Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HK7Sif-Sao0pmrsqLJwH6DA6Qtk.roa
File: HK7Sif-Sao0pmrsqLJwH6DA6Qtk.roa (raw, json)
Hash identifier: gRMO0F/r/kWFBdzhoHRGuzzeRRP5wGwNutCMVSr25Eg=
Subject key identifier: 1C:AE:D2:89:FF:92:6A:8D:29:9A:BB:2A:2C:9C:07:E8:30:3A:42:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841320E3E2944CE98C40588BD3A2EBB88D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HK7Sif-Sao0pmrsqLJwH6DA6Qtk.roa
Signing time: Wed 26 Oct 2022 07:10:33 +0000
ROA not before: Wed 26 Oct 2022 07:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:20:e3:e2:94:4c:e9:8c:40:58:8b:d3:a2:eb:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 07:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1caed289ff926a8d299abb2a2c9c07e8303a42d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:a0:6e:bb:e3:ea:55:0c:8d:ac:f6:9f:ec:
fa:98:3f:1e:ee:db:67:2e:21:2a:b9:e3:c5:e2:28:
3a:8c:fd:d5:07:25:46:84:5d:de:f9:3e:c0:b8:45:
71:e9:18:dd:5e:2a:86:6c:b9:e5:bf:5a:ed:84:78:
84:f9:c4:b6:ba:73:b8:9a:6b:01:e5:83:61:4e:e3:
ad:dd:7b:4b:25:22:b8:67:3e:c1:15:7a:37:4b:f6:
8b:a7:cb:a7:4a:a3:db:6b:34:ef:92:27:8d:28:dc:
51:7a:20:01:ca:c8:94:db:c0:04:32:32:5f:61:4b:
e5:20:97:3c:e1:12:14:03:c4:df:25:16:77:b3:ff:
1c:98:95:29:e5:c1:82:bc:a3:36:a5:32:ba:fc:a2:
64:65:47:12:e1:3f:5f:87:20:ef:37:e4:31:92:11:
78:e3:ee:b8:b7:79:fb:a0:f0:59:5e:b4:8f:9f:d8:
83:6a:76:b9:34:f3:9e:ec:99:9b:d6:09:65:b0:c0:
2f:77:ef:de:22:85:95:b6:b5:21:3a:ea:f8:ea:5f:
44:45:2f:46:46:22:69:2d:33:4d:1b:0c:ab:84:e8:
73:4d:63:79:98:2f:f8:2f:f8:07:ac:62:13:80:e1:
82:3e:59:4a:19:a7:31:d9:f5:b8:1e:cc:f3:8f:a4:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AE:D2:89:FF:92:6A:8D:29:9A:BB:2A:2C:9C:07:E8:30:3A:42:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HK7Sif-Sao0pmrsqLJwH6DA6Qtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:9f:1f:da:35:5b:d2:d8:3b:11:58:e2:90:9e:51:a0:39:4e:
42:81:27:31:aa:41:b0:f6:73:9b:4c:9c:7a:19:0d:b7:5a:cf:
8b:e1:fa:a2:d0:93:d6:db:1b:31:9a:05:c2:da:34:0b:1b:7d:
30:2b:15:ec:f7:90:7c:8b:fd:b3:69:b3:a0:70:11:2f:6c:70:
87:93:5c:f9:f0:e4:1e:08:ce:7d:2f:eb:92:f5:89:1a:8b:7c:
2b:5c:f9:77:58:6b:c8:7f:db:7f:67:f0:0a:eb:0e:6a:45:f3:
56:b3:ac:f0:7d:85:fb:81:23:b3:51:e0:40:73:e6:01:d4:c4:
91:72:22:59:c4:3b:50:c3:9d:17:24:e7:03:1e:1b:63:96:4e:
c3:d5:fb:11:27:48:98:f3:2d:00:f2:ea:fb:69:db:92:56:27:
d1:2a:d7:c2:4f:43:81:cf:a7:0a:d3:23:74:a7:bc:a9:db:38:
8c:a0:6c:94:52:3b:06:f2:da:c4:4c:13:cc:19:9d:1c:27:c3:
d6:13:a2:ce:08:db:bb:62:88:a0:2f:b3:04:82:5e:68:6a:ff:
fc:08:53:a5:b2:a9:20:aa:6e:54:cf:99:e8:8c:54:0b:5c:60:
74:7a:2b:c0:81:fc:82:66:44:08:36:e9:8f:c0:60:51:0f:3c:
2d:62:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:35 2025 by rpki-client