Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HT0i4DhaGRJNOZJ0zu-PJUKvcao.roa
File: HT0i4DhaGRJNOZJ0zu-PJUKvcao.roa (raw, json)
Hash identifier: JsdyBkbrOfrtbn+t/a3YlMJAFSIp3NoIwbknaY4t4us=
Subject key identifier: 1D:3D:22:E0:38:5A:19:12:4D:39:92:74:CE:EF:8F:25:42:AF:71:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876C94C67CA6A100FB2FD164B3DD7A70CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HT0i4DhaGRJNOZJ0zu-PJUKvcao.roa
Signing time: Mon 10 Apr 2023 19:11:42 +0000
ROA not before: Mon 10 Apr 2023 19:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6c:94:c6:7c:a6:a1:00:fb:2f:d1:64:b3:dd:7a:70:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 19:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d3d22e0385a19124d399274ceef8f2542af71aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:4f:de:cd:c6:c2:0b:b4:32:03:79:e7:b4:
0e:57:37:ae:bc:cc:84:da:4c:da:e1:b4:fe:91:05:
fd:d7:70:55:ff:46:c3:99:41:51:cb:bc:24:60:81:
fe:38:dc:d5:29:f9:69:3a:e2:b6:d2:e8:10:cc:f8:
4a:48:bd:ca:8a:20:5f:e2:07:90:d9:de:c1:a4:6c:
ef:af:6b:f6:ea:51:90:0f:93:fd:c1:c6:d1:a3:d7:
12:df:68:87:a4:38:1d:ec:c8:f8:0f:70:2e:d5:d0:
5b:0e:87:0f:48:a3:06:ce:c2:9c:0b:56:39:62:8c:
a7:62:86:f7:33:18:70:87:57:2a:c1:2f:0a:91:da:
0f:9c:3d:39:c2:44:7b:65:4d:71:c4:40:c8:31:2c:
34:de:c1:6d:3b:70:de:0d:91:66:aa:e6:9f:7e:e1:
0f:99:84:0a:3e:a7:f9:5a:ae:5b:68:d6:65:50:3e:
1b:49:67:f4:73:d4:24:e2:2f:c5:68:da:d1:68:d4:
8c:b3:48:0d:24:12:f7:bc:b0:c5:71:60:6e:cc:5c:
28:d7:d3:59:eb:64:3d:82:7d:97:31:cb:6f:1b:eb:
ae:13:9b:fc:e1:1d:22:0a:d3:dc:c2:3a:9a:20:1d:
03:56:4e:d2:6e:81:76:9f:6b:cf:91:f3:0a:99:a8:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:22:E0:38:5A:19:12:4D:39:92:74:CE:EF:8F:25:42:AF:71:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HT0i4DhaGRJNOZJ0zu-PJUKvcao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:d9:58:ca:72:82:17:29:38:00:25:ee:52:d3:bb:d8:c1:5d:
55:cc:71:66:93:00:de:f2:0b:e1:40:c7:bd:af:16:f9:35:50:
fa:75:20:13:e0:05:83:70:52:6c:8f:47:d3:1f:0a:6f:9b:d2:
f6:f7:56:80:3f:bd:88:5d:ce:92:85:84:f5:ee:e6:d9:42:b3:
43:2d:0e:82:bb:ea:dd:69:47:9d:a1:96:98:9c:b5:33:be:06:
c7:f7:d7:50:4f:b7:50:92:b2:50:d3:e8:92:db:cd:74:0b:26:
8a:d4:c8:04:ea:18:2e:d2:40:85:e0:45:3d:25:5f:f2:58:4f:
14:79:28:65:a5:c7:af:ca:b7:00:75:0f:53:01:59:de:54:e1:
41:a3:b7:c0:a5:58:a2:11:8c:fc:61:07:b4:a4:f0:b8:24:06:
77:cb:fe:04:3d:75:bd:02:c9:7a:a7:df:53:1f:91:68:76:34:
2d:4c:34:d0:49:b5:3b:b1:fa:3c:54:2d:75:20:5d:91:c9:41:
19:dc:c7:53:ec:d9:c3:8d:a1:27:3f:8b:3d:6c:8c:29:ec:34:
5a:4c:10:07:f0:96:55:d4:34:f3:4e:49:8d:fc:5f:b9:07:ca:
5e:7b:df:17:8b:b8:a6:0a:8a:62:15:70:cb:1d:b5:b1:8b:a1:
d8:d7:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:41 2025 by rpki-client