Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf4jJb1Qq0ZsBqbFvLP66qcTxeM.roa
File: Hf4jJb1Qq0ZsBqbFvLP66qcTxeM.roa (raw, json)
Hash identifier: q7CLRvvnusEppMnxsMiMjRPfC9q2+7cAi5uQWpzD7u8=
Subject key identifier: 1D:FE:23:25:BD:50:AB:46:6C:06:A6:C5:BC:B3:FA:EA:A7:13:C5:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 893B326C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf4jJb1Qq0ZsBqbFvLP66qcTxeM.roa
Signing time: Thu 02 Jun 2022 07:18:22 +0000
ROA not before: Thu 02 Jun 2022 07:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302358124 (0x893b326c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 07:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dfe2325bd50ab466c06a6c5bcb3faeaa713c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:de:d5:75:5f:4d:b1:9c:fc:47:87:ce:c8:
8b:8a:07:2d:41:a7:e9:62:e7:2d:54:9c:42:b2:d6:
52:37:63:68:d5:85:f7:25:fe:94:4a:8d:df:8f:59:
f7:0f:ec:90:96:30:cb:90:af:4d:bd:47:b8:4d:c2:
4e:46:9a:8a:4e:53:ff:e9:3c:c0:dc:d5:9f:a3:3d:
58:ce:1d:20:1b:1a:31:1b:fe:75:7d:30:38:37:de:
2d:c3:84:25:b8:60:48:bb:0c:cf:42:ae:8b:28:c6:
aa:2d:11:f5:75:3b:84:39:11:a2:04:7c:d3:37:7d:
bc:6d:5e:ce:a7:04:c4:27:5c:cf:d9:c1:5a:77:d5:
e2:7d:9d:46:9b:f9:e5:92:ad:1d:65:59:1e:67:1b:
46:90:10:af:22:bf:ef:aa:df:bb:d4:98:a9:56:eb:
fa:99:e6:04:be:ad:3a:f7:0c:cc:ef:cc:27:74:66:
07:c8:24:30:fa:c3:7e:f3:74:cb:99:cc:e4:72:fa:
9b:e0:ab:1e:20:88:27:49:b1:f1:f4:f4:98:e8:32:
6b:6e:c9:9e:5d:8e:b2:db:47:c1:f2:3a:01:d4:ab:
1d:6d:10:54:7c:71:32:5a:61:ff:61:fa:47:b2:3b:
70:f1:a2:fe:8c:a7:7b:47:dc:6a:9c:11:ae:85:91:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:23:25:BD:50:AB:46:6C:06:A6:C5:BC:B3:FA:EA:A7:13:C5:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf4jJb1Qq0ZsBqbFvLP66qcTxeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:ea:2b:57:ac:24:56:ab:72:8d:28:27:de:ff:40:6c:7a:64:
ae:28:78:ac:fc:36:b4:c5:d6:e2:c7:fb:2d:33:f4:e7:2b:48:
06:31:20:8d:98:fc:29:96:ed:75:32:91:24:7f:e8:e2:d4:aa:
8a:3c:3e:fa:8c:7b:54:76:7b:96:43:87:b9:2d:56:e7:64:5f:
41:10:a1:36:33:d1:06:0c:45:85:51:cd:c7:bf:0b:c4:ec:37:
5a:21:f6:1a:ec:2c:4c:de:6f:49:ee:0b:90:10:fe:7d:96:02:
64:31:c3:e7:76:f4:c6:72:a1:36:78:a2:ca:f8:a0:11:2f:39:
b5:75:42:d7:64:5f:15:59:f8:7f:69:ea:c3:be:09:e1:61:a0:
3e:9c:5f:1c:47:97:6a:9c:33:c1:90:4e:29:71:02:f0:31:ea:
78:aa:da:dc:90:f4:8f:7c:5b:61:bd:11:cc:1e:68:c5:43:23:
bf:56:fe:1d:76:0d:7d:0e:c4:06:24:1a:82:81:0a:96:3e:7a:
03:94:35:00:c3:2b:64:8d:15:17:ce:42:6c:1f:d6:8b:db:6a:
36:e1:fb:45:68:60:e7:71:01:ea:e8:96:95:f5:46:5d:d3:e9:
f4:b7:7e:bb:f7:e3:65:19:62:30:d5:3a:78:0a:73:54:97:98:
da:e8:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:13 2025 by rpki-client