Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgYalE75JBvhXILYXXPvHv2oydM.roa
File: HgYalE75JBvhXILYXXPvHv2oydM.roa (raw, json)
Hash identifier: HVYt4yYYnsjv0ZY3ijLc5Ctc0IzQ2aIECbZgwwe/2fE=
Subject key identifier: 1E:06:1A:94:4E:F9:24:1B:E1:5C:82:D8:5D:73:EF:1E:FD:A8:C9:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F58B4A5E8EB7B2160548A85D67444146
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgYalE75JBvhXILYXXPvHv2oydM.roa
Signing time: Wed 31 Aug 2022 20:15:22 +0000
ROA not before: Wed 31 Aug 2022 20:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:8b:4a:5e:8e:b7:b2:16:05:48:a8:5d:67:44:41:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 20:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e061a944ef9241be15c82d85d73ef1efda8c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:06:19:f7:1d:d4:ee:1b:a4:63:45:8a:4c:
14:ba:2a:a7:9d:24:ac:5e:36:1d:cb:95:1e:84:0a:
57:73:b0:e3:1e:0b:6b:83:e5:0d:44:e9:df:17:e1:
58:8b:9d:5d:ec:c8:be:d5:69:0f:4d:4f:92:4a:af:
62:7f:0e:5a:be:8a:76:de:4c:52:00:f6:ff:99:7f:
e5:5d:3c:b5:92:4c:3d:ba:6f:26:32:35:d1:fd:07:
0e:68:a9:98:53:35:51:54:2e:7e:b9:1d:e3:28:3c:
cf:cf:7e:c0:43:6d:e5:e2:09:34:d5:9d:f1:47:e8:
3d:1e:5d:8c:4e:32:03:6e:a8:02:00:95:20:9d:c3:
73:3b:87:09:ff:b5:ab:6b:0e:05:29:12:ff:ac:81:
b1:fd:29:9e:e9:36:39:09:81:9f:47:6c:2b:e0:e5:
86:37:5e:c8:d1:a8:2e:f1:fe:17:18:64:fc:57:a5:
43:fd:be:4b:c8:e8:68:3e:9b:d2:67:c2:b1:4a:69:
8c:e7:92:75:5f:59:84:74:6a:de:28:ae:dd:5d:fd:
05:ec:54:c4:c6:fc:29:fa:09:0f:70:d5:ee:44:b3:
27:7a:04:45:62:b2:f6:09:dd:a7:da:2b:18:e8:5b:
39:10:35:67:39:3a:10:c7:4a:06:4c:d8:1d:9c:f7:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:1A:94:4E:F9:24:1B:E1:5C:82:D8:5D:73:EF:1E:FD:A8:C9:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HgYalE75JBvhXILYXXPvHv2oydM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:93:32:a5:eb:b5:39:d5:0e:eb:50:b3:0c:e3:0d:81:06:6e:
d2:b3:ae:b2:fa:89:d3:d0:e8:87:5b:d5:cd:69:56:35:5d:52:
af:13:51:18:10:4b:55:6f:3b:73:5c:a4:1e:c1:cd:37:66:07:
45:57:2f:86:ca:f9:6b:10:af:4c:47:d6:44:b7:05:83:61:a2:
7c:33:80:5a:a8:4a:b8:70:06:e4:81:33:54:7d:d8:fd:69:53:
c7:f2:16:98:1f:d3:b7:c1:3f:76:e3:6f:aa:5e:11:83:88:aa:
35:5f:08:e2:6b:00:41:bf:61:11:56:b9:d4:5f:47:77:23:4e:
2a:a9:2c:fd:69:99:33:14:b0:6c:03:59:b9:42:10:ca:14:c3:
55:7c:55:fa:c0:17:0e:87:46:f7:45:91:e4:87:a6:4f:c1:6d:
24:49:ac:29:b3:f9:58:3b:2e:7f:95:f3:17:c3:8a:96:24:9b:
18:dd:b6:ee:99:d2:a1:b9:a7:76:68:8f:b0:5d:45:73:3b:3e:
bc:82:14:0e:42:9c:64:ae:a1:0a:75:a2:cc:83:9a:52:57:82:
0c:84:1d:21:c0:4d:31:4f:71:b0:0b:67:87:81:d5:dc:b4:e7:
49:0a:ce:69:56:aa:5b:3e:ae:bd:01:d0:86:d9:1e:0c:49:fb:
27:13:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:32 2025 by rpki-client