Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJbXj3BXMLJ0xD9OWO8pJFeNEYA.roa
File: HJbXj3BXMLJ0xD9OWO8pJFeNEYA.roa (raw, json)
Hash identifier: le2RKUbJrunGEFBRDkPmqWnniPJD+B3VMe0CQtoUoKU=
Subject key identifier: 1C:96:D7:8F:70:57:30:B2:74:C4:3F:4E:58:EF:29:24:57:8D:11:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188427DDC73E7257032CBA143986479BCEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJbXj3BXMLJ0xD9OWO8pJFeNEYA.roa
Signing time: Mon 22 May 2023 08:05:24 +0000
ROA not before: Mon 22 May 2023 08:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:427d:1e0e/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:7d:dc:73:e7:25:70:32:cb:a1:43:98:64:79:bc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 08:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c96d78f705730b274c43f4e58ef2924578d1180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:87:b6:83:08:fc:f9:56:ce:b1:74:97:9e:
46:f6:e1:b7:c2:9b:50:20:8c:81:57:43:bb:cd:66:
2b:6c:c9:f9:20:0b:29:14:a8:36:1d:c3:73:9f:dc:
56:d2:d2:82:25:05:b0:d4:5e:50:ae:94:bb:ff:40:
80:81:f1:be:45:d0:5e:59:a3:11:f7:4c:d3:c6:a4:
5f:32:03:4b:9d:9d:be:85:f2:e2:21:f8:97:b5:85:
02:d8:ff:8c:77:de:93:51:55:1a:68:02:77:c1:89:
69:f9:c3:9b:7d:0d:08:55:56:10:bf:c3:db:a2:e8:
84:92:6a:ee:6f:1f:cb:4f:71:76:20:31:48:cc:08:
1c:f8:5d:ab:e4:66:03:2c:29:85:68:79:85:69:76:
78:cd:c0:b2:4b:62:25:48:74:fd:92:47:fb:3e:1d:
7e:87:46:f4:e7:58:75:06:ab:56:d0:8e:37:a5:3e:
3b:3b:21:23:21:6c:03:2c:2f:d7:e8:cb:f3:85:97:
c4:9c:e3:70:86:3b:e9:8d:9b:16:32:f8:dc:9c:e0:
65:40:e6:4d:96:59:55:41:21:b7:48:e7:e3:63:6c:
25:53:ff:88:f1:b6:31:15:97:35:67:92:f4:80:2f:
4d:2c:b3:8c:57:72:df:92:88:45:88:8b:da:d7:ca:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:96:D7:8F:70:57:30:B2:74:C4:3F:4E:58:EF:29:24:57:8D:11:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJbXj3BXMLJ0xD9OWO8pJFeNEYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:7e:df:93:6b:78:b5:fb:ba:de:a2:45:99:fa:95:c7:50:5e:
f6:e0:5e:fe:9b:ab:aa:b4:14:cf:89:bf:df:68:f2:12:02:60:
c6:99:5d:63:ef:6a:49:6b:55:61:fe:da:8a:f0:ad:3c:4c:77:
48:e1:a0:85:9c:f3:cf:a3:69:ce:f8:ed:1a:ca:eb:cd:35:c1:
58:30:62:4d:3a:1d:67:1c:94:08:48:17:e5:72:0e:21:4e:cb:
1f:89:05:2d:2f:e7:63:3a:32:cb:dd:13:08:ee:b9:67:4f:7c:
6a:f6:18:22:b4:42:9c:08:2e:dc:b9:1e:a0:8c:a5:66:58:40:
12:3d:05:94:63:df:12:90:86:53:05:16:2e:8a:81:08:d2:77:
27:b8:90:37:f7:82:78:38:81:62:49:af:92:54:25:1a:39:df:
ca:ae:0b:d4:36:d0:ce:3c:1a:10:2b:63:2d:42:e0:52:5d:93:
e1:31:b4:c3:5e:c8:92:16:2e:3f:be:1e:7b:92:fa:98:1e:f1:
8a:b2:41:72:a8:da:7b:b1:be:7e:9f:d5:62:5f:47:0f:a6:23:
b1:e8:43:af:33:6f:ad:88:79:28:90:0d:54:91:7f:c9:75:11:
16:d2:2e:e4:0b:19:43:19:66:e7:1e:8d:65:98:7b:bf:48:ad:
da:11:b2:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhCfdxz5yVwMsuhQ5hkebzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIyMDgwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzk2ZDc4ZjcwNTczMGIyNzRjNDNmNGU1OGVmMjkyNDU3OGQxMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeyHtoMI/PlWzrF0l55G9uG3wptQ
IIyBV0O7zWYrbMn5IAspFKg2HcNzn9xW0tKCJQWw1F5QrpS7/0CAgfG+RdBeWaMR
90zTxqRfMgNLnZ2+hfLiIfiXtYUC2P+Md96TUVUaaAJ3wYlp+cObfQ0IVVYQv8Pb
ouiEkmrubx/LT3F2IDFIzAgc+F2r5GYDLCmFaHmFaXZ4zcCyS2IlSHT9kkf7Ph1+
h0b051h1BqtW0I43pT47OyEjIWwDLC/X6MvzhZfEnONwhjvpjZsWMvjcnOBlQOZN
lllVQSG3SOfjY2wlU/+I8bYxFZc1Z5L0gC9NLLOMV3LfkohFiIva18pR/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFByW149wVzCydMQ/TljvKSRXjRGAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSEpiWGozQlhNTEoweEQ5T1dPOHBKRmVORVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJd+35NreLX7ut6iRZn6
lcdQXvbgXv6bq6q0FM+Jv99o8hICYMaZXWPvaklrVWH+2orwrTxMd0jhoIWc88+j
ac747RrK6801wVgwYk06HWcclAhIF+VyDiFOyx+JBS0v52M6MsvdEwjuuWdPfGr2
GCK0QpwILty5HqCMpWZYQBI9BZRj3xKQhlMFFi6KgQjSdye4kDf3gng4gWJJr5JU
JRo538quC9Q20M48GhArYy1C4FJdk+ExtMNeyJIWLj++HnuS+pge8YqyQXKo2nux
vn6f1WJfRw+mI7HoQ68zb62IeSiQDVSRf8l1ERbSLuQLGUMZZucejWWYe79IrdoR
sig=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:10 2025 by rpki-client