2:5e:87:e8:6d:84:2a:09:
a3:ad:74:28:d8:47:26:66:5e:0f:b2:6f:ca:dc:75:
7e:20:6a:b1:f1:a2:4b:4d:fb:09:e2:b9:54:ae:9f:
b9:37:f6:59:b1:3b:32:0b:01:9b:5b:f1:ab:ac:7a:
cc:13:14:83:28:80:a9:4c:54:96:ce:02:7a:54:44:
00:fb:c5:76:9e:72:8f:0a:ce:50:a2:1b:d9:30:ea:
84:53:19:e4:3b:f0:1e:3b:11:cd:22:4a:10:7d:4f:
8f:cf:d5:27:5d:7a:6a:b8:9c:71:16:2b:9b:81:f2:
1c:4c:0c:9e:1f:52:3b:91:ff:67:a5:7c:1a:c5:b8:
6a:a7:11:5a:1e:bc:c2:1d:21:dd:5c:b5:02:bc:95:
69:96:e1:75:9a:ca:12:9b:b3:82:36:32:50:6c:45:
25:14:af:d9:f9:db:1a:a1:dd:b7:2f:3b:43:95:30:
b0:07:42:68:ae:0d:93:d3:0b:2f:22:56:24:b8:fa:
02:fb:06:bf:69:12:00:73:c7:08:1c:1e:d1:6c:81:
0c:1b:d1:a2:99:be:ed:91:6b:6d:fd:89:5f:5c:d4:
72:26:87:ac:5e:13:f4:89:f5:d3:df:61:1f:dc:b2:
fe:04:4d:e5:5f:da:95:13:99:71:0a:a9:a1:82:11:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:3A:98:E7:EE:A2:68:A1:08:4A:F6:2C:ED:37:B8:81:31:0C:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HDk6mOfuomihCEr2LO03uIExDPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:61:66:2b:4d:14:29:57:a6:5b:d4:30:e4:c5:b7:e8:bc:b9:
b1:d8:2a:c8:00:8d:4c:c5:ca:b2:d1:65:49:40:f1:68:12:e9:
1d:a0:4e:53:c9:dd:87:8e:02:30:f2:f7:1b:4b:00:87:1a:6f:
19:20:4f:3f:69:c6:70:8b:4f:38:78:1c:9d:56:fe:22:61:ec:
e8:37:77:44:13:78:1b:e1:91:36:3d:60:5c:fe:92:25:ca:16:
5b:7b:48:62:92:8a:f4:ea:e8:69:b5:b8:e6:5a:7e:35:1b:4f:
a2:80:a1:fe:81:f2:4d:ea:9f:8e:2f:48:25:4f:dc:c0:ca:3c:
1f:06:f6:14:eb:c1:c2:b7:86:1e:8b:cc:04:b6:93:03:a7:09:
ce:ff:78:53:32:7c:ec:aa:c4:8f:45:f3:4c:cc:4c:8a:8f:11:
aa:85:3b:9b:4a:13:80:69:76:87:1b:1f:5f:46:15:f8:22:07:
e1:fc:57:21:d5:c7:1d:1e:ca:d5:0d:bd:f8:5c:d7:95:1a:11:
1d:30:ce:07:07:33:84:bb:63:6b:3e:1e:05:27:da:24:32:29:
7d:b3:a0:ca:4e:f9:5a:a6:28:11:d0:c1:f9:9d:49:37:80:8d:
96:00:c4:3c:dc:8b:3e:aa:d1:eb:77:61:ce:94:04:35:dc:6c:
67:14:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:18 2025 by rpki-client