Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hh3L-0JwkF0zFpb8C438hHmpOdI.roa
File: Hh3L-0JwkF0zFpb8C438hHmpOdI.roa (raw, json)
Hash identifier: OXWKhIorifoIk5tiPlZIho9z572j/MZVmOoyLW6Ym8A=
Subject key identifier: 1E:1D:CB:FB:42:70:90:5D:33:16:96:FC:0B:8D:FC:84:79:A9:39:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018536BBB9FDA79445C76903D7B20AE9BD7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hh3L-0JwkF0zFpb8C438hHmpOdI.roa
Signing time: Wed 21 Dec 2022 22:09:10 +0000
ROA not before: Wed 21 Dec 2022 22:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:bb:b9:fd:a7:94:45:c7:69:03:d7:b2:0a:e9:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 22:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e1dcbfb4270905d331696fc0b8dfc8479a939d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:de:8b:a7:a1:2f:c7:ad:8b:02:af:be:fb:
26:df:6d:af:93:04:e6:65:56:ef:c6:b9:2c:6c:b1:
eb:4c:93:12:58:69:1e:48:85:ac:03:d1:b1:4a:cf:
6a:04:6f:39:97:da:fd:7c:1a:d0:f4:4e:b1:29:3e:
80:a6:43:5e:26:64:7a:3a:3e:75:97:4e:fa:d4:7a:
f7:eb:76:04:27:6e:64:7e:bf:56:57:f8:77:aa:49:
0d:7a:ec:d2:3a:5e:c6:f6:6d:12:b2:46:0f:2f:8c:
6d:20:01:b9:f6:56:bd:1b:9c:c1:ca:fe:ac:52:2d:
f1:e2:b5:cd:5e:b6:c8:87:82:7a:02:66:61:e4:8e:
20:d4:e5:a8:74:79:ac:43:68:b9:a7:93:04:01:eb:
0c:94:81:bd:30:ae:5e:f9:89:34:f8:48:ff:2b:ce:
aa:5c:89:c2:45:03:f5:19:78:5b:5c:a9:2c:40:a8:
88:95:07:d8:d4:02:50:fe:00:05:05:0b:5a:af:79:
b1:68:23:7d:29:d1:9b:a3:63:6e:ac:35:cc:a9:a3:
dc:cc:e5:49:dc:12:c0:bd:ec:82:c6:1e:a4:da:53:
10:a8:a2:c0:c5:a5:5c:2f:47:51:37:8d:c0:ec:3a:
0f:52:06:4d:00:51:ba:ea:69:0a:66:a3:16:ca:dc:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:CB:FB:42:70:90:5D:33:16:96:FC:0B:8D:FC:84:79:A9:39:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hh3L-0JwkF0zFpb8C438hHmpOdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:3d:21:63:15:6e:ee:cf:a5:32:d3:84:c7:0d:bf:21:de:dd:
aa:d6:71:e7:2d:d2:48:66:20:20:8e:d7:cd:02:cb:01:88:60:
3b:c0:c0:9c:ab:ab:fa:59:17:a3:66:85:fe:cb:eb:fb:08:e1:
7a:f7:d1:14:f3:29:9a:cb:50:57:cc:94:2e:f4:e7:42:e7:d3:
84:33:25:67:93:96:f5:6f:85:f8:d2:a7:c8:87:64:d0:c0:63:
30:dc:2b:87:1d:04:d8:71:f0:8a:25:43:88:5d:5d:a8:8e:87:
1f:bf:ea:a4:9b:59:cb:da:c0:c7:e5:cf:fa:94:f1:ac:0b:08:
be:63:57:2e:c6:69:f1:fb:75:db:12:f2:e4:ac:e1:26:3c:3c:
29:4f:26:c7:53:cc:3c:22:8b:6a:25:a6:85:4f:7d:bd:7b:90:
f4:cf:6b:f6:f3:ea:d0:d7:4c:12:2b:68:9d:05:9a:92:46:f2:
a0:70:ce:89:8e:8b:45:65:40:28:bc:05:c2:b9:5c:9e:dc:9e:
53:c5:a1:e0:3e:71:58:3c:40:23:4a:b2:b3:c3:2f:aa:a8:72:
a2:4f:78:f2:5a:18:47:34:45:2f:89:24:2d:2b:15:e1:f5:b9:
5a:5f:50:a5:de:a5:40:be:d6:f3:97:86:fc:01:7d:ef:2a:0f:
a7:22:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:39:19 2025 by rpki-client