Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hek9AEEx9lBRKJDnrQDTzKPHakQ.roa
File: Hek9AEEx9lBRKJDnrQDTzKPHakQ.roa (raw, json)
Hash identifier: LYyUHthjloqTJDX3ew6cE32X9a/qtO9N2r4DPl93XcE=
Subject key identifier: 1D:E9:3D:00:41:31:F6:50:51:28:90:E7:AD:00:D3:CC:A3:C7:6A:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B1F020A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hek9AEEx9lBRKJDnrQDTzKPHakQ.roa
Signing time: Wed 16 Feb 2022 14:24:49 +0000
ROA not before: Wed 16 Feb 2022 14:24:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797194250 (0x6b1f020a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 14:24:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1de93d004131f650512890e7ad00d3cca3c76a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:da:13:42:91:27:7d:c6:88:5d:34:c2:b8:
b8:93:16:e3:05:c2:7f:a5:28:24:b2:ba:ba:4e:ab:
67:1b:2c:07:f4:70:9c:3f:5e:78:68:2b:eb:a3:99:
e1:12:50:23:af:ac:9f:e5:c2:e5:64:2e:af:8a:bf:
1c:a0:71:4b:bc:17:de:ec:07:4f:f2:7e:f3:10:a4:
16:33:3e:df:8d:8b:86:ec:22:d0:ea:3f:77:a4:35:
62:e3:01:6f:e7:34:a3:b8:88:fd:c1:d7:67:93:89:
f4:c6:24:2e:0f:a9:5a:19:da:54:ab:ac:70:ab:79:
a4:e4:3b:1d:82:78:45:dd:db:a6:03:ca:c5:e2:5b:
a0:a7:1c:05:fd:7b:f8:79:63:46:70:8d:b9:68:73:
c4:ab:cb:31:c2:73:4b:1b:5b:10:1e:ea:61:2d:ea:
59:d1:b2:01:67:4b:27:cc:2d:ba:9d:90:07:ab:fd:
0c:83:3d:2e:3f:3a:6c:5c:e1:b4:c0:1f:45:ad:95:
b7:12:8b:70:a2:ce:20:fb:1a:67:69:4a:93:d2:94:
88:fb:1d:05:2c:fe:6e:1e:46:53:f2:2c:c8:b9:8f:
98:f4:d5:d2:80:3d:f0:5c:bc:6f:69:49:05:81:91:
f8:c3:28:d8:fa:fc:1f:f8:e3:d5:ec:78:7c:ca:24:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:3D:00:41:31:F6:50:51:28:90:E7:AD:00:D3:CC:A3:C7:6A:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hek9AEEx9lBRKJDnrQDTzKPHakQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:25:49:39:bf:24:1a:17:45:f9:0c:db:8f:ab:09:44:51:8f:
38:f3:8f:2e:a5:57:af:a0:dd:9d:a4:49:75:dd:4d:0c:c4:a0:
2d:95:d7:96:3a:bc:19:5a:67:21:bb:2f:27:95:02:b1:94:a4:
a9:81:84:e3:32:5b:18:70:0f:16:d7:5c:d6:35:fb:ff:b5:32:
5b:e7:47:b0:60:4f:ed:ce:dd:64:b8:0f:f1:9d:a8:b7:09:69:
8d:11:f5:d9:cd:15:c9:68:f1:dd:40:f5:9b:03:e2:1f:b8:6d:
83:6f:85:34:91:dd:98:48:39:f0:ca:ba:04:b4:26:e8:97:ef:
ca:ec:0b:d5:d0:dc:54:f9:53:d5:43:ee:e1:be:6d:32:66:8b:
8e:af:26:f7:03:ca:f9:96:07:29:0e:44:2d:ad:12:6b:25:dc:
98:79:7e:b9:9c:5c:3c:5e:ac:96:8b:ad:00:57:53:9f:6a:13:
d7:f5:15:6d:86:b2:d0:83:87:82:ee:50:b2:67:4d:66:fb:1a:
4f:c1:64:3b:b7:ef:88:bf:fa:b2:4d:84:67:40:d1:29:70:83:
bd:22:c6:ce:70:34:80:68:52:b2:bb:4c:0f:8f:dd:d2:b5:d5:
2f:e1:69:e8:fb:0a:8e:91:aa:6e:52:02:c4:04:ca:39:ec:fe:
b6:fa:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:57:20 2025 by rpki-client