Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HirrZEITVXrJ_PJJE2xB7T_EBho.roa
File: HirrZEITVXrJ_PJJE2xB7T_EBho.roa (raw, json)
Hash identifier: apwFx9qH7r+BT2ZtItihln8sda32z3Z6Wdy3zEWJS3A=
Subject key identifier: 1E:2A:EB:64:42:13:55:7A:C9:FC:F2:49:13:6C:41:ED:3F:C4:06:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872C2EAF0056775C01C5EF0846E0C0182F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HirrZEITVXrJ_PJJE2xB7T_EBho.roa
Signing time: Wed 29 Mar 2023 07:04:29 +0000
ROA not before: Wed 29 Mar 2023 07:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:2c2e:89d9/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:2e:af:00:56:77:5c:01:c5:ef:08:46:e0:c0:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 07:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e2aeb644213557ac9fcf249136c41ed3fc4061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:31:39:13:0b:09:0a:77:50:ad:cd:25:d7:
2f:ad:8d:8f:f2:2d:5b:5f:74:e3:51:23:27:2c:ef:
e7:02:31:d3:60:3a:d1:75:3f:44:5f:fa:79:6b:e2:
25:44:2d:cc:d0:4d:f8:e3:b7:23:4d:8e:a0:a2:54:
cf:3f:c6:95:fa:cf:8d:a2:54:b6:d7:ba:fa:3e:f5:
62:1a:a2:a6:17:17:c0:43:1a:f7:06:f5:84:2d:42:
12:00:51:f4:2e:4d:c0:b2:45:9c:bc:31:1b:0c:37:
0b:f8:ea:27:5c:ca:0b:c1:07:c1:a4:ce:cc:0a:79:
c1:66:6d:d5:90:00:b1:82:65:99:01:97:84:53:e1:
0d:a5:70:19:13:fd:68:bc:7f:06:fb:69:b7:96:db:
46:15:fa:39:73:42:51:96:0d:ef:1c:07:4b:25:13:
77:42:3d:49:2c:30:77:c4:d3:41:8a:d1:78:6b:a6:
10:58:3d:96:3f:98:23:97:fc:72:fb:ea:c9:61:1a:
66:75:a5:58:1c:60:25:0c:dd:9f:76:22:a5:da:43:
6d:19:95:0b:7d:54:57:df:e5:3a:b5:d0:a1:d9:e2:
88:16:73:a6:cb:55:dd:06:43:b1:34:6a:41:5f:8e:
37:51:8c:e5:41:0c:2d:ca:fa:d6:69:ee:c4:56:5d:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:EB:64:42:13:55:7A:C9:FC:F2:49:13:6C:41:ED:3F:C4:06:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HirrZEITVXrJ_PJJE2xB7T_EBho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:88:ae:92:60:0d:c7:3b:9a:6d:c5:fe:6a:03:7e:35:6b:0e:
e6:d8:53:ca:7b:2b:cc:a4:bd:cb:16:7b:2e:e1:79:6f:4e:1d:
9e:2c:2f:8d:ca:2d:9f:99:6a:11:5a:d6:4f:24:da:8a:7c:dc:
60:43:ac:b9:89:bf:41:2e:8c:9c:58:b3:ba:11:ab:a5:64:61:
1d:54:6e:4d:32:b7:62:a9:7b:04:17:6d:a0:71:e2:72:9b:40:
e3:4f:62:c1:64:95:c5:ed:b7:a5:f5:76:3c:7c:3b:85:58:de:
3a:78:73:88:99:a5:3d:00:26:07:29:17:d2:ab:08:c3:96:cf:
00:90:10:10:ab:9c:90:76:03:98:05:b4:e5:06:99:a3:27:1a:
64:bf:10:25:78:ed:5a:1c:28:27:be:b9:f1:8d:8f:08:61:21:
e3:c8:f8:85:3e:d3:18:a7:0c:dd:f4:bc:fd:a0:1c:db:ea:4e:
07:6e:64:c3:82:90:f2:f2:f8:6a:b7:5e:2d:cc:ab:e5:1d:04:
9d:4e:38:8a:e5:93:80:86:79:a8:ee:75:a7:91:e4:6c:4c:3c:
fd:40:22:dd:93:30:04:f0:19:93:9f:0b:f5:75:51:16:0d:ea:
73:3a:f0:05:02:8e:93:62:b1:26:6c:9f:98:d3:d0:8c:96:b9:
4c:67:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:16:04 2025 by rpki-client