Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiVrAD_7B5oFRlTRUFLmIwAXlPA.roa
File: HiVrAD_7B5oFRlTRUFLmIwAXlPA.roa (raw, json)
Hash identifier: 62FbFkRDgElmYWhjX2Xq7FtSTDaB9jT5aMlrQ8O45Hc=
Subject key identifier: 1E:25:6B:00:3F:FB:07:9A:05:46:54:D1:50:52:E6:23:00:17:94:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AB0320D49E7ADED90D73AB39F2578875
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiVrAD_7B5oFRlTRUFLmIwAXlPA.roa
Signing time: Sat 22 Apr 2023 22:08:41 +0000
ROA not before: Sat 22 Apr 2023 22:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ab:03:20:d4:9e:7a:de:d9:0d:73:ab:39:f2:57:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 22:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e256b003ffb079a054654d15052e623001794f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:52:8a:ec:a9:9e:8c:67:26:92:5c:ab:1f:
55:1c:55:01:43:68:82:0a:c0:cd:9a:67:11:76:ef:
b3:e9:19:90:e6:46:01:d9:eb:2f:c5:1d:bd:41:c0:
84:dd:ea:1c:15:7d:dc:cf:d5:e8:e3:2c:24:29:26:
a2:38:cf:2b:99:e8:8e:81:cb:e3:c1:7e:39:52:54:
26:25:ad:78:67:99:fa:18:c1:82:63:fe:14:0a:27:
fa:ff:3b:1b:12:13:21:65:f6:a6:d9:3b:2b:ac:b7:
3b:f9:2d:b8:2e:65:0a:47:40:fd:8c:4f:58:e4:0e:
a8:fc:08:9c:ee:c6:00:88:fc:98:70:b2:08:47:58:
f4:ce:fe:70:70:25:a9:8d:d2:73:e8:c6:8b:90:1f:
3e:c4:0c:5f:3d:b6:4d:03:0f:f7:d2:2d:c0:e6:c4:
dd:97:3f:65:14:d3:8e:b6:11:0c:0b:11:0a:68:9f:
be:cf:fc:40:c1:6e:3b:38:1d:8b:7d:3b:5f:c6:8f:
61:d1:cd:cd:60:2e:7e:53:eb:a7:b4:97:c1:d4:0e:
d4:7e:3e:83:6a:f3:82:84:cc:bb:43:0c:06:99:a2:
c2:b1:dc:cc:32:e4:3b:c9:34:65:1b:04:d8:77:50:
46:8b:86:25:ed:e7:5a:b3:4c:75:90:b3:38:77:f2:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:6B:00:3F:FB:07:9A:05:46:54:D1:50:52:E6:23:00:17:94:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiVrAD_7B5oFRlTRUFLmIwAXlPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f0:90:dc:61:ea:fa:6f:33:ea:2d:8a:ce:1a:21:79:9d:60:
ed:f4:bb:2a:7d:97:a7:e7:2b:ea:74:e4:22:3d:5d:f8:41:8f:
99:98:8b:21:0b:6f:72:7e:f0:38:d8:c4:7c:06:35:df:69:2d:
d2:83:be:ea:0f:06:5a:b7:c8:13:29:ca:c7:21:55:ab:a2:b6:
50:58:b4:79:00:2e:68:bc:28:ab:21:07:b1:3c:a8:63:2a:26:
e6:bf:5e:7d:1d:a1:84:18:d3:21:16:48:78:12:08:b3:d5:42:
ce:79:13:a1:77:09:2f:fa:e3:ea:b4:23:ba:d0:8b:b2:91:8c:
a5:ed:51:13:41:57:8e:fe:d4:81:19:8f:eb:2e:10:cf:90:84:
69:ac:81:d8:1c:4c:96:f3:71:bc:15:e3:62:c8:86:4b:26:de:
5c:db:bb:65:31:bb:0e:0b:fe:fc:38:27:93:e7:85:58:29:f6:
37:dc:7f:28:ff:8e:a6:1d:d1:fc:df:68:f5:12:67:2e:40:bc:
d9:5b:79:08:f9:10:ea:1f:3c:30:67:1b:a4:97:21:4f:b3:3c:
22:18:82:dc:5e:38:3e:2f:0c:0d:3a:1f:b7:dc:b2:97:92:51:
48:57:ff:62:23:d7:14:f4:8e:1b:7b:59:ef:49:4b:fe:57:10:
ee:30:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:58 2025 by rpki-client