Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTDr_j2kzMdWrzhsVvVQwBVWTw8.roa
File: HTDr_j2kzMdWrzhsVvVQwBVWTw8.roa (raw, json)
Hash identifier: uT+IuRRkgGVAz12jAHalsxLlHtrUL21BYyMBOOeyoKs=
Subject key identifier: 1D:30:EB:FE:3D:A4:CC:C7:56:AF:38:6C:56:F5:50:C0:15:56:4F:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018202369E5E43BE91E2307E6351F0E015FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTDr_j2kzMdWrzhsVvVQwBVWTw8.roa
Signing time: Fri 15 Jul 2022 14:15:09 +0000
ROA not before: Fri 15 Jul 2022 14:15:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:36:9e:5e:43:be:91:e2:30:7e:63:51:f0:e0:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 14:15:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d30ebfe3da4ccc756af386c56f550c015564f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:ba:38:4c:06:ca:0a:4d:11:c3:33:e3:ca:
96:8b:76:77:90:cf:8c:64:c1:c3:49:69:ed:b4:14:
31:b1:2f:b1:a1:80:3f:85:49:78:d6:6a:81:da:1a:
a4:5a:9b:f9:49:e7:30:f4:35:19:0c:cc:a0:9b:a9:
9e:97:e5:a7:05:85:a4:70:ec:03:00:b3:0f:4d:58:
72:51:a8:0d:8d:59:e2:33:57:8a:45:fa:59:b8:58:
5c:d6:15:f3:cd:77:c5:87:14:3a:a0:0a:f6:72:56:
0b:45:e8:45:35:7a:82:1a:e3:b5:f5:09:a4:22:d3:
bc:51:e9:2b:f2:e1:e7:ed:e7:b0:6a:b1:c8:33:93:
cd:75:31:fe:be:9e:42:e2:99:12:54:57:1a:96:d9:
e8:e3:df:a5:16:3d:d7:12:ac:3a:6d:f5:69:a2:66:
3b:a5:86:4c:d4:87:7a:81:1f:18:b4:af:0d:3d:82:
1f:6a:67:2c:9a:e8:1e:29:c8:18:3e:28:48:6b:0a:
f2:68:45:0c:83:f3:37:a5:ec:47:e0:47:71:2d:ae:
8a:32:d0:31:59:b9:57:66:32:32:ee:a4:b1:43:87:
14:43:ef:69:58:c5:4d:d4:a3:87:52:6a:ba:25:fc:
1d:fc:75:c0:7b:d9:5e:e7:92:4a:6a:92:30:42:4c:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:EB:FE:3D:A4:CC:C7:56:AF:38:6C:56:F5:50:C0:15:56:4F:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HTDr_j2kzMdWrzhsVvVQwBVWTw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:64:53:84:be:bd:43:87:e7:d7:90:f0:22:81:f6:8f:5d:c6:
5e:70:38:db:8d:67:44:ec:2a:00:af:7d:13:4e:09:15:01:4e:
eb:99:2a:44:99:f4:bf:68:46:ab:12:1c:3a:93:cd:09:8a:ea:
6e:45:ac:6b:5b:36:79:38:ee:0e:8d:7f:e9:e5:9a:28:0c:2d:
40:17:22:12:1f:ea:7e:33:9f:00:60:69:77:aa:d2:a9:84:9b:
ae:1c:a7:88:d7:68:d2:c9:f8:28:81:c1:55:a6:68:06:e7:31:
d8:01:3a:47:e7:23:09:42:e0:ad:7c:88:12:4f:37:c5:09:e5:
3e:b3:6b:51:47:6c:94:ed:fd:e9:7d:36:c5:28:31:b8:30:ac:
48:5d:f7:16:1e:28:80:1b:c9:0d:20:1f:75:d1:32:57:38:f9:
5c:bc:1a:da:4c:15:5d:8c:5a:60:8f:20:59:63:7e:2d:43:90:
d8:f9:83:be:af:fc:3a:13:2b:85:3c:1c:ae:ff:80:32:79:98:
99:f2:e2:6d:5c:07:f5:f2:76:0e:61:67:2c:f6:59:58:66:23:
85:e2:0c:03:d1:7a:e3:68:5d:27:62:4b:b8:03:b3:04:2a:63:
fd:2c:91:f5:cf:e3:0a:57:4f:5d:8d:55:2f:47:18:a3:fe:6e:
68:92:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:16:12 2025 by rpki-client