Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLumuua3pbeFp3UwdhZn2I_ibI4.roa
File: HLumuua3pbeFp3UwdhZn2I_ibI4.roa (raw, json)
Hash identifier: 8OpMNxJ93+vWBiwrcQvtSpbUTdVa9O94TKHVnhlChWo=
Subject key identifier: 1C:BB:A6:BA:E6:B7:A5:B7:85:A7:75:30:76:16:67:D8:8F:E2:6C:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CB9F7346ABB56881F784958881E1298B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLumuua3pbeFp3UwdhZn2I_ibI4.roa
Signing time: Sat 17 Jun 2023 23:10:04 +0000
ROA not before: Sat 17 Jun 2023 23:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cb:9f:73:46:ab:b5:68:81:f7:84:95:88:81:e1:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 23:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cbba6bae6b7a5b785a77530761667d88fe26c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:5d:21:4e:2f:5d:57:14:39:bc:ea:1f:da:
04:01:6c:d4:d1:fe:0b:87:15:3f:ab:e1:63:90:5b:
5a:bb:c9:c6:7f:cb:8f:b3:46:bb:68:39:d6:10:c1:
d1:03:ce:43:94:c4:76:78:4d:25:f4:4c:a8:2e:42:
ea:69:b1:2f:25:be:25:cf:bc:0f:03:3b:68:16:b3:
d9:50:ae:18:f9:87:d0:a0:b0:1a:81:e6:d9:d8:bb:
58:95:ee:2a:1f:af:23:ea:af:a0:5e:ed:cf:fb:68:
aa:f8:1c:d7:2e:8a:26:ef:b3:a5:1a:be:24:4e:e7:
12:b0:4a:41:d9:4d:12:10:b5:6d:58:c1:b9:71:4d:
9c:6b:c1:c8:12:96:29:ed:e6:00:29:d3:89:bc:45:
e1:64:d2:4b:57:8b:06:25:ed:2d:86:d4:e1:42:8f:
c8:a1:86:27:c4:c0:3a:ca:c3:90:fb:b9:50:d4:f0:
b5:00:d1:54:cc:b9:ff:9b:da:16:e5:f2:1b:c6:f0:
d3:dd:8b:58:52:b6:77:04:10:73:13:c5:fa:e9:12:
8d:ad:68:dd:79:1e:dd:6c:8b:32:ec:f7:1b:4a:09:
c1:36:7f:6f:43:13:64:a8:4c:ef:7f:50:a2:12:f3:
19:38:5e:f1:9f:8e:b9:5d:5a:41:30:aa:d6:9a:82:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:A6:BA:E6:B7:A5:B7:85:A7:75:30:76:16:67:D8:8F:E2:6C:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HLumuua3pbeFp3UwdhZn2I_ibI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:de:ae:15:78:80:74:40:56:5c:22:57:c2:33:ec:ca:e6:ac:
d9:15:34:3a:e9:94:a3:f1:a4:fa:ce:e7:08:18:bf:e3:db:49:
a2:be:bd:5f:bb:d6:12:a9:cb:62:85:fd:9a:2e:50:cb:79:45:
b5:58:1e:1e:83:a7:6c:fe:b2:ad:2b:55:be:05:4e:b6:c4:23:
af:39:48:5c:0e:f3:a1:fd:20:98:a3:0e:d8:cd:2e:48:00:bc:
18:36:d5:89:61:31:fd:e0:ab:10:ab:47:d7:16:5a:7e:93:89:
80:f9:8e:77:57:1c:c1:83:8e:b1:72:83:40:f4:2f:ec:2d:35:
4f:5c:22:ee:e7:12:a1:63:71:a1:ac:f3:a2:52:7e:af:1c:99:
db:e2:c0:34:b4:68:14:28:41:aa:53:64:22:63:47:ab:4d:f4:
be:93:5d:f9:45:3f:80:ae:e9:c9:df:0b:b6:5b:9a:9f:8a:4a:
74:ed:5d:70:77:9c:15:a3:38:cf:56:4a:60:b9:86:04:df:4b:
20:57:df:14:35:b8:30:b4:c9:60:73:ad:b2:1f:64:b5:5d:11:
47:2c:6e:17:a6:95:f6:65:f2:40:72:e2:b3:d7:1c:cd:2a:86:
e8:29:5f:37:72:3d:c5:0e:fd:fa:8f:89:53:0b:ff:2a:c7:34:
13:22:75:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjLn3NGq7VogfeElYiB4SmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE3MjMxMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2JiYTZiYWU2YjdhNWI3ODVhNzc1MzA3NjE2NjdkODhmZTI2YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e1dIU4vXVcUObzqH9oEAWzU0f4L
hxU/q+FjkFtau8nGf8uPs0a7aDnWEMHRA85DlMR2eE0l9EyoLkLqabEvJb4lz7wP
AztoFrPZUK4Y+YfQoLAagebZ2LtYle4qH68j6q+gXu3P+2iq+BzXLoom77OlGr4k
TucSsEpB2U0SELVtWMG5cU2ca8HIEpYp7eYAKdOJvEXhZNJLV4sGJe0thtThQo/I
oYYnxMA6ysOQ+7lQ1PC1ANFUzLn/m9oW5fIbxvDT3YtYUrZ3BBBzE8X66RKNrWjd
eR7dbIsy7PcbSgnBNn9vQxNkqEzvf1CiEvMZOF7xn465XVpBMKrWmoKZDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBy7prrmt6W3had1MHYWZ9iP4myOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSEx1bXV1YTNwYmVGcDNVd2RoWm4ySV9pYkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFTerhV4gHRAVlwiV8Iz
7MrmrNkVNDrplKPxpPrO5wgYv+PbSaK+vV+71hKpy2KF/ZouUMt5RbVYHh6Dp2z+
sq0rVb4FTrbEI685SFwO86H9IJijDtjNLkgAvBg21YlhMf3gqxCrR9cWWn6TiYD5
jndXHMGDjrFyg0D0L+wtNU9cIu7nEqFjcaGs86JSfq8cmdviwDS0aBQoQapTZCJj
R6tN9L6TXflFP4Cu6cnfC7Zbmp+KSnTtXXB3nBWjOM9WSmC5hgTfSyBX3xQ1uDC0
yWBzrbIfZLVdEUcsbhemlfZl8kBy4rPXHM0qhugpXzdyPcUO/fqPiVML/yrHNBMi
dU8=
-----END CERTIFICATE-----
Generated at Thu May 1 10:03:28 2025 by rpki-client