Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HSJWEDd5XZ4Su651Xbv72fEnMaM.roa
File: HSJWEDd5XZ4Su651Xbv72fEnMaM.roa (raw, json)
Hash identifier: Zhj78o5nlRF0Jan84MwooDkwJTmJJUvVT3+If5i3w5g=
Subject key identifier: 1D:22:56:10:37:79:5D:9E:12:BB:AE:75:5D:BB:FB:D9:F1:27:31:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018761A16F1D40FC4B166DA91A4E4FD23DD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HSJWEDd5XZ4Su651Xbv72fEnMaM.roa
Signing time: Sat 08 Apr 2023 16:09:42 +0000
ROA not before: Sat 08 Apr 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:a1:6f:1d:40:fc:4b:16:6d:a9:1a:4e:4f:d2:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d22561037795d9e12bbae755dbbfbd9f12731a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:d3:53:41:88:10:01:ac:e9:20:f9:6d:1d:
15:de:c8:8e:e7:f3:19:28:3a:9b:9f:a7:f3:92:04:
18:ec:85:76:85:4b:2c:9e:3a:da:06:a6:bd:c3:4c:
6c:86:92:a2:57:72:4a:71:3a:2e:78:e3:7b:ee:f0:
6d:1b:49:d2:41:c3:bc:32:0e:64:89:ec:49:6e:4f:
bc:9c:3e:43:32:3d:e9:8c:98:8d:49:34:3f:38:36:
64:2e:e5:ea:09:a4:ba:b8:12:d1:74:ab:28:4a:33:
ce:e3:79:4c:16:b4:1a:b5:43:cd:e2:c9:22:24:58:
7e:73:7b:8a:c0:e6:00:0c:aa:0a:3d:c5:cb:6d:d2:
37:4c:27:ed:87:c7:7e:c3:97:46:88:7d:82:c3:a5:
44:c6:e0:26:a7:a6:e3:7a:d7:f7:1d:ef:67:bb:5c:
e9:3f:5a:bc:dd:cc:65:c0:29:3f:39:ee:d1:85:a3:
ce:69:9a:71:85:39:a6:22:aa:40:91:fc:3b:46:c0:
0b:f6:3b:14:e6:16:76:98:a4:2b:40:73:81:42:d8:
c0:b7:8f:65:3c:43:fd:bd:6c:85:1c:0a:6e:c4:39:
69:ec:3e:85:8f:c9:b7:50:ac:b1:03:4d:d1:cb:86:
ac:6b:1f:19:81:27:b6:78:83:72:4c:b6:75:a2:26:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:22:56:10:37:79:5D:9E:12:BB:AE:75:5D:BB:FB:D9:F1:27:31:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HSJWEDd5XZ4Su651Xbv72fEnMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:6e:b5:d3:bd:09:11:7b:43:62:76:69:a3:90:2d:04:f3:7e:
a9:88:8d:1c:7d:87:84:60:1f:be:5f:6c:18:8a:23:05:fa:e2:
5c:80:52:eb:06:67:64:1d:68:20:67:b0:c1:10:80:15:76:d2:
05:c6:17:3f:07:7f:4b:fe:21:78:eb:d7:29:6f:b4:cb:a3:b1:
5a:cc:a5:e8:c8:39:90:fc:cb:f9:38:fa:60:53:c7:d0:50:2c:
dc:c6:1d:45:bf:82:34:f2:c1:66:3d:59:1c:6a:22:ea:d0:42:
90:07:9d:33:63:15:06:25:d0:77:e5:47:63:b3:56:32:e0:09:
51:81:6c:c7:4a:d3:6d:6e:e2:e9:a8:47:97:17:b2:84:94:34:
b4:f8:6b:ce:96:5f:6c:00:81:3f:6a:76:52:d3:de:a5:06:86:
c6:3a:53:77:4b:8b:45:4c:b8:02:13:0e:9e:f7:e9:5f:95:07:
07:3c:9d:66:bd:c9:bb:42:43:74:76:5f:ed:6d:5f:0d:16:84:
30:f1:ac:0d:c3:0e:de:3c:9d:7a:32:76:5f:97:c2:72:b4:66:
3b:70:64:7f:c7:08:43:c8:10:14:5f:96:98:80:81:72:1e:58:
00:5b:d4:36:77:10:00:b7:aa:04:38:31:1f:21:0d:35:32:16:
d4:be:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:39 2025 by rpki-client