Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgM2ijE7wTgPdWXWelKKtWdi6wQ.roa
File: HgM2ijE7wTgPdWXWelKKtWdi6wQ.roa (raw, json)
Hash identifier: YdGZKKiVpqb2AlRVC28m+ZUrOPYYEAax9oz3e5V4irg=
Subject key identifier: 1E:03:36:8A:31:3B:C1:38:0F:75:65:D6:7A:52:8A:B5:67:62:EB:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75229CDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgM2ijE7wTgPdWXWelKKtWdi6wQ.roa
Signing time: Wed 23 Mar 2022 22:10:25 +0000
ROA not before: Wed 23 Mar 2022 22:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965202650 (0x75229cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 22:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e03368a313bc1380f7565d67a528ab56762eb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:77:75:8a:be:86:da:5a:2c:e3:2f:70:59:
40:80:d0:fe:97:d5:d4:82:cf:b1:7e:73:aa:bb:39:
f0:ed:ee:49:2d:97:93:55:dd:0c:40:2c:3b:7f:2a:
1f:c1:ba:53:62:d8:d3:72:fe:90:46:d9:75:c9:0e:
5d:4e:75:38:31:25:ce:46:50:cd:ea:db:6d:93:d7:
0d:09:79:b3:83:73:8c:39:5c:cb:34:5f:6a:13:d0:
fe:cd:34:5e:c2:aa:27:f5:e6:af:1b:59:5f:42:f8:
4d:da:8e:59:e8:db:87:50:32:41:58:17:03:30:36:
26:c8:33:7f:3f:ad:fd:92:06:69:b5:28:d7:40:2d:
bc:3b:9d:dc:7f:93:c7:8d:e4:eb:99:e0:18:21:03:
d8:7f:2a:7a:c1:ea:c5:6b:ec:48:96:61:7e:ea:34:
5f:60:09:43:6d:b0:cf:59:00:8b:f6:ea:fc:7e:4c:
35:06:11:6b:5d:e3:c0:06:18:6d:eb:fd:8a:2c:2e:
42:1b:ee:63:ec:18:9d:0a:6c:4e:bf:2e:cf:95:0c:
b0:3e:f8:1a:5d:fe:4b:44:53:14:27:5b:dd:69:7b:
9e:08:72:f9:97:b9:2f:20:7b:fb:b4:94:53:86:fa:
85:2a:4c:0d:43:93:77:87:1a:07:6a:4b:bc:46:41:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:03:36:8A:31:3B:C1:38:0F:75:65:D6:7A:52:8A:B5:67:62:EB:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgM2ijE7wTgPdWXWelKKtWdi6wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:65:24:b3:52:70:c8:37:37:b1:fb:49:43:d1:b4:b1:86:e6:
6c:d3:86:88:03:0e:ca:4c:2f:92:8c:34:84:27:92:8b:9b:81:
1a:38:18:23:3d:a3:1c:01:f1:f5:c4:43:8e:ce:bc:72:c2:94:
d5:e0:44:c7:ab:c7:a4:39:a5:a7:17:b4:7d:5d:32:ea:5e:0e:
90:60:bc:ab:41:83:62:e6:a9:96:41:42:d1:7b:ea:06:4a:6d:
1d:f8:10:10:09:67:eb:c7:60:15:86:2e:ec:08:1d:a7:8c:ca:
13:6e:12:fe:f0:23:dc:62:9d:82:4e:b3:0d:a1:dc:58:2e:03:
38:d0:d3:3a:82:42:7e:8c:73:4c:32:72:17:72:1d:cf:bc:dc:
13:af:49:3a:46:4d:b4:e4:ca:2a:5b:6e:cc:b1:f9:d4:43:1e:
d4:2e:63:9c:41:dd:b0:e3:ca:d5:d7:df:d6:8d:fd:b5:5f:b4:
b0:92:85:f2:9c:00:7b:3b:8d:83:bf:ad:ec:32:03:40:a8:fc:
45:96:c3:33:aa:fe:1b:5f:5b:c0:67:d4:ae:87:0a:61:fd:c5:
7c:d2:70:63:3c:35:58:a5:c7:14:5a:39:ec:0c:79:8e:ba:3c:
e9:f1:5c:74:be:9e:6f:ab:67:3a:2c:ec:2d:7d:fe:42:c8:97:
8f:4e:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:11:10 2025 by rpki-client