Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HlO60mv5pNOZhj5I_8UQSHTbqkg.roa
File: HlO60mv5pNOZhj5I_8UQSHTbqkg.roa (raw, json)
Hash identifier: GrORmVqtQyo9DTamCfUiqbHjH3uu3iZw1dI6VuOiVuw=
Subject key identifier: 1E:53:BA:D2:6B:F9:A4:D3:99:86:3E:48:FF:C5:10:48:74:DB:AA:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DC1056F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HlO60mv5pNOZhj5I_8UQSHTbqkg.roa
Signing time: Sat 26 Feb 2022 02:18:29 +0000
ROA not before: Sat 26 Feb 2022 02:18:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841366383 (0x6dc1056f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 02:18:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e53bad26bf9a4d399863e48ffc5104874dbaa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:6e:00:24:2c:a8:f2:1b:25:12:7b:1b:b7:
42:1a:50:b5:f9:bb:4a:09:b7:1a:32:8c:cc:42:95:
4f:09:6a:e7:48:82:12:cb:2c:4e:d4:1e:af:55:b7:
d9:be:7f:18:32:26:0f:de:10:2c:7b:2c:0b:6d:5b:
6a:f6:a2:50:2b:be:14:3e:d6:b3:7a:9e:ab:0d:a0:
59:75:91:d5:c0:94:2a:61:7f:38:50:a3:f0:fc:e4:
c6:7b:98:68:a1:b2:1e:79:3e:e1:21:bd:31:3c:98:
37:81:29:4a:c0:95:78:e1:05:78:12:0f:a6:d4:0f:
7d:2f:db:fd:80:75:ce:a3:86:39:f7:ce:1f:01:32:
19:de:9f:13:8b:2f:00:27:e5:e9:70:bb:1c:b6:14:
0a:26:0f:93:8d:e2:42:b1:0a:f6:a7:95:74:11:f8:
7a:60:96:6f:9d:9f:41:6e:bd:40:47:2e:d6:82:d4:
7c:be:dc:df:a2:79:10:c8:f5:33:f4:e6:35:ec:a9:
09:95:38:7c:50:d7:d1:74:d5:b0:1c:38:05:bc:69:
ca:d9:6e:73:a5:e1:23:7c:7f:22:56:cc:d5:b2:bd:
4a:ef:34:81:a9:c7:b8:c6:d7:46:4d:67:3e:d0:14:
5e:21:29:e0:e2:91:ea:9f:2a:45:c8:7d:9e:8b:3b:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:BA:D2:6B:F9:A4:D3:99:86:3E:48:FF:C5:10:48:74:DB:AA:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HlO60mv5pNOZhj5I_8UQSHTbqkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:18:c6:2f:ac:95:a8:16:5e:5d:3f:b9:0c:8a:b6:3a:fd:05:
74:56:68:7b:09:61:2c:4a:0a:cd:54:a6:3f:8a:31:eb:88:60:
33:68:0e:0e:c0:ad:eb:07:2a:20:96:a6:33:f8:84:1e:e7:a3:
3c:af:f4:41:36:b0:c7:00:14:97:e1:05:c2:8e:4c:10:7b:b2:
22:00:57:9c:92:af:04:5b:42:11:fa:b1:a5:6e:57:b5:aa:20:
0c:d8:02:4e:c4:9a:e6:b5:9e:8f:ba:d7:92:2b:0e:08:f1:e4:
5b:aa:54:3b:3b:35:a2:2d:08:a4:62:0c:99:88:c4:f9:3d:17:
1a:e9:3f:10:bd:56:1b:0c:93:12:66:e7:8f:59:8c:83:77:4d:
b3:db:1b:db:bd:fc:84:53:4b:50:69:b8:56:20:e3:3c:ce:e8:
30:54:65:98:94:fa:89:6d:9d:b8:3f:4c:0b:6f:1b:d1:ac:20:
7b:29:69:90:be:78:a7:3b:d4:61:a3:80:c8:e2:96:d9:2a:91:
bc:30:5a:59:6c:05:42:d6:86:ca:df:fd:2d:36:fc:d9:f2:9e:
3c:7f:05:cf:b2:b5:f6:93:89:02:54:7a:43:f1:5d:5a:6e:84:
c1:40:27:e7:26:58:0d:05:ba:9e:9d:bb:a3:bb:7a:72:6d:d4:
c6:d1:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:07 2025 by rpki-client