Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnrU36YEm0w9d-cQwktOnRIgxMo.roa
File: HnrU36YEm0w9d-cQwktOnRIgxMo.roa (raw, json)
Hash identifier: sN+H/wlqmHooeF1KGgpCY6uFPjLGkPmJ/q2S27x2V3I=
Subject key identifier: 1E:7A:D4:DF:A6:04:9B:4C:3D:77:E7:10:C2:4B:4E:9D:12:20:C4:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882A0CE896D466D74092DBF83D27DCAC64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnrU36YEm0w9d-cQwktOnRIgxMo.roa
Signing time: Wed 17 May 2023 14:11:08 +0000
ROA not before: Wed 17 May 2023 14:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:0c:e8:96:d4:66:d7:40:92:db:f8:3d:27:dc:ac:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 14:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7ad4dfa6049b4c3d77e710c24b4e9d1220c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:c2:40:24:2e:9d:ea:eb:ca:98:75:12:bf:
db:ca:d2:31:8c:60:58:e3:d2:f8:ce:75:c3:4e:5d:
5c:91:2b:f3:52:bd:d7:c6:e3:b8:22:60:c3:fd:f3:
cd:e8:0a:c6:0f:8c:44:ab:84:9d:9d:66:a4:c2:dc:
3f:9c:d5:52:a9:28:11:c4:42:52:80:46:76:e4:04:
3e:76:c0:17:6a:46:51:04:69:16:9a:ff:4b:28:24:
03:e9:17:6f:f4:d9:af:01:6c:14:1b:01:c3:ea:57:
bb:18:00:5f:be:70:5c:46:7c:f5:82:9d:2b:d7:e7:
0c:92:15:93:dc:34:68:58:30:6b:15:03:34:30:92:
ba:c3:02:c9:37:2a:20:eb:a2:74:7a:ef:1c:67:66:
53:b2:96:ca:d3:b1:db:ae:d2:7b:28:5d:8d:9b:c1:
fc:97:b2:05:6f:89:02:f9:58:dd:f1:bf:49:d3:93:
51:fe:05:51:f1:27:9b:25:c0:a0:01:18:99:ae:b6:
ae:f2:f0:e0:be:9d:7a:93:fa:26:e8:e4:e4:fd:53:
bc:cd:ef:aa:ad:b2:7e:e3:1e:1c:78:cd:f3:99:ee:
bd:b3:61:2b:b1:d8:be:22:83:0b:19:74:33:f9:38:
2e:4d:02:e5:bc:ed:61:d3:6b:f0:06:61:20:48:a6:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7A:D4:DF:A6:04:9B:4C:3D:77:E7:10:C2:4B:4E:9D:12:20:C4:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnrU36YEm0w9d-cQwktOnRIgxMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:31:de:bf:f0:0f:12:88:80:26:7f:df:a2:76:77:ab:2a:a3:
4c:d8:9b:ca:a7:29:4c:3d:af:68:5f:8e:4d:48:a7:97:e0:81:
1e:c3:36:58:80:7d:cf:cc:d5:99:de:26:22:dc:b7:dd:0f:2f:
9a:f9:a9:9a:b6:ea:d3:8d:3a:98:4c:99:80:0b:26:6c:22:07:
8a:d4:db:11:0b:0a:2f:14:88:a4:4d:2f:fc:b7:e8:94:b0:56:
10:4a:e7:d4:ce:1f:4d:0b:17:39:e4:cd:29:7c:ea:da:d3:20:
f0:f4:0d:90:36:2f:e1:b9:1b:04:a7:80:e1:cf:59:38:bd:d8:
6c:78:ff:7a:1d:e4:88:ed:67:2a:a9:29:36:d5:03:44:9c:cc:
02:4f:9f:ec:0e:0e:24:a8:ed:12:0e:e5:6b:34:ab:d5:e3:39:
fe:2b:3f:91:6a:c2:77:7a:c3:0b:f7:df:36:ff:75:b4:0f:9a:
1e:86:f9:46:2c:6d:3e:39:66:f2:17:60:52:6e:8e:f9:1a:29:
49:c3:8f:81:fa:31:42:25:3a:da:35:32:e1:d0:3c:dc:5f:0c:
4e:2e:48:0c:12:39:5d:f3:20:a1:b9:c8:76:c2:90:93:6d:57:
a0:80:bb:1f:e9:23:3a:8a:69:9e:8c:a5:e4:94:4c:3a:e1:d6:
5a:59:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:28 2025 by rpki-client