Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HoeaRu3AiYYBR8c0DFWFltfE8-U.roa
File: HoeaRu3AiYYBR8c0DFWFltfE8-U.roa (raw, json)
Hash identifier: eHiL/R83DCZHFRgdPA5u9RX6m81HYbwy/syNOOoPAjs=
Subject key identifier: 1E:87:9A:46:ED:C0:89:86:01:47:C7:34:0C:55:85:96:D7:C4:F3:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859A835FDAC3B67205AE5E8CBF6FED4AF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HoeaRu3AiYYBR8c0DFWFltfE8-U.roa
Signing time: Tue 10 Jan 2023 07:09:39 +0000
ROA not before: Tue 10 Jan 2023 07:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:83:5f:da:c3:b6:72:05:ae:5e:8c:bf:6f:ed:4a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 07:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e879a46edc089860147c7340c558596d7c4f3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:32:81:24:d9:bd:91:21:30:6e:6e:ce:f5:
53:c1:6a:15:01:8d:c9:3b:28:fe:ba:e5:0f:3a:d6:
7f:e9:47:cf:b7:7a:31:3f:62:39:ef:f6:84:20:be:
8a:5e:d4:53:d1:01:15:31:1f:96:f0:40:85:07:10:
e8:bc:1f:58:d7:01:d5:e1:5b:4d:0e:6b:fd:72:6a:
31:d2:fa:07:e4:d2:ec:b8:79:b3:ef:ef:6f:80:c6:
32:5c:fe:61:91:20:6a:f5:81:42:13:3e:3a:76:f0:
ad:b4:bb:ab:82:fb:3e:06:77:f2:1f:bb:dc:43:cd:
86:7e:23:92:f8:a2:aa:52:e8:f3:ad:4b:83:af:bd:
f0:94:ab:0a:c9:9f:a8:aa:30:32:7f:c7:47:4e:0a:
96:45:9e:13:cb:f2:d9:f9:5d:12:7f:db:9d:37:3d:
ee:40:c3:63:0c:cd:6e:bf:ca:5f:eb:41:b1:a5:50:
08:1c:26:58:26:b9:54:c7:ae:3b:83:22:5a:09:71:
4f:0b:7a:bb:28:24:53:16:ae:15:12:4d:38:c9:31:
77:5c:ef:35:7d:8e:46:44:eb:50:4d:c1:6d:d0:ce:
cd:fe:5c:0d:56:58:f7:6f:28:07:ee:79:75:eb:f2:
5d:30:b0:58:27:43:9b:8c:ca:b8:61:3d:87:83:74:
b8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:9A:46:ED:C0:89:86:01:47:C7:34:0C:55:85:96:D7:C4:F3:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HoeaRu3AiYYBR8c0DFWFltfE8-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c7:02:7b:61:71:f0:51:e3:6c:c6:49:4a:16:d9:dc:ed:8c:
7c:21:c7:4d:9a:91:e3:7a:80:e0:f1:eb:6b:56:e1:a9:ce:9a:
46:12:b4:d7:fb:79:ab:07:3e:2e:cb:2c:24:78:e1:3b:e7:bc:
81:3f:c2:11:45:fb:c1:7b:cb:a2:40:43:0c:30:c9:30:80:c8:
ca:84:5a:9a:de:05:c8:9e:a0:40:f2:c6:34:c2:34:3d:c8:c3:
a4:64:f1:53:12:69:5e:1f:99:f7:e6:8e:a5:5e:75:b4:ef:29:
87:60:6b:ac:f2:28:49:df:66:3e:6d:0c:66:6f:70:5d:74:30:
8c:c0:63:71:6a:df:99:56:e7:51:02:2b:0e:53:55:47:87:67:
7e:ef:2a:48:39:b3:d0:36:57:e1:73:14:ed:aa:cd:68:e0:f7:
d3:5e:7a:88:cd:53:20:20:92:e0:45:87:f8:05:ce:e6:cc:71:
ba:18:26:d1:69:ee:29:91:5e:06:54:94:70:ac:7c:15:1c:82:
d1:92:12:d9:a2:a3:64:74:71:66:2c:23:e7:41:c1:96:5b:c1:
ba:1d:34:a0:89:96:5f:94:ce:3d:28:d9:8b:22:24:a8:93:b3:
1f:2e:5e:7b:98:17:03:23:44:d8:09:3c:5a:a7:95:c4:1e:9c:
b3:86:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:26:06 2025 by rpki-client