Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTBmyk3zsait7jz3CRBOBuVvb7o.roa
File: HTBmyk3zsait7jz3CRBOBuVvb7o.roa (raw, json)
Hash identifier: GwlELEMADUZZcTMBPL7ovc0xlaDriJYD0H6t3fqAp0M=
Subject key identifier: 1D:30:66:CA:4D:F3:B1:A8:AD:EE:3C:F7:09:10:4E:06:E5:6F:6F:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D65AB13F58C1B5656E613D6C1446E166
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTBmyk3zsait7jz3CRBOBuVvb7o.roa
Signing time: Sun 12 Mar 2023 15:05:13 +0000
ROA not before: Sun 12 Mar 2023 15:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:d659:d24c/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:5a:b1:3f:58:c1:b5:65:6e:61:3d:6c:14:46:e1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 15:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d3066ca4df3b1a8adee3cf709104e06e56f6fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:bb:b5:d2:51:a2:20:76:5f:b6:b1:65:1b:
e0:94:1e:d5:14:01:ed:b2:8b:3c:b5:a6:ca:da:0b:
6f:48:ea:94:4c:ec:5e:87:f9:5e:f6:fd:fa:a8:dc:
b2:8a:79:04:ed:3d:65:7e:86:a1:5d:cf:02:fd:e9:
8a:ab:8a:a4:a9:5f:0b:2c:32:42:f4:94:e4:28:86:
c9:d0:67:8c:c1:fd:8c:22:5a:90:c4:c6:2d:be:7b:
df:85:98:d8:74:7c:22:26:9f:0d:67:32:05:45:5b:
d0:7b:76:2b:ed:66:f9:50:72:85:b2:b0:a5:66:92:
b5:6a:30:59:46:0d:bf:8c:fd:04:f0:03:52:2e:fb:
93:54:14:1e:35:06:d8:8c:42:74:2f:97:c7:1e:4d:
4e:22:ca:fd:51:14:b4:67:30:95:be:43:6a:e5:7f:
3f:a2:50:7a:ab:48:c0:fd:94:d9:09:a8:94:68:68:
c1:dc:b1:8c:8a:09:5c:84:d3:ff:a5:6f:ae:02:06:
02:9b:59:7d:74:da:e6:cb:b3:ee:22:03:cf:88:16:
08:6b:2e:54:9d:28:5b:54:03:cf:66:5b:78:2a:41:
74:05:d0:37:6b:25:12:78:3f:e8:9a:5e:76:48:ed:
91:7c:0b:fa:74:bc:8c:c9:0c:ea:29:61:2d:64:f6:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:66:CA:4D:F3:B1:A8:AD:EE:3C:F7:09:10:4E:06:E5:6F:6F:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTBmyk3zsait7jz3CRBOBuVvb7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:2c:bb:0f:71:42:7e:df:ce:81:7b:4c:a9:af:86:d3:5b:4b:
af:d8:4c:a6:13:e3:cf:ce:89:f8:99:0e:f9:11:26:98:00:72:
d0:b5:1f:5b:fe:81:95:8d:8d:79:78:47:86:a1:a1:0e:3d:75:
7a:5b:23:fd:c0:65:de:14:9d:0f:da:bb:4b:30:78:c9:a7:03:
8f:96:3e:40:24:5e:59:f6:45:06:a8:f8:3d:62:89:57:1d:86:
81:43:cc:02:3d:ab:4c:e4:81:41:9a:7f:ab:7f:64:c4:e4:0b:
56:99:6d:3b:da:e5:45:da:86:e1:14:dc:e8:fc:a7:d7:3d:3b:
17:1c:d6:e9:12:b9:7f:b7:aa:b0:38:6f:40:27:4f:30:df:3b:
ef:f1:82:e8:a5:d7:54:c2:33:3d:11:a7:9d:31:8e:d3:c3:38:
42:69:da:de:74:f7:45:b9:c5:f9:02:11:df:9b:52:84:cd:75:
3d:42:f5:32:33:3c:37:2e:6c:47:33:41:8a:53:28:0b:53:b1:
15:d5:94:dc:83:69:ab:ca:9b:48:bf:4d:7e:24:9e:2e:e6:88:
72:2d:84:15:e2:33:13:10:48:b5:49:2d:cd:05:84:6d:20:6d:
ef:65:c6:bd:eb:66:44:c8:67:1c:12:3f:e2:12:68:aa:84:ea:
89:d9:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:26 2025 by rpki-client