Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H_Td4ektW2Jjzp4_aXeQGYHKJo4.roa
File: H_Td4ektW2Jjzp4_aXeQGYHKJo4.roa (raw, json)
Hash identifier: L2tR2oBJDWgOlctfGVqHFJHzoW48lgi3QVofRh8R+IY=
Subject key identifier: 1F:F4:DD:E1:E9:2D:5B:62:63:CE:9E:3F:69:77:90:19:81:CA:26:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E9B4F0DE86FB11F9019756A78C28F075
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H_Td4ektW2Jjzp4_aXeQGYHKJo4.roa
Signing time: Tue 06 Dec 2022 23:11:00 +0000
ROA not before: Tue 06 Dec 2022 23:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:b4:f0:de:86:fb:11:f9:01:97:56:a7:8c:28:f0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 23:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff4dde1e92d5b6263ce9e3f6977901981ca268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:dd:e7:11:13:43:1d:7e:ad:63:d0:b8:66:
e9:f9:65:ee:31:eb:23:80:e0:f7:2c:96:bc:52:37:
50:56:cf:88:aa:e2:2b:ed:d7:b9:af:61:7a:d1:bf:
42:15:c4:16:a3:08:05:af:2a:05:e3:61:cd:1d:38:
26:7b:3b:fb:bb:54:0c:03:0f:0d:14:be:49:87:a2:
f4:71:bd:7b:5b:62:0d:c4:37:cf:d9:cf:17:29:cd:
1b:db:c5:ea:32:05:09:cf:24:21:9d:3e:73:3f:6b:
eb:f2:fc:f0:af:f3:c0:b8:8c:60:c0:65:fe:81:15:
89:d7:3c:04:f8:78:21:43:1e:32:38:2b:e1:a4:af:
94:c1:3b:8d:d7:09:21:bb:34:03:d1:99:9d:c0:97:
af:ec:69:e7:b9:4a:17:e3:b6:0e:7b:fe:9d:4a:6b:
e4:8d:1e:77:1f:17:ba:03:7e:93:d7:f9:b2:8c:0b:
a6:e0:d9:55:dc:7a:99:d0:eb:e0:33:04:ba:5a:bf:
29:9d:a1:52:6e:ef:62:e6:3d:e3:ff:40:b2:86:34:
83:3e:6b:3a:e5:6b:ee:77:a9:ff:80:f1:7f:02:3d:
62:71:a6:14:f3:15:d4:ef:04:03:49:66:0b:ba:d6:
91:14:fa:0c:76:ba:ac:34:1c:f7:ec:c4:83:23:7c:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:DD:E1:E9:2D:5B:62:63:CE:9E:3F:69:77:90:19:81:CA:26:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H_Td4ektW2Jjzp4_aXeQGYHKJo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:66:17:42:04:6b:b8:e3:9e:52:5e:72:c1:9a:64:38:e0:4d:
b2:3a:20:8f:64:4b:6a:18:e2:c1:cd:89:09:d1:f5:31:ef:da:
ec:5d:cf:0c:b3:60:6f:2f:5c:ed:76:bb:cf:7b:61:8b:52:e9:
f1:b7:46:15:82:73:e3:8d:7c:4f:89:22:8d:f0:30:75:cf:35:
e7:a8:cb:cb:c8:86:64:cc:f7:92:98:d2:07:38:3e:db:f9:ac:
5b:2b:1c:a7:34:71:74:63:fe:3b:44:12:74:b8:be:77:0c:34:
5a:49:03:59:51:0a:1a:31:24:4f:50:64:c7:d8:16:0e:e9:82:
66:ff:dc:41:d5:47:c1:93:64:a1:a6:ee:3d:b5:c1:51:4b:f1:
3d:c2:4d:3c:5b:77:f2:40:31:97:86:ea:0c:bf:e0:81:8a:90:
31:76:9a:f8:6d:0b:fa:02:a4:d3:2f:4c:c6:f7:1e:5c:3f:31:
af:c2:1f:52:6a:f8:a1:80:c2:1b:18:f7:78:9c:c5:76:92:4e:
8d:f0:d9:79:a2:b9:81:a0:39:db:d0:98:66:19:08:c7:a6:a2:
42:21:fe:04:9e:7b:03:ff:aa:db:26:a5:6b:4d:1f:db:4c:3c:
d3:45:02:77:3d:5a:52:7c:ba:f7:a9:6a:eb:60:04:ee:18:82:
4d:78:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:38:40 2025 by rpki-client