Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf9veJdf7pG2A71cMoMwacQ9az4.roa
File: Hf9veJdf7pG2A71cMoMwacQ9az4.roa (raw, json)
Hash identifier: 7YAGfkG1Vx3fMInX+Lt9S4CriUQSSmj1BvVmuIFFaHI=
Subject key identifier: 1D:FF:6F:78:97:5F:EE:91:B6:03:BD:5C:32:83:30:69:C4:3D:6B:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F0FCF5211A70389DA59CA0A32B1233ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf9veJdf7pG2A71cMoMwacQ9az4.roa
Signing time: Fri 27 Jan 2023 02:09:47 +0000
ROA not before: Fri 27 Jan 2023 02:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f0:fc:f5:21:1a:70:38:9d:a5:9c:a0:a3:2b:12:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 02:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dff6f78975fee91b603bd5c32833069c43d6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:48:07:60:63:96:7c:e2:a2:47:0e:26:1b:
91:58:51:01:6f:c6:62:77:ff:0e:a1:2c:50:2e:cc:
17:e9:6c:d7:1d:68:44:27:91:f6:28:9a:44:65:98:
62:d0:55:e6:46:60:1e:56:75:48:10:5f:f8:4f:19:
3f:c7:16:8c:99:59:44:22:b8:3c:c9:05:e9:e7:d0:
c4:ab:8b:08:9f:77:70:65:26:27:08:25:c2:2d:e3:
47:b9:19:0e:e8:38:c1:bf:13:55:ae:4d:6f:1b:48:
49:79:53:fb:52:ed:9b:70:2f:e7:4e:b1:b7:80:92:
b5:e3:d5:da:7f:3f:5b:0c:86:b0:e3:a0:de:7f:cd:
01:72:51:2e:fa:3b:8c:ba:e9:e9:f8:d0:14:16:8a:
b9:88:ab:e7:1d:17:6c:21:3c:92:44:4c:f6:3b:fa:
26:a7:cb:e9:3d:10:cd:c8:4d:7f:1c:ef:c9:de:76:
1c:6a:ca:7d:84:71:0e:12:7e:37:63:2b:2c:1a:a8:
88:a1:d5:e5:c2:50:61:de:79:d9:0e:3b:c9:d6:56:
70:dd:56:22:25:3a:d4:71:36:1f:62:a0:55:f1:2f:
6f:db:2f:4d:82:9f:de:d3:1b:27:15:74:8a:f7:c2:
4b:28:f2:40:1b:b0:df:b1:19:ff:5a:77:71:f6:00:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FF:6F:78:97:5F:EE:91:B6:03:BD:5C:32:83:30:69:C4:3D:6B:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hf9veJdf7pG2A71cMoMwacQ9az4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:43:55:25:5e:e9:36:62:a9:74:96:e4:04:20:e4:3b:95:08:
0a:01:d7:36:0d:43:10:1f:bd:8e:54:de:f9:bc:5d:ec:ba:69:
5a:a7:a2:3f:b0:7b:69:d2:53:48:c1:6d:32:88:8d:ea:9f:d6:
7e:15:ab:fb:ab:90:64:c6:fd:21:4b:01:50:9b:9a:e9:45:66:
1e:f9:f5:93:20:1c:8e:31:e9:a2:be:15:65:bc:d4:f6:64:26:
78:d2:a1:02:ca:29:0d:f2:df:b8:fc:a1:b2:7c:cb:7b:67:43:
cf:77:40:be:ed:e3:4e:38:a8:a9:cb:4d:cd:bf:dc:e7:0f:25:
32:52:96:10:92:b9:8e:c7:8e:f3:bd:79:25:b5:0d:39:28:12:
ce:1e:53:9d:77:be:db:b5:a0:10:5e:3d:15:d0:8c:2a:b4:1a:
a2:62:80:5a:0d:02:15:23:48:a5:a0:dd:47:48:47:19:15:ac:
1a:6b:c6:6a:a1:bc:75:45:a1:75:10:c0:db:2d:45:97:92:f5:
bc:62:b2:24:a8:6e:eb:93:0f:47:fe:05:8f:4d:f8:56:4a:6e:
45:a4:a0:26:07:5c:17:12:5d:49:c2:a4:e2:78:9d:d1:8b:22:
ec:cd:ef:34:94:29:54:3f:6d:cd:c8:c5:23:f0:6c:ff:da:99:
4e:15:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:52 2025 by rpki-client