Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HPof6mersRBq3ZcF56WCmsrYexQ.roa
File: HPof6mersRBq3ZcF56WCmsrYexQ.roa (raw, json)
Hash identifier: AXbJk90Syz6IfouNGy9+sDFjrCjNiSDHZ1i8tuQ9vR0=
Subject key identifier: 1C:FA:1F:EA:67:AB:B1:10:6A:DD:97:05:E7:A5:82:9A:CA:D8:7B:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885BD4601D4CE4B6A08181353F6FB59B16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HPof6mersRBq3ZcF56WCmsrYexQ.roa
Signing time: Sat 27 May 2023 06:10:24 +0000
ROA not before: Sat 27 May 2023 06:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:d4:60:1d:4c:e4:b6:a0:81:81:35:3f:6f:b5:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 06:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cfa1fea67abb1106add9705e7a5829acad87b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:f0:ae:0b:81:74:ec:e1:eb:34:9b:a8:0f:
51:c9:ac:b5:0a:28:0f:a5:7f:e7:72:d0:ea:c2:c1:
24:44:dd:fc:ee:5b:9d:99:91:50:e1:c4:01:ed:be:
ab:6e:40:3e:0a:0d:0b:60:8e:54:a4:35:da:3b:08:
16:83:0e:5b:64:38:d5:df:50:c8:33:43:a6:fd:18:
f1:47:2e:83:db:11:ec:bc:9c:1e:ca:30:ec:99:e7:
9a:38:ba:d0:10:4a:63:19:d1:8a:96:46:e0:7a:68:
8e:b2:46:a2:39:43:dd:e8:5f:fa:2b:fc:c9:13:ee:
92:c0:e2:c9:4d:5a:a7:58:22:f7:c4:80:0e:ac:a9:
42:8b:40:17:bd:22:3d:b5:e6:12:d9:23:77:a0:ea:
73:9e:50:46:48:9e:be:a2:3e:a2:c1:0d:b1:eb:3f:
d9:32:94:14:ab:d0:fd:87:61:0b:39:d1:25:a1:ae:
e8:0b:d4:b7:eb:97:46:6d:49:83:f0:8c:66:45:cb:
4e:21:25:6c:ed:a0:11:72:23:4f:1e:ec:fc:be:2a:
a9:49:2d:65:75:41:aa:a4:b0:f1:14:07:fc:31:6d:
d4:dc:21:73:94:c1:40:7d:0d:4e:8d:68:5c:c2:59:
b5:fb:4d:66:ca:54:38:4d:ab:51:5a:e5:2d:42:a4:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:1F:EA:67:AB:B1:10:6A:DD:97:05:E7:A5:82:9A:CA:D8:7B:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HPof6mersRBq3ZcF56WCmsrYexQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:bc:d5:0a:23:16:a7:be:8e:cf:f4:64:f4:12:19:f1:cb:99:
34:02:81:da:08:4d:cb:2e:fa:9f:61:17:a2:24:ec:3a:5c:02:
47:f6:76:64:d7:e0:6d:19:5a:98:28:c2:92:7f:b2:f1:2b:70:
12:a4:7e:78:98:f1:ea:e2:e7:5a:8e:3a:04:c2:e3:55:db:59:
c1:1e:37:b7:40:4e:92:34:93:e2:db:44:5e:d9:80:34:72:3e:
05:10:a4:7e:77:db:88:d4:e6:41:fd:74:55:ed:57:8b:71:07:
bc:df:e0:86:28:c3:32:fb:b2:a3:ba:b2:1d:f1:73:63:4d:d8:
3d:02:a5:2e:96:94:a0:32:40:89:d8:de:9b:4b:d2:d3:46:03:
38:6e:28:9e:e2:4a:aa:17:f2:cb:ee:f5:7d:a3:59:10:5e:f3:
e0:20:5c:d8:03:04:bc:5b:1e:d3:b0:43:7b:e2:3c:be:57:bc:
33:43:c4:16:d7:eb:68:40:5f:5a:9a:d7:28:f9:36:29:3c:38:
ce:57:b5:10:21:f5:22:39:46:6e:be:60:aa:c2:19:11:bc:94:
e1:d4:a0:32:4a:3c:46:9d:d1:b6:a8:e2:ac:9f:3e:ae:4c:e4:
90:ca:e1:49:d9:24:0d:6f:f6:1e:76:4d:f6:ce:9d:86:b7:f5:
17:09:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:52:02 2025 by rpki-client