Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HcmAMgiLle1BQedr_2BqgfwU4Yc.roa
File: HcmAMgiLle1BQedr_2BqgfwU4Yc.roa (raw, json)
Hash identifier: ubB2CdBo1NfHJGqk7soN+TlPAXZ1PKPnH+6RTp20qlE=
Subject key identifier: 1D:C9:80:32:08:8B:95:ED:41:41:E7:6B:FF:60:6A:81:FC:14:E1:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018449D9A07D7724F77F4476310576A48BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HcmAMgiLle1BQedr_2BqgfwU4Yc.roa
Signing time: Sat 05 Nov 2022 22:11:49 +0000
ROA not before: Sat 05 Nov 2022 22:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:49:d9:a0:7d:77:24:f7:7f:44:76:31:05:76:a4:8b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 22:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dc98032088b95ed4141e76bff606a81fc14e187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:35:ba:f1:09:34:9f:fa:5d:25:7a:36:d8:
52:d0:be:04:ea:71:e6:ca:66:e9:1f:28:1c:51:2e:
58:6f:a8:68:5b:3f:63:2d:37:b4:04:02:ba:2e:62:
22:02:31:08:65:94:8b:c5:b8:89:8f:1b:02:1f:69:
f7:09:d8:66:b8:df:9f:8f:f9:67:ee:55:1d:d9:a6:
1b:3b:13:2b:4d:a6:ed:9b:fb:e4:92:55:2c:a0:58:
40:3b:0a:4b:ce:0b:7e:78:e1:87:19:78:1d:13:2c:
a6:9f:8b:81:67:e4:39:cc:56:11:ec:4a:9a:4a:d3:
ea:bb:f9:7c:fe:9c:dd:c1:61:22:07:31:ce:28:34:
68:48:53:f2:b5:0d:7b:b7:99:b8:3b:e3:ed:9b:01:
9d:bf:7f:fb:38:cd:1a:2f:f5:45:48:2a:07:e8:52:
db:5e:c8:c0:4b:77:ad:f8:25:69:ef:fc:fd:50:ad:
d2:ed:58:7b:25:2e:98:de:d6:9b:33:ed:a4:40:43:
3b:33:68:77:3f:75:d3:d2:c1:46:cf:a8:e2:70:5a:
5f:bf:05:90:99:e9:83:c5:5a:1e:64:9b:e0:12:f2:
38:dd:3d:56:b8:b2:0e:97:51:44:38:9b:da:6d:3a:
8a:d9:f4:77:b8:87:9c:17:b5:2a:91:da:0a:c2:d1:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:80:32:08:8B:95:ED:41:41:E7:6B:FF:60:6A:81:FC:14:E1:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HcmAMgiLle1BQedr_2BqgfwU4Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:d3:ad:70:58:6c:5b:22:99:b7:ff:eb:eb:00:7b:4e:65:9b:
e7:fc:c8:cf:b8:11:5e:08:2c:50:1d:c9:16:1a:b5:db:81:33:
e4:2a:cc:67:cb:43:2e:3a:6c:43:8b:02:39:43:99:15:84:21:
6e:ca:95:b6:de:64:5a:dd:79:15:87:18:6d:5c:2d:f1:bd:22:
b2:b9:3b:30:8a:c3:27:cf:31:31:c5:f0:f3:d2:84:d1:44:13:
c9:fa:37:6c:35:a2:ba:42:11:d7:66:2a:70:1d:a0:2f:e7:c0:
ac:f8:5d:f6:d2:47:3f:47:aa:7f:9a:ec:e4:b9:5b:8f:07:4e:
46:15:c6:a4:16:28:6d:c1:f0:56:43:2f:8c:66:03:dc:3b:d9:
c6:23:de:a8:1f:c8:5f:3a:aa:d4:84:68:86:74:1b:a3:91:43:
c4:9f:06:32:ef:f3:49:dc:22:e5:ba:c6:75:d6:25:3f:f5:06:
24:a3:95:cd:67:51:31:e6:21:50:56:97:6e:8e:13:da:bf:a4:
07:e5:6f:de:05:2a:7b:b0:58:3e:48:40:7b:18:91:40:96:4b:
6c:29:63:b4:7f:e5:fd:10:50:fc:2c:c2:21:f4:a2:13:01:04:
d4:c2:0f:8b:64:26:b0:5d:34:64:c7:d0:fe:ef:c2:f1:fd:fd:
3a:7b:da:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRJ2aB9dyT3f0R2MQV2pIuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA1MjIxMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGM5ODAzMjA4OGI5NWVkNDE0MWU3NmJmZjYwNmE4MWZjMTRlMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeE1uvEJNJ/6XSV6NthS0L4E6nHm
ymbpHygcUS5Yb6hoWz9jLTe0BAK6LmIiAjEIZZSLxbiJjxsCH2n3CdhmuN+fj/ln
7lUd2aYbOxMrTabtm/vkklUsoFhAOwpLzgt+eOGHGXgdEyymn4uBZ+Q5zFYR7Eqa
StPqu/l8/pzdwWEiBzHOKDRoSFPytQ17t5m4O+PtmwGdv3/7OM0aL/VFSCoH6FLb
XsjAS3et+CVp7/z9UK3S7Vh7JS6Y3tabM+2kQEM7M2h3P3XT0sFGz6jicFpfvwWQ
memDxVoeZJvgEvI43T1WuLIOl1FEOJvabTqK2fR3uIecF7UqkdoKwtGIvQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB3JgDIIi5XtQUHna/9gaoH8FOGHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSGNtQU1naUxsZTFCUWVkcl8yQnFnZndVNFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJLTrXBYbFsimbf/6+sA
e05lm+f8yM+4EV4ILFAdyRYatduBM+QqzGfLQy46bEOLAjlDmRWEIW7KlbbeZFrd
eRWHGG1cLfG9IrK5OzCKwyfPMTHF8PPShNFEE8n6N2w1orpCEddmKnAdoC/nwKz4
XfbSRz9Hqn+a7OS5W48HTkYVxqQWKG3B8FZDL4xmA9w72cYj3qgfyF86qtSEaIZ0
G6ORQ8SfBjLv80ncIuW6xnXWJT/1BiSjlc1nUTHmIVBWl26OE9q/pAflb94FKnuw
WD5IQHsYkUCWS2wpY7R/5f0QUPwswiH0ohMBBNTCD4tkJrBdNGTH0P7vwvH9/Tp7
2lQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:38 2025 by rpki-client