Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLYw08Y88pMpfIfJAOSxNsLU1F0.roa
File: HLYw08Y88pMpfIfJAOSxNsLU1F0.roa (raw, json)
Hash identifier: qSmnjTIv1sE3XyOHncYVG4dgkJiqO6octmfOWGGPvIw=
Subject key identifier: 1C:B6:30:D3:C6:3C:F2:93:29:7C:87:C9:00:E4:B1:36:C2:D4:D4:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F7D419CC9D9608FA77B36BB987260A31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLYw08Y88pMpfIfJAOSxNsLU1F0.roa
Signing time: Sun 07 May 2023 20:08:05 +0000
ROA not before: Sun 07 May 2023 20:08:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:d4:19:cc:9d:96:08:fa:77:b3:6b:b9:87:26:0a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 20:08:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb630d3c63cf293297c87c900e4b136c2d4d45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b1:2e:ca:67:a8:07:ad:99:af:33:c8:fc:
69:ad:75:06:d0:ee:d5:3a:3c:9a:02:5d:a2:23:cb:
5a:06:a4:da:a0:85:a5:52:92:b9:bb:85:dc:2c:e5:
83:3c:13:e9:64:6b:03:53:6b:0c:b0:c3:93:28:74:
6b:2b:02:e2:a4:15:08:5e:41:b0:90:5e:bd:94:c5:
aa:63:ee:d8:64:15:b8:88:e7:c8:fe:e3:fa:0c:f6:
e6:cb:e5:07:2c:60:48:3f:1c:1c:01:02:e4:34:45:
02:10:81:6e:c6:09:95:bb:6d:0c:f7:d3:f7:43:67:
a5:76:72:71:a9:7e:ea:6e:f9:72:88:7c:de:3a:40:
70:57:e0:34:80:a5:c5:fd:62:69:84:18:3c:8e:f8:
2f:18:dd:25:a1:af:bc:ec:a4:86:57:45:1c:6d:5d:
5f:f7:7e:16:cf:33:22:77:51:a2:5a:d4:5a:23:20:
b8:c5:d8:92:2a:61:85:0c:20:37:66:39:06:83:ce:
8b:22:90:16:9e:cf:81:f4:ec:d0:e1:6f:40:20:05:
4b:92:82:ec:41:9d:05:ac:4d:12:20:27:30:57:aa:
0a:47:c4:f1:45:70:84:60:12:b2:68:d3:da:b3:d2:
2f:b2:c3:f2:f7:d5:84:f3:bf:95:8c:c3:51:98:c5:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B6:30:D3:C6:3C:F2:93:29:7C:87:C9:00:E4:B1:36:C2:D4:D4:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLYw08Y88pMpfIfJAOSxNsLU1F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:96:70:2a:26:20:b7:46:dd:1c:fd:95:a2:3b:82:45:be:6e:
a9:48:27:17:d6:bc:59:0e:24:0e:b5:6e:99:0d:f0:f9:52:24:
1f:e6:0b:7b:fb:f1:c1:c2:84:06:09:21:b5:b3:d5:07:0e:01:
cb:38:a7:54:fa:6a:7f:35:1b:22:dc:f8:87:40:b0:46:8b:5a:
63:03:43:c0:f7:1a:d4:67:b6:33:12:1d:8c:d1:f6:d3:41:eb:
db:1e:47:79:43:04:5e:30:7d:3f:f9:2d:56:72:91:aa:e7:7a:
69:20:be:7c:68:0d:ad:5a:10:25:26:bb:d4:aa:c9:5e:93:64:
fb:5a:76:fa:71:89:1d:97:4b:b8:19:cd:14:83:ba:88:7f:65:
87:77:64:79:9b:eb:d3:cb:92:18:a1:dc:6e:12:0a:87:27:1e:
df:0b:70:b0:4b:d5:80:26:71:67:e2:a2:93:c0:d7:aa:de:8a:
9d:f7:0c:67:d4:86:f0:2c:f2:17:8a:0d:1b:45:1e:2f:13:1f:
14:a7:6e:99:f0:c1:98:e0:ab:d4:61:46:da:f2:12:d8:4f:56:
52:b3:12:e5:b5:24:59:fd:8d:a3:6d:ac:eb:28:ed:ca:20:bc:
f1:c7:e5:34:1d:c2:4e:7d:cc:e1:54:46:bf:3a:93:48:f2:9d:
5c:20:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:34:32 2025 by rpki-client