Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq7GNAKRzsWH3tytFdFqWvV9AwM.roa
File: Hq7GNAKRzsWH3tytFdFqWvV9AwM.roa (raw, json)
Hash identifier: Optl5QWOMxy2NYOh4VaxYcRXmWD8ctCCjSwfSTDgjtA=
Subject key identifier: 1E:AE:C6:34:02:91:CE:C5:87:DE:DC:AD:15:D1:6A:5A:F5:7D:03:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879B240333FF73DF4285120E13939626F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq7GNAKRzsWH3tytFdFqWvV9AwM.roa
Signing time: Wed 19 Apr 2023 20:10:41 +0000
ROA not before: Wed 19 Apr 2023 20:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9b:24:03:33:ff:73:df:42:85:12:0e:13:93:96:26:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 20:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eaec6340291cec587dedcad15d16a5af57d0303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:c2:10:00:c7:2d:14:89:98:5b:8d:c5:70:
66:f2:50:26:e8:cc:c4:54:4d:d2:23:9d:11:12:58:
ed:81:75:55:f4:57:5a:00:7a:09:ea:8d:13:cb:9e:
fb:34:f2:e1:aa:7d:aa:dd:5b:62:d3:ad:f7:18:a7:
13:94:14:48:d0:83:91:d7:a5:3f:11:ee:f5:94:61:
db:04:0c:ea:29:b4:40:e6:02:80:9a:84:ec:d9:bb:
29:ec:e4:df:2f:f1:01:2f:33:e1:c5:31:2f:62:b2:
51:76:44:8d:8d:39:e6:2c:6c:67:73:f8:63:03:0c:
ec:a5:87:88:0c:18:28:db:bc:38:a5:34:fc:5b:0e:
84:38:c8:d2:84:ca:b9:3b:c5:87:9d:b1:74:46:a4:
92:e6:03:03:38:37:1a:fc:e1:ec:fb:30:c9:ca:de:
e6:db:23:16:68:f6:13:f1:d1:ef:4e:88:84:f4:9a:
1c:01:09:42:ab:e6:98:29:47:38:c8:bc:2f:14:9c:
d8:6f:bd:ee:7d:1a:83:cf:c5:d4:4d:14:9b:2a:eb:
87:f8:d4:15:97:e5:c2:8a:b7:4c:95:41:33:39:ff:
1d:44:03:ec:a8:fa:f2:4a:a8:e0:18:c8:d8:f2:76:
94:ac:64:a6:0e:ad:ee:0a:94:a7:63:a6:0c:01:91:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:C6:34:02:91:CE:C5:87:DE:DC:AD:15:D1:6A:5A:F5:7D:03:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hq7GNAKRzsWH3tytFdFqWvV9AwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:b0:b9:f0:41:20:48:bd:83:b4:d9:c5:56:b1:02:72:87:6d:
ec:5e:d0:7e:35:3b:8c:c8:8e:3e:f5:84:a6:46:4b:c6:8d:27:
29:4a:55:bd:ae:f2:e3:a5:f4:47:28:92:87:bb:58:aa:1c:6b:
14:99:b5:a5:7b:91:99:b0:fe:20:af:5c:02:29:0a:b9:94:b1:
97:5e:ee:50:85:12:29:35:57:ee:66:87:00:9d:9b:7a:61:8b:
87:2e:bb:26:a9:ac:b9:1b:7e:b6:be:4d:9d:0c:c5:55:1d:eb:
1f:b9:fd:d2:a0:02:6b:05:63:00:8a:2d:1c:a1:e1:e6:55:a4:
55:7c:12:9a:52:74:65:b8:17:88:38:a2:64:2e:1d:1a:40:f3:
ee:62:35:c4:7f:c2:a9:b9:ca:46:79:a6:55:bf:fc:6b:7c:5f:
6d:57:e4:89:10:f0:58:76:f1:96:e6:c5:65:dc:f5:b6:4d:b9:
13:e9:8e:de:7a:e3:85:59:50:7a:d3:af:0c:1e:0c:9b:eb:62:
6f:11:bb:77:48:f1:c6:94:5b:98:9d:6f:67:09:4a:21:38:c3:
a4:31:b4:ed:f3:4b:a9:8f:8e:04:ba:47:0b:95:c9:3a:55:d2:
3d:47:f2:16:46:76:dc:7e:b1:cc:c2:81:74:c1:07:18:0c:c6:
87:9c:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:56 2025 by rpki-client