Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HMed91iNzbls2Zyvh165dhT5oNM.roa
File: HMed91iNzbls2Zyvh165dhT5oNM.roa (raw, json)
Hash identifier: H5gkmQRfckEAOPhjpmDGNKJBjD7hBJYgShz/wosEjHA=
Subject key identifier: 1C:C7:9D:F7:58:8D:CD:B9:6C:D9:9C:AF:87:5E:B9:76:14:F9:A0:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B88F78F74395E0BC66784265D0989567
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HMed91iNzbls2Zyvh165dhT5oNM.roa
Signing time: Mon 16 Jan 2023 03:11:28 +0000
ROA not before: Mon 16 Jan 2023 03:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b8:8f:78:f7:43:95:e0:bc:66:78:42:65:d0:98:95:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 03:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc79df7588dcdb96cd99caf875eb97614f9a0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:2c:01:c1:53:7e:74:2d:02:01:ef:1c:8d:
16:73:c2:5c:6c:14:e2:80:bf:81:3d:ea:71:13:4c:
0c:7e:c2:7a:91:49:4b:e0:7e:fa:d8:e4:c5:b2:0e:
82:17:e5:f7:0e:9a:49:fd:8c:91:6f:08:23:36:10:
87:7f:05:66:3c:bc:b1:86:ed:95:f6:25:41:ac:07:
74:68:d2:7f:20:2c:af:a0:f2:ed:4f:82:9f:d7:d0:
e3:cf:57:79:c8:bf:08:72:f0:c9:a5:30:31:15:63:
be:59:bb:5e:e5:4c:e6:6c:98:44:12:24:d4:1e:fb:
e3:c7:d9:3e:b0:9b:73:8a:3b:e2:99:83:dc:79:11:
7b:f5:a5:ca:34:e1:45:15:e4:de:20:4a:2b:e0:0b:
ba:d4:ae:e5:8f:8b:7f:e5:d3:a6:8c:a2:68:f7:38:
19:40:75:51:e2:75:12:4e:95:ef:87:3a:23:76:d7:
f9:61:34:d6:c3:8d:9c:70:e5:aa:e9:91:dc:8c:cd:
d8:86:fd:c8:90:3b:97:b4:70:47:e6:9c:49:7a:44:
0e:d6:5d:97:7a:1e:b1:63:6b:64:f4:d5:78:8b:ef:
45:98:ff:24:2c:38:a3:b0:cf:2b:59:a8:46:97:50:
c2:ca:b4:21:d5:e9:4b:86:43:8f:00:e6:78:bc:d1:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C7:9D:F7:58:8D:CD:B9:6C:D9:9C:AF:87:5E:B9:76:14:F9:A0:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HMed91iNzbls2Zyvh165dhT5oNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:c4:aa:a2:62:36:12:d4:7f:01:59:4e:f6:71:57:bf:62:3f:
8d:5b:54:48:d5:60:b3:a1:c5:0b:13:c3:eb:09:fc:32:7e:4d:
20:f0:07:75:c3:b1:23:3f:82:2c:07:71:0d:44:54:c2:32:2c:
67:cf:2c:5a:68:8e:7a:7f:c1:b6:72:04:27:f2:b2:6b:00:92:
48:7f:7a:15:ba:be:7a:3a:dc:71:1e:30:4b:05:e1:b0:e8:be:
72:9d:0e:fe:ff:22:f4:39:eb:c2:3b:e5:09:8d:da:e2:45:32:
aa:a7:29:d5:04:43:71:eb:08:c2:09:1a:48:c6:36:a9:fe:56:
1d:ce:44:eb:c6:17:e0:8d:9c:b0:c5:7c:5b:7c:26:a3:f2:1f:
cf:b4:42:58:61:18:af:bf:a7:0b:63:a0:38:61:05:33:f2:cb:
71:7a:2d:9e:7d:bc:3b:f0:b7:93:de:e4:b8:dd:d7:bd:ad:ba:
43:6f:24:cc:f5:b5:2b:f6:90:1b:cf:f4:28:33:ed:c7:ca:89:
31:0f:1b:0e:64:0c:49:be:81:db:0e:b9:4e:08:01:2b:22:70:
5f:04:c4:8e:1d:34:33:62:3e:a8:20:39:11:de:9a:e2:f2:9e:
73:87:27:e5:87:f2:fc:ac:ab:fa:b2:31:9f:b2:a5:0e:02:22:
4e:32:4e:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW4j3j3Q5XgvGZ4QmXQmJVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE2MDMxMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2M3OWRmNzU4OGRjZGI5NmNkOTljYWY4NzVlYjk3NjE0ZjlhMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGosAcFTfnQtAgHvHI0Wc8JcbBTi
gL+BPepxE0wMfsJ6kUlL4H762OTFsg6CF+X3DppJ/YyRbwgjNhCHfwVmPLyxhu2V
9iVBrAd0aNJ/ICyvoPLtT4Kf19Djz1d5yL8IcvDJpTAxFWO+Wbte5UzmbJhEEiTU
Hvvjx9k+sJtzijvimYPceRF79aXKNOFFFeTeIEor4Au61K7lj4t/5dOmjKJo9zgZ
QHVR4nUSTpXvhzojdtf5YTTWw42ccOWq6ZHcjM3Yhv3IkDuXtHBH5pxJekQO1l2X
eh6xY2tk9NV4i+9FmP8kLDijsM8rWahGl1DCyrQh1elLhkOPAOZ4vNFPmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBzHnfdYjc25bNmcr4deuXYU+aDTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSE1lZDkxaU56YmxzMlp5dmgxNjVkaFQ1b05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABvEqqJiNhLUfwFZTvZx
V79iP41bVEjVYLOhxQsTw+sJ/DJ+TSDwB3XDsSM/giwHcQ1EVMIyLGfPLFpojnp/
wbZyBCfysmsAkkh/ehW6vno63HEeMEsF4bDovnKdDv7/IvQ568I75QmN2uJFMqqn
KdUEQ3HrCMIJGkjGNqn+Vh3OROvGF+CNnLDFfFt8JqPyH8+0QlhhGK+/pwtjoDhh
BTPyy3F6LZ59vDvwt5Pe5Ljd172tukNvJMz1tSv2kBvP9Cgz7cfKiTEPGw5kDEm+
gdsOuU4IASsicF8ExI4dNDNiPqggORHemuLynnOHJ+WH8vysq/qyMZ+ypQ4CIk4y
Tuc=
-----END CERTIFICATE-----
Generated at Thu May 1 07:22:59 2025 by rpki-client