Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLdeyCFuDn3mcVl1LFWX2tj6ZJw.roa
File: HLdeyCFuDn3mcVl1LFWX2tj6ZJw.roa (raw, json)
Hash identifier: Qr+2T362p8N2KGbA/MSwzRbIrb6gGthh4x+zlpAtGRk=
Subject key identifier: 1C:B7:5E:C8:21:6E:0E:7D:E6:71:59:75:2C:55:97:DA:D8:FA:64:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C11CB43B7E369B32EB8759369813B054
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLdeyCFuDn3mcVl1LFWX2tj6ZJw.roa
Signing time: Thu 15 Jun 2023 22:11:03 +0000
ROA not before: Thu 15 Jun 2023 22:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:1c:b4:3b:7e:36:9b:32:eb:87:59:36:98:13:b0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 22:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cb75ec8216e0e7de67159752c5597dad8fa649c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:bf:bd:c7:4c:58:5a:8d:b9:92:a2:f3:d9:
b7:84:c2:e9:f8:93:b5:cd:e1:d5:e8:46:6d:64:a5:
f6:5e:04:64:e8:c9:98:ef:97:22:89:6e:ba:e8:78:
11:37:87:00:ac:48:c5:7c:a3:b2:a3:8d:95:b7:df:
4b:7f:32:81:de:f1:97:6d:ec:ab:c1:8b:06:d3:0a:
35:88:d5:41:10:27:ae:d1:db:ab:ec:34:39:d0:4b:
11:37:cd:51:28:3c:bb:e3:ae:e7:12:c6:2b:5b:04:
7c:67:42:7d:60:99:03:72:c5:9d:94:6c:58:47:c9:
eb:2b:b0:ea:14:69:15:20:5c:3a:9d:f3:48:5c:39:
7f:f4:29:b8:56:b0:ba:69:da:4e:c4:99:37:69:68:
de:d8:41:2b:a2:17:8c:c7:7e:e0:23:74:89:28:a6:
00:0e:87:80:04:37:f8:2e:09:ec:0c:e2:e6:f7:fc:
f2:49:8a:2f:e9:2a:fd:43:51:ab:47:20:e9:f0:71:
55:93:df:07:aa:ec:34:a8:08:ea:ae:3e:61:f0:35:
0a:ec:82:c3:b2:3f:2d:7c:39:63:6f:47:79:68:70:
2b:ca:e0:df:d5:ec:58:e0:eb:c7:99:3e:ee:40:82:
4d:e8:41:64:5c:57:26:72:96:d4:85:9e:7a:2c:1e:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:5E:C8:21:6E:0E:7D:E6:71:59:75:2C:55:97:DA:D8:FA:64:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLdeyCFuDn3mcVl1LFWX2tj6ZJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b9:9e:15:0a:64:05:19:3e:31:bf:c0:46:a4:b5:38:bd:4c:
ec:94:18:b3:9d:dd:d5:be:6c:25:1e:3c:98:1b:7d:f7:9c:2d:
2e:f4:83:5d:76:7f:32:ba:8c:12:57:32:8e:1b:69:38:90:b9:
1c:3c:0a:2c:ef:cd:db:d4:44:c1:41:09:5e:5e:5f:df:c6:76:
69:93:62:f5:73:03:82:8d:d0:ef:ab:e5:e0:6a:53:c1:5d:71:
44:40:ed:32:cd:45:01:77:05:93:b6:7b:07:53:4e:4c:ce:88:
2c:8b:48:d8:46:5e:9a:8d:dc:66:eb:b8:bb:61:d3:4d:91:7b:
c5:cc:94:45:ba:96:d4:0b:48:99:d4:fb:f6:fa:ca:b3:1b:59:
34:ae:01:64:d5:4e:97:83:4a:e1:5e:8c:0e:85:9c:f3:8c:1d:
65:76:7f:75:6b:28:34:d5:16:b2:2c:34:34:19:e2:65:f3:ab:
b6:19:41:83:f1:a8:03:06:76:76:d9:68:dd:11:3d:a7:80:eb:
62:c4:a0:2f:91:d5:89:80:4c:7c:31:0d:5b:39:67:5b:92:32:
e3:5a:df:ab:89:a6:54:db:c3:47:ec:b1:33:61:a8:65:9d:c2:
fe:0e:6f:0f:26:fa:39:9d:35:22:5c:30:8c:cd:29:23:e5:a9:
9b:f8:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:17 2025 by rpki-client