Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWGanqMAxuzZ5_IAAVszdopcfgA.roa
File: HWGanqMAxuzZ5_IAAVszdopcfgA.roa (raw, json)
Hash identifier: Tnil4Fq8k+OlVpy1A0D4nGkBCAcJvGt4S2A33nBnQFM=
Subject key identifier: 1D:61:9A:9E:A3:00:C6:EC:D9:E7:F2:00:01:5B:33:76:8A:5C:7E:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CAC5A6EA9136221A999A32F7C86AE187
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWGanqMAxuzZ5_IAAVszdopcfgA.roa
Signing time: Sun 06 Aug 2023 12:14:58 +0000
ROA not before: Sun 06 Aug 2023 12:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:c5:a6:ea:91:36:22:1a:99:9a:32:f7:c8:6a:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 12:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d619a9ea300c6ecd9e7f200015b33768a5c7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:09:73:79:ff:3a:90:17:05:e0:74:ae:2c:
ba:cd:12:55:cf:f8:15:a9:d5:66:96:68:fd:30:a5:
eb:04:66:a2:f4:a7:4e:a4:26:90:03:eb:13:97:22:
24:1b:2b:41:01:5e:b4:ca:f1:63:69:74:f2:45:22:
5a:d7:80:c9:97:e6:fb:df:0c:92:99:00:2f:19:61:
d9:07:cd:e2:87:61:52:e6:40:12:b9:d6:84:d2:33:
f3:e9:89:5c:2b:b8:90:ba:60:5d:78:26:e0:5d:dd:
69:d8:39:b5:e1:29:37:d6:80:ce:4f:70:9b:9e:f9:
32:a3:43:50:cd:c8:25:c2:24:98:be:56:48:49:49:
ef:7f:b7:0e:cb:bd:5f:40:2f:2e:b2:c0:0e:5a:a7:
8a:d6:d0:da:f6:87:96:da:f1:5b:da:be:d6:9a:54:
24:8b:dc:07:45:d1:a1:03:88:54:d7:d5:4f:87:2c:
02:aa:e9:76:91:ac:10:a0:93:06:8a:d8:93:3c:92:
1f:df:5c:17:88:26:37:d6:a0:fe:3e:a6:28:b9:b1:
d2:93:90:1d:d4:78:d0:2b:57:53:fb:26:ad:9b:96:
6f:18:37:20:af:d4:52:0e:eb:b1:83:10:9b:ef:d5:
25:25:75:34:08:e1:81:da:ee:f8:25:b2:d3:6b:60:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:9A:9E:A3:00:C6:EC:D9:E7:F2:00:01:5B:33:76:8A:5C:7E:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWGanqMAxuzZ5_IAAVszdopcfgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:f5:78:b9:2f:e0:98:27:91:dd:ce:3a:85:9c:99:66:93:34:
1d:ae:d4:33:6f:74:7b:21:e7:c5:dc:bc:a0:9f:e7:09:80:87:
e1:1c:0b:62:bd:7f:3d:97:66:96:5a:fd:b9:03:3b:0b:b1:40:
f0:c9:40:62:91:75:d1:21:3a:85:6e:df:e8:38:0a:1c:11:d1:
78:98:de:51:0a:5e:34:a5:ed:51:95:0f:b8:8c:67:c2:f8:fb:
1c:ba:69:55:16:1a:b4:0a:75:91:74:02:46:73:47:18:31:74:
42:ce:e7:cd:04:ca:96:8f:ac:98:16:90:1b:79:63:11:ef:33:
7d:b9:0c:93:2f:58:55:85:54:3d:22:97:83:82:73:bc:2a:25:
65:95:c1:a3:2a:68:cc:4e:91:9e:df:c0:c6:d9:93:ba:41:4e:
ff:5c:48:70:9b:72:27:85:2b:4a:97:14:80:53:56:8e:72:7b:
86:c4:30:ad:d8:a1:98:cd:89:f0:39:ed:b1:1b:cc:5c:1b:ce:
25:03:9d:8c:33:cd:54:83:77:e9:9d:bb:5e:67:64:d1:f0:b3:
0e:b5:51:9f:86:8d:d7:91:f6:90:d6:fa:fe:4f:14:a6:49:7c:
ab:93:eb:fd:b0:32:9b:23:db:70:77:fc:21:7a:ae:ae:17:b5:
b7:2a:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:24:49 2025 by rpki-client