Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hd6kRi1Dl4av-JXsOoXv5SLJmK0.roa
File: Hd6kRi1Dl4av-JXsOoXv5SLJmK0.roa (raw, json)
Hash identifier: fDdb7fRHUzcJ//6kXZasIdGpZ20wlb/TyPaxUuPRJXk=
Subject key identifier: 1D:DE:A4:46:2D:43:97:86:AF:F8:95:EC:3A:85:EF:E5:22:C9:98:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DF2185B755304E0992A75DAAA391F7AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hd6kRi1Dl4av-JXsOoXv5SLJmK0.roa
Signing time: Wed 21 Jun 2023 18:04:56 +0000
ROA not before: Wed 21 Jun 2023 18:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:df21:f7d/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:21:85:b7:55:30:4e:09:92:a7:5d:aa:a3:91:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 18:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ddea4462d439786aff895ec3a85efe522c998ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:83:85:0a:91:e3:41:2f:7d:84:0d:fc:56:
c9:e6:43:fd:f4:ea:a0:5d:11:eb:29:88:14:8d:23:
12:16:30:18:37:7a:18:8a:a8:da:25:fa:12:2a:3e:
5d:fd:fd:ae:36:93:d1:6f:8b:66:37:7b:32:f6:be:
21:14:67:c0:2b:1a:bb:ab:73:d7:63:f5:90:d4:ce:
d6:a2:8a:88:68:91:bb:34:83:fc:f2:00:50:d7:74:
b0:9f:47:5f:83:59:99:59:76:71:6a:6a:61:bd:e5:
8a:be:42:cd:91:b8:76:ae:4e:53:5e:fa:46:bd:8f:
ae:6b:de:31:58:24:8d:8a:0e:15:5b:4d:d7:5d:12:
ff:dd:43:df:67:62:7f:05:07:d4:2d:68:43:17:3b:
85:5c:3e:d8:cb:65:10:dc:61:06:7b:65:b7:d7:27:
03:ff:66:29:8e:a8:62:ce:f4:44:a7:50:16:d5:26:
6b:dc:1a:a6:60:50:9d:e8:92:2c:c1:31:89:6f:7c:
b5:39:af:e2:fe:bd:74:a1:50:96:af:b9:e7:85:a4:
93:48:8d:85:74:b1:bc:fa:9d:16:c5:96:f2:bf:a1:
b2:4b:af:68:7f:bb:15:c5:c9:9e:30:f2:f6:72:72:
18:59:7c:1f:17:f7:a1:f0:ee:9c:05:a7:89:b5:fb:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:A4:46:2D:43:97:86:AF:F8:95:EC:3A:85:EF:E5:22:C9:98:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hd6kRi1Dl4av-JXsOoXv5SLJmK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:68:1e:28:ef:7d:e5:67:cd:03:e5:38:23:13:23:44:80:8b:
d4:64:57:d8:e3:2a:d7:37:54:e8:e9:4d:3a:d8:d2:e7:07:37:
48:c1:9f:a1:68:e5:49:4b:27:ce:2e:79:88:e3:37:cd:de:d9:
d3:ef:5e:9e:31:7e:9c:10:6c:ec:d6:cc:96:78:97:0f:57:e1:
74:2c:24:22:83:8d:11:ed:04:79:e3:ab:13:08:9c:a2:fc:6f:
ec:4d:64:17:4e:3b:e9:de:b9:e4:11:f8:ad:77:c4:19:c5:8d:
47:b8:f6:6c:79:0e:2b:15:96:ab:60:1e:da:ca:20:6d:ff:a3:
c1:bf:67:03:7d:13:6b:9a:74:3c:aa:e3:21:12:68:2e:5e:e1:
00:e9:8a:95:78:d8:bc:59:73:1d:95:e8:85:a5:7a:ae:89:86:
78:bf:66:a3:46:2c:2c:77:c6:f0:8a:e2:58:f2:d9:00:e1:96:
0d:47:ed:3c:1d:84:32:20:da:78:fa:ba:ed:0a:cc:1d:d6:38:
d6:16:c8:f2:cb:c3:d5:5e:d6:f1:af:f8:16:d7:f5:58:d1:ec:
89:2d:da:73:22:5b:25:65:08:99:b2:bb:d0:2a:b7:b0:85:6e:
32:41:48:c6:fa:fe:15:a4:e9:ec:1c:9f:78:de:df:fd:53:6c:
93:9d:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:46 2025 by rpki-client