Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hp35K75t7xTceXNdKU2tpWyX_tY.roa
File: Hp35K75t7xTceXNdKU2tpWyX_tY.roa (raw, json)
Hash identifier: H2O+OeIVwYccslDwIzvdA23MzQpnH/aH/pIM3/5ZYWI=
Subject key identifier: 1E:9D:F9:2B:BE:6D:EF:14:DC:79:73:5D:29:4D:AD:A5:6C:97:FE:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867481EEC104B07CFA46905B2810CE67DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hp35K75t7xTceXNdKU2tpWyX_tY.roa
Signing time: Tue 21 Feb 2023 15:05:17 +0000
ROA not before: Tue 21 Feb 2023 15:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:7481:3bc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:81:ee:c1:04:b0:7c:fa:46:90:5b:28:10:ce:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 15:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e9df92bbe6def14dc79735d294dada56c97fed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:04:44:8c:98:5a:39:e7:fd:dd:8a:bc:4b:
8f:1b:e7:aa:aa:23:65:a4:e7:d7:3a:19:8d:a5:29:
67:99:7f:ff:77:2b:17:2c:33:c8:da:e9:8a:55:10:
dc:9b:40:7f:07:16:8c:42:e0:da:00:88:a0:d3:24:
af:ca:d2:d2:ea:83:9b:f2:cd:0a:8d:15:14:33:a2:
34:75:ee:b2:dc:6a:1f:32:c5:90:da:db:8a:dd:9b:
c1:3b:5b:1b:3c:af:cd:f9:fb:69:de:90:b9:54:28:
b4:7b:5b:f8:96:ca:be:80:a6:2d:40:f7:96:68:49:
8f:27:61:3f:69:cb:29:38:63:8a:f4:3a:27:16:af:
ca:21:03:39:92:2e:10:81:e1:fe:e7:3f:82:87:51:
20:36:7d:fc:0d:f2:62:8c:b3:ad:85:3c:07:41:b4:
77:1a:6e:41:37:4e:e7:cc:5e:f3:cc:8e:fc:19:4c:
73:b0:17:8a:3f:78:4b:f5:78:2f:81:32:94:7b:27:
7e:d0:95:3e:c4:27:e5:ef:3e:36:66:d6:57:98:8c:
67:67:a6:7e:f2:ca:59:30:0c:1f:17:43:f5:41:2b:
f2:4d:df:38:1f:0a:29:5c:f0:07:11:ba:51:a9:06:
87:a8:85:17:1b:34:91:96:98:f1:77:1d:3d:3b:9f:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:F9:2B:BE:6D:EF:14:DC:79:73:5D:29:4D:AD:A5:6C:97:FE:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hp35K75t7xTceXNdKU2tpWyX_tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:ca:de:56:7b:13:ed:4c:d8:36:77:bf:43:f7:71:6f:8e:d2:
ac:74:f2:d9:be:03:9b:51:07:98:89:e7:bb:cb:ce:07:3e:08:
c4:66:21:54:2e:33:1c:39:22:8b:15:01:1c:ef:96:8e:00:94:
45:6a:1a:8c:6b:92:a2:92:87:62:74:e3:40:0c:53:ad:d4:a7:
16:89:c1:f1:8b:ba:3d:84:18:c2:55:a8:8a:bf:5f:90:88:6c:
10:99:40:c0:34:97:e2:d8:64:f2:1b:d2:4b:98:03:5b:32:ff:
8e:59:ff:3b:d2:91:7b:46:f8:b4:70:63:64:46:0b:ce:07:8f:
59:e9:84:6c:1d:94:55:da:c4:e2:a1:e8:d8:27:93:c9:52:b8:
31:29:c5:da:10:ed:e9:c7:ee:e8:6a:3c:f0:cd:a0:13:93:45:
b5:3c:38:7d:12:1c:40:72:93:81:1c:08:40:48:a0:b0:67:e7:
94:3b:83:df:ae:4c:66:ea:5d:30:2e:15:06:e3:08:df:26:5e:
68:da:e6:fe:b5:ac:96:11:3c:30:f8:ee:39:bc:4f:6b:c7:fe:
32:93:13:f5:19:8e:4b:96:8b:08:85:06:af:f5:0d:5d:b2:0e:
d8:29:d6:4b:f2:f2:64:b2:fc:78:1d:9e:f7:8a:01:ff:f0:07:
19:c1:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:59:03 2025 by rpki-client