Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HV1yszMkROXPnyXDifZorL-hQGg.roa
File: HV1yszMkROXPnyXDifZorL-hQGg.roa (raw, json)
Hash identifier: ox1GspIWdG2ItiUPRj7fjD8HnXh715kK9mgC7LyzJpY=
Subject key identifier: 1D:5D:72:B3:33:24:44:E5:CF:9F:25:C3:89:F6:68:AC:BF:A1:40:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185439ED9DC58BBE0233E87BC357379AA2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HV1yszMkROXPnyXDifZorL-hQGg.roa
Signing time: Sat 24 Dec 2022 10:12:41 +0000
ROA not before: Sat 24 Dec 2022 10:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:9e:d9:dc:58:bb:e0:23:3e:87:bc:35:73:79:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 10:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5d72b3332444e5cf9f25c389f668acbfa14068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:41:88:47:51:e4:8b:0a:d2:10:36:fa:7c:
9a:70:97:e8:01:80:8c:ab:16:d1:30:11:3e:8d:31:
37:62:9b:e2:f9:ab:b9:e7:3e:83:c9:0b:b7:88:76:
df:03:e9:15:47:89:9f:01:00:6f:0a:c5:8f:49:b9:
c3:d5:a0:ff:05:78:62:18:79:c4:5e:34:3f:95:73:
87:4c:c2:87:65:e4:1f:0d:41:c6:6c:56:e7:ef:1a:
d1:54:f5:e4:14:e6:f4:57:52:4d:d1:a2:61:a4:4e:
ce:c0:5c:66:20:d4:a5:e6:35:18:e0:ae:a3:40:a0:
73:b3:77:37:34:b1:ce:49:2c:8e:8b:ae:20:0a:43:
a6:6c:f5:de:05:b9:78:12:a2:60:69:24:e4:34:7c:
f0:31:17:74:3f:20:ec:46:40:2b:dd:b9:2c:e3:65:
a1:b8:72:0f:51:7a:f2:d8:65:ee:81:54:ca:68:c2:
ce:8f:aa:45:65:ca:6a:cd:fa:f1:e5:0e:7b:f2:19:
8f:e1:ab:dc:d9:53:fa:89:bd:c7:a3:c5:9c:5d:76:
0e:aa:21:6e:37:aa:5a:0d:7b:4c:0d:71:e3:cb:80:
75:f4:47:34:ce:7e:e3:a9:97:73:1a:b4:e5:e6:b7:
a9:05:37:c6:0e:08:ae:6d:ce:60:39:fe:f2:88:d5:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5D:72:B3:33:24:44:E5:CF:9F:25:C3:89:F6:68:AC:BF:A1:40:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HV1yszMkROXPnyXDifZorL-hQGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:2d:d5:05:81:5e:c3:59:5f:ee:94:90:0e:af:b7:05:fb:9e:
c6:df:09:2a:a2:d5:35:8a:a0:b0:13:12:53:94:b5:38:ac:91:
2b:5f:98:7d:10:dc:99:49:0f:e5:49:c5:2f:77:16:59:89:92:
85:c8:28:61:77:fb:cc:dc:f8:62:75:91:a2:ad:f2:78:14:94:
6c:a5:02:87:fe:09:b2:bd:6e:4e:08:ff:06:28:b4:6f:1a:ed:
ec:41:d3:9a:91:80:e7:f0:36:c5:55:92:09:a6:22:e1:56:77:
81:da:8d:e5:3c:20:d1:c0:c6:09:4d:aa:b0:1d:42:46:40:a2:
fc:36:12:17:19:4e:d4:06:62:17:54:60:1e:94:5a:df:23:b3:
25:c3:88:bc:d2:d7:fd:bc:88:b2:e6:ac:fd:2c:71:08:14:50:
31:88:e4:e5:ad:b0:5b:1c:94:3c:4b:c4:55:26:48:b9:39:da:
30:4e:44:59:76:5c:9d:27:5a:b2:8a:5b:9b:df:aa:e5:7a:5f:
70:0a:70:08:f3:db:8d:b8:e6:ad:fb:b0:4d:9a:17:67:dd:d2:
03:98:8f:98:fe:4c:5e:cb:d6:f5:d4:33:0b:ee:32:4c:ba:89:
8f:27:fe:ec:e4:40:16:e8:3a:94:45:68:f6:a4:0e:82:60:3a:
14:f5:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:00:23 2025 by rpki-client