Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHHdUW5KW79eNJxbUmDFsG-BZIs.roa
File: HHHdUW5KW79eNJxbUmDFsG-BZIs.roa (raw, json)
Hash identifier: szv/5Eo3G4WPJIhMU4jgsDrXDRJV6slCfvMl3zSXUkY=
Subject key identifier: 1C:71:DD:51:6E:4A:5B:BF:5E:34:9C:5B:52:60:C5:B0:6F:81:64:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875A56ACEC53E132C00EDAE2068BF1B6F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHHdUW5KW79eNJxbUmDFsG-BZIs.roa
Signing time: Fri 07 Apr 2023 06:10:42 +0000
ROA not before: Fri 07 Apr 2023 06:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:56:ac:ec:53:e1:32:c0:0e:da:e2:06:8b:f1:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 06:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c71dd516e4a5bbf5e349c5b5260c5b06f81648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:8f:ac:c3:6d:ec:dd:aa:97:4f:af:ee:89:
b5:15:71:1d:81:12:f3:86:c0:7a:65:09:ec:d4:ff:
38:bb:a4:74:0f:35:fc:08:ce:55:14:2a:cd:80:08:
7f:2a:d7:1a:77:d6:cb:76:b2:3a:55:4d:4a:c0:a5:
a9:d2:49:a8:61:f0:46:12:6b:d0:e1:54:f7:a4:84:
ff:f2:a6:27:5b:13:2e:8a:a2:fb:e5:78:21:b1:b8:
42:f2:b6:1f:4e:f1:a8:7a:05:85:70:fb:50:73:8b:
18:86:9f:5c:dd:11:a8:3c:fd:f5:4d:9b:3a:85:30:
51:fb:f6:e3:65:79:00:77:4e:d5:e6:b6:5d:70:bd:
4d:65:fc:eb:40:6d:88:92:ef:b9:a2:8c:24:49:c4:
cc:e2:26:72:78:a0:45:f5:6f:e6:48:12:f3:24:f3:
34:7f:61:b2:3a:73:fe:f8:8f:04:f7:66:6f:b9:53:
09:45:1b:1d:8f:e1:4b:92:a0:f2:34:81:b5:5a:c0:
d7:9c:16:68:39:4b:52:bd:79:04:74:71:d7:44:b3:
2a:ac:99:f4:f6:e6:b3:03:71:46:48:4f:d0:fe:b5:
03:02:7c:96:0b:51:47:24:52:1c:a2:a7:5d:f7:d2:
7e:84:60:8b:18:5c:4b:5c:44:c9:55:fe:3a:ec:4d:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:DD:51:6E:4A:5B:BF:5E:34:9C:5B:52:60:C5:B0:6F:81:64:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHHdUW5KW79eNJxbUmDFsG-BZIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ff:8b:62:cd:03:c7:ac:e2:69:56:d0:3d:54:72:80:67:5d:
04:88:24:f5:d0:bc:a4:59:bd:d6:50:3e:05:67:c2:6b:f0:d4:
3d:0a:a0:c0:89:80:c8:e7:14:3d:5f:c1:b7:9a:66:75:8b:2a:
7c:e8:f0:d0:40:e9:a0:05:45:41:6d:cd:a2:a7:48:29:3f:fc:
70:6b:b3:54:6e:a8:6c:e2:a0:ca:4b:30:dc:2e:08:76:15:c2:
cb:68:c5:68:e4:0a:f9:18:d5:80:12:cb:89:e2:45:63:ed:b7:
e7:e3:29:80:26:38:c8:19:12:84:1e:26:12:fa:ff:20:12:e3:
e4:be:9e:54:66:3d:d5:81:c6:6f:63:c1:8d:f1:39:e2:88:17:
40:cf:51:57:3b:7c:44:5e:57:ae:eb:28:10:bd:2d:8a:57:83:
b4:74:2c:2c:65:60:8d:d7:2b:7e:c7:c3:da:56:1b:9c:0d:d7:
a2:26:a4:7a:49:a4:85:4a:1f:78:37:46:e3:52:95:07:d2:6a:
17:ca:e4:94:88:7e:1e:3b:d3:d1:8b:ce:dc:c0:ec:61:b8:c0:
33:38:d3:9a:00:2f:4f:bc:ac:f1:43:e9:f4:3b:cc:fa:fd:2b:
8e:69:9b:22:82:69:98:3a:91:fd:5d:d1:c5:68:0e:28:a7:da:
be:43:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:15:26 2025 by rpki-client