Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHoEE4F6DL_Pb7d1zrmFVHDazU0.roa
File: HHoEE4F6DL_Pb7d1zrmFVHDazU0.roa (raw, json)
Hash identifier: a+0FCvkQJoUCiCRKIoGdEAsRKt29PSnsKe/rCC9O4a0=
Subject key identifier: 1C:7A:04:13:81:7A:0C:BF:CF:6F:B7:75:CE:B9:85:54:70:DA:CD:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FB7EA8851FD86ECC838F1AF6B26F3328
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHoEE4F6DL_Pb7d1zrmFVHDazU0.roa
Signing time: Sun 19 Mar 2023 20:10:27 +0000
ROA not before: Sun 19 Mar 2023 20:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:7e:a8:85:1f:d8:6e:cc:83:8f:1a:f6:b2:6f:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 20:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c7a0413817a0cbfcf6fb775ceb9855470dacd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:ea:0e:ef:ca:fc:d4:c4:a0:7c:12:fb:9a:
2f:01:d6:05:23:f9:d8:cc:f8:10:a2:63:45:ab:5c:
5e:af:c5:8d:9c:df:71:e5:37:c9:dc:6d:c1:30:42:
9f:40:28:1c:54:50:76:78:d2:7e:97:e4:b7:82:fc:
72:28:3f:76:9c:42:bb:d0:67:d6:7f:6c:a3:04:64:
d3:53:53:23:4e:be:c7:35:d6:96:86:4a:1c:a9:58:
88:74:4e:2c:9f:6a:a7:0a:55:80:77:75:46:ab:c0:
ee:88:10:30:ef:cd:b4:01:10:d3:b8:2c:0f:5a:c3:
1d:a4:f6:cc:3f:50:a4:41:f3:be:14:7c:c9:ba:61:
5d:ff:44:f1:6b:b7:7c:c5:c7:fa:97:2b:be:d4:d0:
ac:59:3c:cf:05:34:71:79:9f:eb:70:84:ca:b0:d9:
31:53:ef:d5:7d:f5:65:fb:a8:8d:14:1c:d7:90:b0:
13:4c:c3:9f:39:cc:86:ea:64:96:9e:6d:44:df:23:
7e:54:fe:54:9a:29:a1:5c:6c:37:ee:3d:c3:0d:07:
66:f0:74:70:a2:0d:dc:2e:3e:ec:43:f3:77:65:25:
ce:ff:3e:b4:1c:e2:53:60:5d:c6:89:31:39:0f:2f:
60:b5:02:2c:b6:72:77:8f:cc:23:a7:a9:9b:de:72:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:04:13:81:7A:0C:BF:CF:6F:B7:75:CE:B9:85:54:70:DA:CD:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HHoEE4F6DL_Pb7d1zrmFVHDazU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:39:bb:c9:56:6a:14:7e:2b:3a:3e:ce:cf:bb:e8:24:8d:93:
39:82:74:29:c9:18:79:b0:40:80:87:71:28:8a:79:ef:b2:59:
6e:dc:81:de:7d:ab:a7:f6:20:9b:62:9c:37:15:19:3c:1f:8b:
e2:18:3b:c2:41:10:f6:d2:7f:a0:fe:2f:8f:96:8f:63:63:b1:
ed:42:d5:9a:a2:c8:dd:11:ab:d4:3b:02:0a:79:a4:cb:6d:3c:
c6:0c:84:30:0a:2f:e9:cf:a2:cc:1d:df:39:3f:29:f0:63:bf:
27:c1:f7:2b:4c:b9:5d:90:80:ae:07:b6:b1:d2:10:07:14:86:
ef:f9:58:0e:c6:63:48:4d:c9:68:c8:44:8c:f8:e4:2f:e7:db:
41:d5:75:fd:4d:ce:3e:1e:3e:82:12:27:4a:b1:42:e3:d7:dd:
e4:22:d6:61:a1:2a:76:d1:4a:5c:36:89:15:15:b9:09:53:8f:
5b:71:b5:91:34:54:fb:7f:2b:c2:aa:50:0a:51:7c:8b:48:58:
46:cc:da:70:f1:e0:95:cc:2e:08:c3:38:69:38:7e:44:61:3d:
be:e0:56:6f:11:20:7d:32:85:ad:03:69:fb:76:69:8b:99:1c:
56:8e:53:02:83:e1:97:e6:7d:37:c8:8a:41:df:40:ef:e1:c0:
48:c6:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:19:59 2025 by rpki-client