Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HVI0hk2_0z2LWFIhBM30php0BEw.roa
File: HVI0hk2_0z2LWFIhBM30php0BEw.roa (raw, json)
Hash identifier: 91NityDYtbfLTuq5/TIgrZfhYDBnAmnH2i6kuf+fd44=
Subject key identifier: 1D:52:34:86:4D:BF:D3:3D:8B:58:52:21:04:CD:F4:A6:1A:74:04:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018466D2832569173A2448AF57C14899A760
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HVI0hk2_0z2LWFIhBM30php0BEw.roa
Signing time: Fri 11 Nov 2022 13:13:02 +0000
ROA not before: Fri 11 Nov 2022 13:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:d2:83:25:69:17:3a:24:48:af:57:c1:48:99:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 13:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5234864dbfd33d8b58522104cdf4a61a74044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:38:42:0a:cf:09:c9:93:c5:67:e4:83:85:
01:78:15:60:bb:b5:16:ec:5f:00:3c:53:97:ff:1d:
a3:80:95:3a:b5:cb:6f:b2:ca:ec:6e:df:74:a3:ca:
07:ba:60:df:fe:77:a4:49:39:4b:05:62:db:ae:07:
2b:fa:9a:e3:a6:5d:cd:0a:1e:0a:20:68:b7:90:d3:
bc:a8:88:9b:02:73:c8:f3:b3:89:51:1d:30:9b:a5:
f9:ef:a8:f2:0e:5d:26:20:5c:7f:f5:d3:a6:8e:72:
06:2a:ce:f8:3f:b1:85:2d:72:ac:9f:f6:b9:c2:33:
ba:f3:31:2a:dc:b0:6e:59:48:9c:56:e2:19:56:48:
1d:39:ae:51:41:64:ff:fa:ad:61:77:bc:33:d0:94:
04:8a:59:a9:9c:2e:99:b2:da:be:f8:1d:31:0d:87:
41:07:5d:54:b4:a8:0d:47:f0:1e:13:02:f3:70:39:
64:02:0c:ac:a4:bc:fa:5d:d7:79:03:6e:1f:a7:f9:
fa:b9:cc:bb:36:1e:e7:e2:9e:1a:55:66:03:51:99:
49:36:26:f8:ea:f0:14:7b:0f:8b:8d:fc:af:16:7d:
8e:40:b4:52:c5:4a:f7:2d:d3:61:bd:e9:a1:a5:c8:
9d:44:8e:82:80:b3:15:c8:fd:b7:e6:8b:e0:7b:b5:
93:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:34:86:4D:BF:D3:3D:8B:58:52:21:04:CD:F4:A6:1A:74:04:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HVI0hk2_0z2LWFIhBM30php0BEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:50:29:be:b1:1e:96:f4:f4:83:65:82:7c:ae:a7:d2:fc:57:
e9:5e:63:9a:c8:2b:c7:25:06:6b:5b:30:cf:0c:62:f8:17:a9:
d8:c5:3a:1e:8c:80:f7:b3:1d:33:12:5e:8e:c6:45:a3:fb:90:
1d:78:c0:25:50:06:e1:9d:52:95:a3:75:12:b9:e8:0a:f6:7f:
2d:61:1e:54:43:ec:3d:06:f2:12:33:9b:a4:43:2a:1f:7c:3c:
02:3e:9c:9b:e7:42:21:d1:c2:50:35:92:42:d3:50:99:7f:fd:
4a:5c:cd:69:78:ab:3f:af:b7:1f:d3:cf:f9:2b:e9:41:56:a1:
64:3c:8a:80:f2:f1:d6:25:ee:de:08:fe:96:e9:a8:e3:69:e0:
8c:d2:66:04:b5:78:11:a5:27:7b:fb:f5:f0:8a:48:96:13:e1:
ce:62:69:7a:a4:f0:4a:55:b1:24:99:e9:8f:af:b5:93:3f:8a:
4e:c3:c9:a2:52:0d:19:99:59:ba:67:c3:dc:a7:c5:c0:0b:0c:
2d:9b:1a:bb:b0:c4:65:2d:5c:bb:39:b8:54:9d:ad:d5:f4:97:
81:a3:9a:7b:42:16:0a:13:b7:41:b0:dc:ab:ed:9c:b9:6d:6a:
db:ba:64:b4:3b:b6:39:6c:b8:d3:f3:b9:25:fc:4c:fc:c2:bf:
05:cb:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:23:01 2025 by rpki-client