Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJdbmQczu5TiE35VfHydEw7FhIs.roa
File: HJdbmQczu5TiE35VfHydEw7FhIs.roa (raw, json)
Hash identifier: BewoKb0f7N9BGftL7lt/33j92v/0O0GuXppM71Hmcy0=
Subject key identifier: 1C:97:5B:99:07:33:BB:94:E2:13:7E:55:7C:7C:9D:13:0E:C5:84:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FD719F2A64034DF30A4E93486541AF54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJdbmQczu5TiE35VfHydEw7FhIs.roa
Signing time: Mon 20 Mar 2023 05:15:27 +0000
ROA not before: Mon 20 Mar 2023 05:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:71:9f:2a:64:03:4d:f3:0a:4e:93:48:65:41:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 05:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c975b990733bb94e2137e557c7c9d130ec5848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:51:d3:f8:c1:7c:bb:73:17:48:bd:56:07:
d9:3c:7d:51:12:a3:7b:8a:1e:3d:af:1a:09:43:3f:
4b:76:ef:52:73:9e:c0:aa:b2:77:57:0b:51:cd:b7:
59:78:ac:88:a7:21:56:06:e7:48:6c:41:7f:33:15:
f6:c2:fe:7e:9f:90:d1:3d:61:05:ad:33:5a:ef:70:
c4:46:7a:c1:29:af:1b:cd:48:51:0d:48:ba:2b:83:
33:29:5f:75:e1:84:6c:8b:05:90:06:2d:5f:cf:42:
1d:33:bc:73:49:16:cb:5a:8b:74:0c:34:79:c2:44:
d8:19:44:de:7c:b5:92:48:05:32:ca:67:d2:e1:df:
da:11:b7:9a:4c:13:7b:bf:aa:89:af:60:11:a2:ea:
f5:1b:43:b2:3a:47:f6:d3:73:c0:21:58:ed:4b:47:
7c:5a:b8:6f:13:23:81:f5:36:03:db:28:1b:d8:13:
42:c1:3f:cf:16:33:d4:7a:3d:d1:43:52:e4:3f:20:
95:8e:c9:92:0f:5b:77:a0:a5:06:bc:79:2b:22:3d:
08:da:e3:e7:ee:fe:ff:f5:88:8f:fa:a1:d6:79:72:
4a:e9:73:03:1c:21:94:51:75:5e:15:89:07:69:60:
13:ea:5d:ae:d7:34:c2:05:04:91:05:01:80:a7:1d:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:97:5B:99:07:33:BB:94:E2:13:7E:55:7C:7C:9D:13:0E:C5:84:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HJdbmQczu5TiE35VfHydEw7FhIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:f3:3c:1a:54:61:9c:9a:ff:01:fc:f9:ff:fb:32:06:81:f9:
29:d4:a9:70:66:93:eb:9f:c7:7e:86:2f:84:1d:e9:d9:0e:6a:
e9:da:e9:ab:88:a5:17:e1:38:f2:0f:65:2f:53:32:91:e4:23:
1f:cb:9d:f7:aa:c4:68:47:16:f9:07:92:de:02:40:c4:15:d9:
61:7e:27:f3:e4:c5:9d:3b:ff:3f:af:f8:f8:d1:fe:39:4a:83:
70:3d:92:09:5b:0b:aa:5f:17:38:7b:66:f2:1e:96:17:ba:c8:
cd:30:da:7a:aa:b7:db:5e:9c:7f:04:45:38:e4:41:ee:a1:40:
8a:a5:12:47:ec:58:93:ff:44:5e:90:1a:74:cd:a8:b6:ca:38:
d7:70:30:d7:70:5d:1c:2d:c5:1b:d2:9f:93:78:bf:05:9f:20:
ab:62:f7:5b:ef:86:bc:cd:a7:7f:2e:79:4e:05:70:4d:15:80:
2c:46:38:78:47:5f:60:16:ac:30:55:14:31:9c:36:74:1b:be:
61:b0:5c:fa:26:a2:0e:3a:ea:5a:b9:13:27:39:b6:ef:26:fc:
91:10:53:5a:74:01:8e:c0:34:11:31:52:a0:22:56:af:0d:10:
5a:d8:af:a3:38:8c:71:e6:0e:0e:15:da:f0:d8:dc:f1:c2:fb:
54:9f:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:59 2025 by rpki-client