Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhSVZ0N9LoTvTykK1ZvLzBC4RD4.roa
File: HhSVZ0N9LoTvTykK1ZvLzBC4RD4.roa (raw, json)
Hash identifier: 1ndDFRtv/75PN+4BLN1z1IdE+WMOTueepn/CbBSR6Qo=
Subject key identifier: 1E:14:95:67:43:7D:2E:84:EF:4F:29:0A:D5:9B:CB:CC:10:B8:44:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BE89A4BD910C165916FD3F1557B38816
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhSVZ0N9LoTvTykK1ZvLzBC4RD4.roa
Signing time: Fri 04 Aug 2023 03:13:58 +0000
ROA not before: Fri 04 Aug 2023 03:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:89:a4:bd:91:0c:16:59:16:fd:3f:15:57:b3:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 03:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e149567437d2e84ef4f290ad59bcbcc10b8443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:c8:07:be:77:57:d0:4d:bd:b6:ab:14:c8:
9b:27:00:54:5a:a5:7d:ad:ec:56:7f:1b:67:6b:d2:
27:69:8d:6b:88:0e:0f:46:f5:5a:90:e8:77:5d:09:
9c:f7:8d:53:66:ba:e5:fc:9d:c5:ff:7d:49:76:fd:
a4:ef:75:ff:b3:e5:23:6f:c2:30:1a:17:8d:b8:60:
4a:ae:73:bc:7e:ac:90:1a:e9:4a:0b:c4:9f:9f:ea:
6f:f8:9c:3b:d9:ff:7c:a0:91:10:bf:f9:2d:19:d6:
cb:4d:1a:b7:96:dd:20:1b:f2:7e:f0:da:ed:48:50:
cb:57:b4:93:31:bf:a6:57:1c:d0:62:a8:f6:86:b8:
7d:7d:42:dc:98:b9:36:13:89:ba:9c:01:bf:cd:3b:
44:3f:f4:e7:ad:65:dc:9b:4a:72:29:d2:c7:0e:b8:
ff:89:5c:83:c1:e0:05:e1:e0:03:aa:9d:74:b0:a2:
72:41:0a:db:9e:f3:8c:d9:6c:00:8d:a7:ef:b1:5d:
5d:fc:76:8e:be:14:92:43:e4:49:ee:69:03:fa:7b:
85:19:51:4a:f7:2a:98:ef:99:37:2b:b5:ec:09:e8:
f2:09:8e:15:d3:e7:a0:1e:ed:84:ed:3f:47:70:e9:
65:13:45:bd:ef:49:1c:3e:02:6a:5c:3f:50:57:00:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:95:67:43:7D:2E:84:EF:4F:29:0A:D5:9B:CB:CC:10:B8:44:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhSVZ0N9LoTvTykK1ZvLzBC4RD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:b9:ee:6a:29:87:d4:ff:46:ac:68:3d:44:ac:8a:f2:f2:9e:
b0:e5:8e:3b:47:e9:bb:20:3e:1d:c5:df:0b:5e:cf:d0:31:ab:
c0:82:cc:39:fa:ce:24:9a:80:50:69:2a:9c:f3:fe:ec:8f:c4:
50:60:f2:dd:59:7f:64:ea:cd:26:41:c8:fe:18:81:c2:67:22:
0e:0a:45:9e:35:d0:1b:e0:85:43:c8:d7:5f:73:69:58:eb:5e:
61:1c:c7:2d:88:ba:45:58:9f:30:4a:70:d7:34:2d:2f:47:01:
28:79:7e:43:fd:27:d4:a1:5c:80:d0:ed:78:bf:24:4e:3c:87:
f5:47:81:fb:73:a4:33:1f:75:2d:24:ad:ee:48:1b:82:33:1f:
2d:7a:88:a7:1c:40:16:79:3f:e2:15:a7:9d:ca:ae:0c:5d:2c:
d9:84:52:04:46:31:64:3c:49:df:a7:a9:44:02:ce:8a:a8:6f:
f5:ff:3d:9b:75:f0:67:81:29:d7:e6:09:5a:73:6b:88:5f:44:
59:34:00:fe:9a:c3:25:3f:ba:e3:f5:05:10:45:b9:9b:a7:b9:
72:6e:87:79:40:a2:da:7e:d9:7c:cd:af:58:26:3c:cb:fd:89:
a0:f6:fe:e4:fc:f7:40:a3:a7:da:35:ee:6c:41:27:9b:6b:f1:
71:43:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:26:13 2025 by rpki-client