Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq1_h-bnYqS1kX7A5P4r9mkkG8k.roa
File: Hq1_h-bnYqS1kX7A5P4r9mkkG8k.roa (raw, json)
Hash identifier: ZULlMJsySW8P5eTXKzTG6v8bq1q9k/cAzFz0QnsFcto=
Subject key identifier: 1E:AD:7F:87:E6:E7:62:A4:B5:91:7E:C0:E4:FE:2B:F6:69:24:1B:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DADD84825B58C5560E53E774EB3BC82F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq1_h-bnYqS1kX7A5P4r9mkkG8k.roa
Signing time: Tue 02 May 2023 05:09:23 +0000
ROA not before: Tue 02 May 2023 05:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:da:dd:84:82:5b:58:c5:56:0e:53:e7:74:eb:3b:c8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 05:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ead7f87e6e762a4b5917ec0e4fe2bf669241bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:2c:28:89:95:89:04:36:b8:d7:e3:66:58:
d6:b7:ad:8a:55:16:77:92:60:73:6b:42:69:c7:08:
5c:ad:bd:db:9e:69:e3:da:a8:ca:78:22:19:d7:a4:
c5:f2:d9:8c:86:be:09:90:67:af:29:67:71:b4:01:
d4:a2:48:ee:71:3c:24:dc:3b:e2:93:82:d2:68:ea:
62:97:12:17:ba:25:3b:89:98:95:f4:d0:24:8b:0b:
71:d1:16:67:cd:e2:c0:a1:5c:25:2a:ae:4f:81:9e:
da:7a:85:4b:4f:f8:5b:30:9c:d6:44:0a:fb:bc:03:
b9:a0:b4:af:08:27:0c:a6:d6:63:3f:9f:0f:64:b2:
79:53:99:3b:13:4e:47:4e:22:97:9e:3b:68:3c:9f:
0d:d6:24:ad:f0:7b:fa:d8:4d:3a:c8:ee:c1:9e:64:
54:d5:80:64:93:3e:2b:da:e7:5e:f6:9a:8c:7e:e3:
86:6a:f1:a3:25:34:4f:ad:0d:10:f2:99:22:18:b7:
f5:6a:e2:cb:d8:c0:ab:32:e0:e0:18:23:6e:1c:d9:
9a:7a:12:a3:56:a0:5f:f6:57:88:70:cd:fa:c7:e8:
49:57:f7:65:b8:69:b1:ee:d9:52:3c:e6:f2:cc:5d:
1b:69:03:54:05:e1:e6:60:9f:5c:85:75:21:b9:86:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AD:7F:87:E6:E7:62:A4:B5:91:7E:C0:E4:FE:2B:F6:69:24:1B:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq1_h-bnYqS1kX7A5P4r9mkkG8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2a:94:64:1b:5a:16:e1:51:a2:be:be:44:75:a3:76:9c:16:
12:b2:d9:a8:f5:9f:45:82:bd:ae:56:7f:31:5f:c8:ad:b2:fa:
44:9d:2d:04:46:4e:62:34:4b:7a:38:cc:ed:25:88:9f:64:84:
89:84:77:df:9e:1a:6a:fc:64:d1:18:18:dd:d0:96:a0:0d:a4:
8d:3b:17:6c:91:ee:bf:d5:83:cd:d7:ef:75:06:06:13:64:d9:
bf:1e:49:bf:91:22:de:f2:34:09:7f:fa:56:b0:30:f9:78:e7:
72:93:8e:25:e9:1e:44:27:44:70:8d:b9:cc:af:6e:dd:65:fa:
9f:39:3d:92:ab:4d:aa:d1:4e:49:02:57:d6:a4:64:ff:40:60:
c3:3b:1a:66:37:b6:88:a4:70:a9:29:48:2d:c2:fd:a6:af:9c:
d0:1d:e0:8f:18:2a:6c:59:de:e2:6c:81:69:d8:a3:17:f3:4a:
68:65:fb:25:0c:49:82:12:f6:1c:b3:e4:1b:17:34:f0:1d:1e:
47:d6:b4:dc:78:5a:8d:45:b9:17:5b:7a:22:a9:52:8d:fb:2d:
88:31:e5:0d:ac:0b:57:a8:6c:9d:c5:98:ba:4a:6a:26:14:9f:
51:fb:a3:43:22:d1:8c:9d:bd:6c:6e:dc:40:1b:02:78:5e:cf:
30:1f:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:12:28 2025 by rpki-client