Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdjOagu7wCo6AXlBXnNG1llcIY4.roa
File: HdjOagu7wCo6AXlBXnNG1llcIY4.roa (raw, json)
Hash identifier: EJOfjiBTjL3aML4x+n0AjyPlXKlmZYZFhwzI+EHgjHs=
Subject key identifier: 1D:D8:CE:6A:0B:BB:C0:2A:3A:01:79:41:5E:73:46:D6:59:5C:21:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886E7E845017574EECC3D1FE88CD43DED3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdjOagu7wCo6AXlBXnNG1llcIY4.roa
Signing time: Tue 30 May 2023 21:09:25 +0000
ROA not before: Tue 30 May 2023 21:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:7e:84:50:17:57:4e:ec:c3:d1:fe:88:cd:43:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 21:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd8ce6a0bbbc02a3a0179415e7346d6595c218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:2e:7e:15:b9:5a:09:15:56:b4:b1:13:d4:
4c:20:33:82:39:b1:95:32:cc:3c:81:ce:a7:15:96:
4b:bd:2b:c8:77:b2:f4:85:34:12:41:fc:2e:a7:f9:
7a:9b:21:1a:5a:64:4a:52:0b:9f:07:55:1d:6b:ea:
ec:80:95:e8:4b:e3:d5:f5:4f:c6:b7:0f:5c:99:58:
02:f9:5c:3d:f6:2d:e7:df:14:02:28:03:34:e8:cd:
20:08:4e:38:c3:f6:9c:b3:44:b7:e7:35:a7:93:36:
63:f9:a5:0b:f1:e0:df:db:b6:fe:29:06:20:ad:6d:
4e:4c:3a:96:b7:3b:00:d2:eb:e1:7b:16:97:da:3c:
db:dd:15:e6:c9:c8:f1:4e:3f:b1:51:af:13:79:af:
c3:6b:df:d9:bc:4d:e3:46:1a:a3:ca:33:4c:f7:fe:
a5:14:d8:7e:01:7a:e8:65:d6:ec:5c:f7:b2:68:ac:
93:fa:23:bd:d1:bc:0b:f9:a4:ce:1d:7e:23:59:7b:
bf:5c:ae:95:1c:c3:7f:58:e8:37:a9:ab:f6:2b:32:
f7:bf:d3:52:d5:da:a3:d6:09:95:ab:7c:b2:df:f8:
f5:8e:24:19:0d:0a:8a:bc:da:7f:2f:d8:10:17:ec:
3d:b6:90:82:8d:29:5f:3d:2a:64:26:0f:eb:39:d5:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:CE:6A:0B:BB:C0:2A:3A:01:79:41:5E:73:46:D6:59:5C:21:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HdjOagu7wCo6AXlBXnNG1llcIY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:88:db:b3:3c:6b:9b:70:7d:19:73:48:91:1f:9d:ef:7b:52:
8e:13:ed:85:d5:2a:bb:50:42:72:6e:d4:42:ef:6e:f3:75:84:
c4:39:83:1e:51:4b:e2:5f:47:46:1a:6a:ac:25:12:5f:ee:59:
e0:d5:31:b8:5f:25:30:62:20:47:86:90:df:4f:48:ef:03:3f:
ca:1f:13:ac:77:94:ad:c3:3e:47:33:de:5e:9a:d9:bd:55:41:
9b:7a:7e:8f:3c:5d:f2:0b:8c:de:0d:09:3a:e5:4c:3a:a4:dc:
85:0c:db:0f:8b:f8:63:b0:70:94:ad:eb:21:81:dc:de:5d:37:
14:05:e2:8a:51:aa:99:39:fd:2b:dd:e2:43:13:10:87:7f:87:
35:27:a0:0a:15:38:af:10:03:dc:a1:2b:b3:db:bc:e5:ab:05:
de:74:3c:6e:d4:e0:ad:82:b7:33:3a:8b:a6:25:05:c0:7d:e4:
88:7e:1b:d3:e0:18:c3:85:3e:2e:5f:c8:bc:04:be:37:98:56:
79:39:8f:b4:eb:c7:a6:47:6e:75:c1:d5:84:e2:40:01:40:17:
64:db:d1:6f:f4:e4:e4:e8:83:4c:6c:44:36:9b:9c:37:ac:97:
d5:c1:7b:6e:d3:91:ab:fc:9a:55:6f:ef:f1:08:5f:2b:05:6c:
a9:b2:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:40:33 2025 by rpki-client