Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HXWb_l6wJ7zpiVLciTB3vsz8oUA.roa
File: HXWb_l6wJ7zpiVLciTB3vsz8oUA.roa (raw, json)
Hash identifier: 34EoRyy5GH+WdMTt0vbmhqOxonen7B6s6F5o+rawDSo=
Subject key identifier: 1D:75:9B:FE:5E:B0:27:BC:E9:89:52:DC:89:30:77:BE:CC:FC:A1:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C739E46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HXWb_l6wJ7zpiVLciTB3vsz8oUA.roa
Signing time: Mon 13 Jun 2022 19:09:44 +0000
ROA not before: Mon 13 Jun 2022 19:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356387398 (0x8c739e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 19:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d759bfe5eb027bce98952dc893077beccfca140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:cd:ed:0a:c2:6d:66:13:95:35:dd:60:44:
bd:8a:3b:83:8c:01:00:8d:18:e7:26:40:99:d0:73:
65:f7:23:d6:96:94:08:60:e8:e0:7b:af:ba:6a:e8:
75:1b:77:8a:ce:d1:af:7c:55:0d:94:9f:3a:4e:dd:
b7:77:64:5c:a9:b3:5f:90:dc:26:41:a6:4d:3b:ab:
08:cc:2f:ad:be:8a:5c:f4:e2:10:16:0d:cb:5d:63:
33:30:06:a5:c6:32:aa:9d:c8:cb:1d:bd:a4:37:e1:
d6:92:78:fe:f2:77:2d:53:ad:01:9d:ed:7e:f3:c0:
90:b3:b6:09:69:4b:65:2d:a7:17:5c:8d:73:07:e9:
ac:9c:f6:da:4c:92:65:3d:10:fb:5b:12:48:5d:a5:
c4:7b:5d:f8:40:04:e2:7a:b6:23:ef:d5:91:83:7e:
ed:0c:71:17:18:55:d1:e2:a3:94:5a:5b:1f:26:53:
77:35:8e:1b:2a:bb:79:42:38:f6:26:8d:13:2d:5d:
32:f8:dc:45:18:99:cb:7a:9d:c7:1f:2e:c4:6f:b0:
90:4b:22:01:3b:34:2e:32:d2:82:37:e6:97:13:8e:
10:18:2a:19:26:14:85:75:23:bd:c7:39:f2:cf:1c:
6c:01:9b:25:94:f2:d7:11:3b:ed:a9:ed:0c:98:9c:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:9B:FE:5E:B0:27:BC:E9:89:52:DC:89:30:77:BE:CC:FC:A1:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HXWb_l6wJ7zpiVLciTB3vsz8oUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:2c:22:74:62:89:6a:00:96:85:c8:e9:17:f6:fd:f3:b0:b8:
93:5b:db:9e:55:c1:92:68:d1:66:d6:d9:72:a6:bd:da:59:cc:
e8:54:b3:60:18:80:ef:08:b0:fb:9e:aa:37:4b:bf:71:2a:cb:
b9:a7:1e:fe:fb:f4:80:a1:96:b1:51:f4:83:03:4f:a0:b8:77:
79:2e:64:a5:45:f4:b0:9b:9c:98:9c:86:74:b4:98:79:22:e5:
f5:4b:72:3c:04:9d:1f:a8:8a:54:e0:c2:c5:7d:2f:bb:70:bd:
ca:20:df:f3:c9:19:9a:4d:0e:f0:a8:be:e4:e9:fe:ec:3a:f9:
05:31:26:19:70:d2:bf:42:73:f8:6c:09:6d:88:c1:b1:f4:a2:
ec:a3:e0:21:34:53:59:28:f0:23:06:3a:bc:15:f8:71:02:f8:
f0:43:08:38:0a:ac:b8:5c:e1:1c:3a:4a:4c:6c:6b:f0:2b:db:
f2:79:76:e2:6e:4a:76:c0:87:85:9e:f6:d2:2f:57:ff:86:52:
81:91:c3:74:c0:64:e4:4d:ca:b7:6a:6c:dd:f3:a6:a8:81:b2:
09:99:80:52:96:f9:25:d4:51:bc:92:4c:56:39:3d:08:b6:fd:
27:17:db:15:3c:d7:8d:cd:c9:ed:51:ee:8a:6f:f6:71:4f:21:
95:90:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:46 2025 by rpki-client