Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ho-C0YXKdMW6Rz483B6h6CkIRfA.roa
File: Ho-C0YXKdMW6Rz483B6h6CkIRfA.roa (raw, json)
Hash identifier: 7/uh6KSsjpQ3BvGiKlLgm7qvwV+t2VNRThhAlH+4tVU=
Subject key identifier: 1E:8F:82:D1:85:CA:74:C5:BA:47:3E:3C:DC:1E:A1:E8:29:08:45:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A01422053CAB73E18552D726D1BD1D15B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ho-C0YXKdMW6Rz483B6h6CkIRfA.roa
Signing time: Thu 17 Aug 2023 02:10:25 +0000
ROA not before: Thu 17 Aug 2023 02:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:42:20:53:ca:b7:3e:18:55:2d:72:6d:1b:d1:d1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 02:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e8f82d185ca74c5ba473e3cdc1ea1e8290845f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:fd:a9:85:6a:81:fd:66:74:6a:2a:23:ca:
de:e8:1a:e6:69:f8:90:0e:56:03:a2:3f:88:af:fa:
6c:75:fd:24:62:f2:3b:f1:37:dc:c1:a6:a7:96:15:
1a:71:f0:a8:5d:80:c7:61:8a:3f:09:2f:83:53:09:
8e:19:7b:a7:aa:73:41:07:93:b3:e2:d9:05:72:ae:
d1:f1:58:c3:fc:16:cc:a7:ed:0d:73:0d:5d:21:56:
ab:a1:e5:6c:67:a1:f4:81:03:e4:0b:a0:5c:81:ee:
36:24:8c:66:84:07:ba:5e:67:ec:21:8e:82:10:5a:
09:f6:c4:1f:f7:84:ab:e3:cb:cb:35:ab:94:cd:9a:
c3:9e:8d:24:e6:50:54:de:64:ba:c3:28:e8:af:b5:
f7:14:3b:b6:b7:0c:41:a1:7c:ea:7d:ca:6f:a7:a5:
f0:9d:95:96:c4:06:e0:00:3f:f6:0c:d8:68:1c:6e:
e0:c9:13:c3:d1:b4:f1:74:ee:c8:7c:cb:f4:dc:67:
65:3b:a1:6e:8a:e6:6a:75:f0:bb:25:17:72:31:cb:
3a:73:2f:96:3c:74:bb:08:94:e2:a2:ef:38:d3:4f:
5d:ee:1b:80:08:f5:3c:e3:5c:c8:a9:96:c4:21:80:
07:2f:d9:1c:58:3f:bd:87:b5:a4:42:00:70:2d:31:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:82:D1:85:CA:74:C5:BA:47:3E:3C:DC:1E:A1:E8:29:08:45:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ho-C0YXKdMW6Rz483B6h6CkIRfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:19:f5:95:48:33:92:26:98:dc:a8:2d:9d:a8:f0:07:93:06:
65:fa:a0:29:a1:6e:1f:bd:8b:c0:ef:f9:72:0e:b3:c6:6a:89:
96:53:8c:0d:be:5b:7e:0b:bc:c0:4d:f3:bf:7d:1a:0d:ee:d3:
2b:3d:d1:98:99:51:a8:a6:fe:aa:8f:00:45:16:61:21:5a:09:
c4:55:85:ea:58:17:9b:73:2d:10:09:3c:01:d8:05:85:b1:d1:
e6:b4:9c:e7:54:b0:f1:2f:18:ad:bb:7e:56:4a:80:8f:c6:a7:
7d:98:da:72:75:9f:78:5f:d0:34:0d:24:3c:a4:78:c6:fe:35:
f6:3e:f0:c7:98:ae:e1:a5:bb:0d:f5:1b:aa:14:f4:b4:d3:f8:
86:8b:bd:08:89:60:71:2c:8d:13:d5:a7:3b:7b:3b:e2:17:4c:
ca:77:46:58:df:8d:5e:66:f1:d0:7f:04:fb:6d:f7:5b:2d:1b:
8a:fb:f0:f5:7e:d6:9e:eb:6d:56:cd:2e:95:be:b8:d4:c6:ae:
1c:23:64:eb:0d:35:89:36:b4:cc:85:47:1a:48:92:91:a4:71:
55:dd:54:5b:af:98:2d:79:1d:48:ab:3e:59:52:7e:1c:45:4a:
ec:ee:d7:53:76:09:b2:0b:67:ca:86:ba:09:db:76:8e:31:19:
1a:d6:1e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:31:22 2025 by rpki-client