Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdKsDUiKgnfCz09Iir8XxxTNnqY.roa
File: HdKsDUiKgnfCz09Iir8XxxTNnqY.roa (raw, json)
Hash identifier: QNUVgC4vn+vCXBcjRJY3CqzCJe7tjHNsyQm4PEAMxpc=
Subject key identifier: 1D:D2:AC:0D:48:8A:82:77:C2:CF:4F:48:8A:BF:17:C7:14:CD:9E:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EF796DB11F210CA2AE6C7F5275E51D72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdKsDUiKgnfCz09Iir8XxxTNnqY.roa
Signing time: Sat 06 May 2023 05:12:05 +0000
ROA not before: Sat 06 May 2023 05:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ef:79:6d:b1:1f:21:0c:a2:ae:6c:7f:52:75:e5:1d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 05:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd2ac0d488a8277c2cf4f488abf17c714cd9ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:16:a9:3b:49:81:1f:16:84:62:fe:48:85:
05:da:93:19:c3:0c:2e:2f:09:75:38:d5:2d:98:06:
4c:a8:0d:e9:54:28:62:36:97:7c:04:6b:d3:fb:0e:
0d:e7:dd:92:be:ff:68:47:2f:48:41:d6:23:61:ea:
4a:df:e1:1b:53:59:e6:27:bf:16:eb:0e:8e:72:8a:
46:63:e3:b9:5e:0a:f1:fe:3c:58:11:57:b2:9b:84:
d3:9b:1c:86:1b:c9:46:70:c0:4a:f1:e6:05:c5:44:
87:b8:e7:a6:bb:5a:21:a9:4e:19:81:d1:c6:37:9d:
a7:75:59:cd:93:21:68:96:da:79:f4:37:04:66:46:
91:6f:5e:92:de:ea:94:04:63:d4:3e:be:d6:e8:43:
63:ba:e3:28:04:a8:f5:ec:26:a8:34:fc:c8:a2:5b:
9d:93:1c:2b:2d:e6:a3:dc:e9:d1:d6:ea:73:05:c2:
53:9b:c8:82:66:8b:fc:c5:20:44:49:07:80:82:8e:
32:38:c3:0a:c4:21:24:44:18:1b:f9:27:5b:5c:7d:
a0:ec:eb:6f:4e:84:89:4f:f2:62:a1:77:c0:e5:72:
63:99:2c:e8:9a:79:46:43:7e:c6:3b:bf:f9:04:e1:
a7:7d:20:c3:37:01:7d:17:e4:4c:5b:3e:c9:22:18:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:AC:0D:48:8A:82:77:C2:CF:4F:48:8A:BF:17:C7:14:CD:9E:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdKsDUiKgnfCz09Iir8XxxTNnqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:94:a3:d4:c0:a1:61:55:fe:c9:84:03:5b:c4:8c:30:4e:c7:
06:f4:2f:57:b7:d1:4f:17:96:15:61:9b:d5:b7:f9:c5:4d:0d:
73:aa:9d:ce:67:09:0f:14:65:6d:eb:b8:25:13:01:7c:67:4e:
8a:08:33:8d:d1:6c:07:fc:44:d6:f9:95:51:52:fd:0a:37:5e:
9d:3d:43:89:2d:50:74:f0:40:b2:2a:df:f6:0c:d5:07:69:47:
1d:cc:94:05:22:70:6b:2c:e1:68:1d:4f:33:e2:e4:49:a2:0f:
c2:15:b5:63:45:41:37:98:6e:62:4e:61:43:d5:a2:99:e3:34:
d8:01:dc:ec:04:6a:0c:f2:59:5d:f9:ba:84:bf:ab:3f:74:43:
4e:f9:d2:a0:59:a6:cd:ef:60:84:e6:13:0e:5f:54:a2:fa:19:
9b:c9:86:13:cd:b5:06:09:ab:ec:5b:16:87:79:ee:da:f9:e7:
15:31:ff:c4:20:4b:f2:b1:12:53:e6:8e:00:c2:30:56:e0:58:
a9:40:d3:fb:b5:73:5f:01:fa:66:5c:8c:cb:48:21:10:c6:04:
f4:18:bc:1a:c0:59:b4:76:df:18:1a:e1:15:d1:39:0f:67:bf:
f5:7f:5f:ff:3e:7b:d9:8f:7a:75:ca:42:ec:27:22:54:51:8f:
ab:ba:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:57:20 2025 by rpki-client