Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HIm9c5YAe479nZx_41-wf4e1eSQ.roa
File: HIm9c5YAe479nZx_41-wf4e1eSQ.roa (raw, json)
Hash identifier: 2NCJwrxlZ5qFxp5+tMsvdJ9w6H9RWxFoFkDmOyPVozw=
Subject key identifier: 1C:89:BD:73:96:00:7B:8E:FD:9D:9C:7F:E3:5F:B0:7F:87:B5:79:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182463213CBCC2025FEFC821A6212FB6EC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HIm9c5YAe479nZx_41-wf4e1eSQ.roa
Signing time: Thu 28 Jul 2022 19:04:23 +0000
ROA not before: Thu 28 Jul 2022 19:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:4632:122f/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:32:13:cb:cc:20:25:fe:fc:82:1a:62:12:fb:6e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 19:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c89bd7396007b8efd9d9c7fe35fb07f87b57924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:60:81:e2:3e:54:65:ce:a1:85:56:03:e4:
39:21:1f:64:c0:50:8d:15:f6:82:1d:5f:96:e2:f6:
9d:ae:84:93:6b:87:33:7c:7d:f8:16:c9:cc:3f:6b:
97:92:47:96:26:2f:8b:9c:b0:f0:9a:78:bd:65:99:
8a:9c:c7:e8:b3:38:10:79:6c:dc:cd:5f:61:a0:7e:
12:e5:8e:c9:54:47:3a:a7:3b:74:77:3c:60:1d:85:
3e:3b:85:f7:ca:0d:f6:49:9c:c5:1f:13:27:1d:36:
b0:8f:5d:23:d3:27:df:75:c1:45:cc:c6:ea:dd:06:
c6:b4:01:06:4f:80:87:70:12:bb:e8:b5:c0:a4:b7:
93:54:b2:a9:fd:8c:25:4a:bd:53:1d:a1:16:ae:e9:
f2:63:d8:6f:d0:ae:b3:f8:36:4e:f9:6d:d2:c9:c4:
3b:34:af:66:e4:53:ef:30:af:55:50:90:ed:1d:06:
9b:ac:68:a1:27:21:5c:ae:e4:9e:40:54:aa:6c:f2:
a6:5f:51:b7:30:ab:40:d2:cb:d0:64:c1:62:0d:c3:
98:19:32:15:a9:0b:4b:3f:ac:ef:af:d6:be:30:13:
12:a1:78:82:b8:7a:28:05:ac:80:8a:c9:b8:18:8a:
eb:1f:8b:cd:28:a3:61:62:76:1b:16:f3:85:c4:13:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:BD:73:96:00:7B:8E:FD:9D:9C:7F:E3:5F:B0:7F:87:B5:79:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HIm9c5YAe479nZx_41-wf4e1eSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:a0:9c:51:90:9c:a6:58:75:bc:86:be:c8:2a:8e:dc:21:2e:
60:db:5f:3d:e7:82:54:5a:75:e8:4e:e4:17:06:23:b3:e1:e5:
f1:f2:db:1d:0a:d3:aa:7c:08:2a:48:fa:a9:c3:16:7a:7f:a6:
07:53:64:75:6b:f3:4b:82:43:f2:fb:56:1f:4c:93:20:12:78:
c4:c1:d4:a2:ba:be:8f:ec:2b:51:5c:73:a7:c6:73:2c:1b:6b:
0a:87:08:2f:69:be:b5:7c:64:5d:59:4a:0e:63:65:28:85:21:
53:3c:69:ca:40:18:cc:c2:d9:92:4f:d7:4e:f7:2c:10:cb:29:
4a:03:57:17:bc:53:64:42:d7:9f:e3:2a:c8:1f:26:f6:ce:04:
9a:e4:ae:3d:8d:70:47:52:b8:6b:4e:84:9b:71:89:e5:e8:cd:
f3:b6:ab:cc:0f:ac:b5:3b:cd:08:f4:63:67:ad:0a:4c:ed:e7:
74:57:10:73:85:f4:e9:db:13:f6:b2:96:07:a6:7a:c8:49:c9:
df:c5:dc:b6:08:0a:72:94:72:03:30:4c:66:e3:da:c3:15:ec:
b4:1c:f4:ae:da:fb:ed:5e:32:97:c0:10:3a:ce:6a:d6:ba:21:
af:b8:c6:5c:89:c9:07:cf:63:80:6b:51:4d:6a:ec:11:b2:d2:
de:de:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:56 2025 by rpki-client