Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HOieZMAXYHQR_-RmmNocoF-x4rY.roa
File: HOieZMAXYHQR_-RmmNocoF-x4rY.roa (raw, json)
Hash identifier: ygA7RwoIShHZsKkMUNtRBXta0UcelaqcaEWYMwgRtNE=
Subject key identifier: 1C:E8:9E:64:C0:17:60:74:11:FF:E4:66:98:DA:1C:A0:5F:B1:E2:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C382FC7683B3B427F95787970AF21D39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HOieZMAXYHQR_-RmmNocoF-x4rY.roa
Signing time: Mon 22 Aug 2022 03:05:17 +0000
ROA not before: Mon 22 Aug 2022 03:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:c382:6319/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c3:82:fc:76:83:b3:b4:27:f9:57:87:97:0a:f2:1d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 03:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ce89e64c017607411ffe46698da1ca05fb1e2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:58:ff:6b:2c:e2:8a:d2:cc:b1:53:f7:07:
a0:a7:b0:4c:07:74:6e:40:b6:65:dc:01:65:11:b5:
a1:d2:c5:b3:f3:08:e4:d6:af:2e:d5:5c:91:46:e9:
51:de:ef:b2:d3:86:5d:68:35:9b:ab:54:97:09:b5:
f1:a1:ce:d3:60:61:0d:1f:49:82:60:53:cd:c3:4d:
c3:8f:ad:83:f1:f0:98:a4:a6:1b:75:a6:b5:1e:bd:
41:fb:6d:6c:07:cb:68:42:e5:df:a2:da:4b:b0:11:
81:1a:de:71:3c:f0:c7:b7:4e:c7:d6:21:d9:ae:f9:
32:2c:1f:d6:3d:da:9c:7a:26:a5:22:58:51:5a:79:
b4:4d:70:c7:ec:88:71:ca:cf:2b:17:24:f0:23:eb:
43:72:41:ea:17:ea:2c:ca:16:4d:64:57:9a:ed:50:
5b:ed:bd:90:0a:7a:ad:1c:e7:7a:ee:cf:71:06:69:
e5:71:5f:d1:fe:36:e7:d0:77:e4:58:39:0b:19:f4:
ae:9f:5a:66:69:55:43:e9:6b:8f:4d:af:00:06:0e:
d8:57:9c:db:3c:17:0c:6f:10:02:c3:f3:37:fd:cc:
65:aa:d2:5f:22:78:fc:b2:e2:c4:88:aa:f2:f6:96:
16:5b:19:71:66:08:e0:0a:a9:44:5d:64:f2:68:a4:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E8:9E:64:C0:17:60:74:11:FF:E4:66:98:DA:1C:A0:5F:B1:E2:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HOieZMAXYHQR_-RmmNocoF-x4rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:48:77:fd:c4:a0:33:cb:17:6f:8d:0b:3b:47:90:16:3c:ce:
df:6a:5c:ba:51:ff:34:e0:dd:71:61:8f:41:bd:34:78:d8:24:
37:32:20:c2:4b:ad:b1:52:fc:b1:4f:e2:79:f5:5e:cf:a6:2a:
7f:4d:9f:7b:1d:31:d9:a2:b8:af:3d:44:16:a1:b4:9e:4e:54:
dc:64:cf:d5:d5:70:67:d1:b1:8e:91:1a:60:f9:3c:f7:5a:56:
d5:5b:92:c1:a0:47:f3:82:7c:7a:2b:ee:ee:88:35:bb:5e:45:
0c:3e:06:90:ce:97:27:60:49:df:64:23:a9:0b:8b:45:fc:2b:
bd:32:5e:b8:48:f7:09:9a:ba:84:95:c0:e8:83:01:65:96:34:
e1:e6:3d:ff:b7:9a:c8:ba:f7:06:d3:df:bd:02:af:7a:0a:27:
21:ce:59:a5:3d:0c:a1:d9:9d:38:a8:4f:e6:1a:ad:b2:72:33:
01:6c:e8:b8:91:53:88:eb:bd:a8:10:e7:a1:62:6f:1a:f3:dc:
b2:c0:8b:8b:c3:1a:9f:62:c3:10:28:ca:90:52:9e:7d:1e:a6:
71:45:42:31:69:ca:a0:08:b0:4f:09:1d:54:c0:7b:4f:e2:59:
73:37:a5:70:36:d9:66:40:cb:2c:22:1c:ee:e9:e0:30:9b:60:
38:9e:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:26:13 2025 by rpki-client