Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HqG1NdiwLBHTbYGToBYEAnDoy_4.roa
File: HqG1NdiwLBHTbYGToBYEAnDoy_4.roa (raw, json)
Hash identifier: YEDyIqgRVYSa5163CieulKaSl3p4OjOlqcQxNXBnaVU=
Subject key identifier: 1E:A1:B5:35:D8:B0:2C:11:D3:6D:81:93:A0:16:04:02:70:E8:CB:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C71DFF194F93378F756DC3D60ACF45F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HqG1NdiwLBHTbYGToBYEAnDoy_4.roa
Signing time: Sat 05 Aug 2023 19:12:59 +0000
ROA not before: Sat 05 Aug 2023 19:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:1d:ff:19:4f:93:37:8f:75:6d:c3:d6:0a:cf:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 19:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ea1b535d8b02c11d36d8193a016040270e8cbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:15:fa:e7:e7:9e:a8:43:fe:51:d1:cd:eb:
c1:8d:ca:3a:fd:59:45:b0:75:24:61:05:0a:10:57:
ea:b3:26:8a:66:99:65:6a:01:6e:01:ab:5b:f1:bb:
94:e1:e4:fd:1d:ea:82:55:99:32:dd:81:6e:3a:78:
d7:02:89:b8:0d:87:27:37:20:9f:94:6f:15:a9:bb:
7c:b7:e5:8f:5d:90:4d:ff:48:84:55:62:19:4c:15:
40:f9:78:6a:22:7e:d2:b4:2f:f0:41:64:1c:32:19:
a4:36:7a:94:35:fb:f5:36:ea:79:73:29:89:9e:f2:
a0:1d:14:cd:67:be:8d:9d:53:2f:73:f5:53:07:91:
8c:4b:57:31:89:5f:ec:9c:18:60:81:9d:e6:8c:4e:
57:62:81:31:f2:e4:b8:2b:9b:da:99:e7:d2:7c:04:
4a:23:91:5d:a4:f4:fe:e5:66:6f:46:4b:6c:70:b1:
10:f2:93:60:ff:38:23:98:57:a6:37:e9:14:7e:1a:
a3:d5:bc:72:37:3c:75:6e:35:59:30:65:92:c9:e7:
8c:ec:09:72:9e:d0:cf:a9:10:b3:d3:a8:d0:9c:91:
ad:da:ed:e8:bf:00:a2:7c:85:74:81:61:cf:cb:dd:
9b:3a:6e:b0:49:3d:be:e0:0a:a4:87:de:0b:90:51:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:B5:35:D8:B0:2C:11:D3:6D:81:93:A0:16:04:02:70:E8:CB:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HqG1NdiwLBHTbYGToBYEAnDoy_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d0:3b:8a:5d:2d:ba:70:82:7e:96:02:81:db:7e:90:80:16:
f5:64:32:1f:c7:c1:84:12:69:25:9a:2d:85:ec:99:23:cb:17:
91:41:b0:f7:f5:6d:dd:ed:e8:8d:27:ce:24:51:ad:c7:66:d9:
6f:9e:17:02:c0:8b:fb:04:f1:ca:e2:05:3d:af:4d:a9:73:79:
5e:6c:98:da:c3:99:bb:3c:4d:67:88:50:54:97:e3:56:3f:b9:
66:d1:a7:d8:a7:3c:e5:8a:a1:65:77:79:c8:ab:f4:e8:6e:b8:
b7:6d:7e:75:40:c2:de:1e:d9:b0:72:97:93:dc:d6:b0:41:73:
70:e3:bd:44:cc:cb:09:eb:ab:71:a8:89:ec:83:2f:e7:c5:74:
e9:61:b0:6a:ed:9e:6c:ae:b3:eb:2d:ac:e6:d9:00:34:51:16:
ce:16:13:c7:c3:75:e2:35:28:94:bd:1c:6d:96:85:a7:13:0c:
0b:10:84:24:04:69:64:d3:2b:e1:d4:d2:d1:c6:49:2d:01:51:
9b:70:6e:ab:91:0a:e2:ec:87:21:a2:3f:bb:0d:66:69:cb:de:
d5:9a:62:69:93:21:42:44:3a:b1:68:fb:ed:c2:9e:7c:c6:84:
93:3f:50:32:78:d3:f3:92:9a:9c:73:9f:87:77:13:02:0a:96:
32:9c:f1:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnHHf8ZT5M3j3Vtw9YKz0X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA1MTkxMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWExYjUzNWQ4YjAyYzExZDM2ZDgxOTNhMDE2MDQwMjcwZThjYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV4V+ufnnqhD/lHRzevBjco6/VlF
sHUkYQUKEFfqsyaKZpllagFuAatb8buU4eT9HeqCVZky3YFuOnjXAom4DYcnNyCf
lG8Vqbt8t+WPXZBN/0iEVWIZTBVA+XhqIn7StC/wQWQcMhmkNnqUNfv1Nup5cymJ
nvKgHRTNZ76NnVMvc/VTB5GMS1cxiV/snBhggZ3mjE5XYoEx8uS4K5vamefSfARK
I5FdpPT+5WZvRktscLEQ8pNg/zgjmFemN+kUfhqj1bxyNzx1bjVZMGWSyeeM7Aly
ntDPqRCz06jQnJGt2u3ovwCifIV0gWHPy92bOm6wST2+4Aqkh94LkFF5TQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB6htTXYsCwR022Bk6AWBAJw6Mv+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSHFHMU5kaXdMQkhUYllHVG9CWUVBbkRveV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIvQO4pdLbpwgn6WAoHb
fpCAFvVkMh/HwYQSaSWaLYXsmSPLF5FBsPf1bd3t6I0nziRRrcdm2W+eFwLAi/sE
8criBT2vTalzeV5smNrDmbs8TWeIUFSX41Y/uWbRp9inPOWKoWV3ecir9OhuuLdt
fnVAwt4e2bByl5Pc1rBBc3DjvUTMywnrq3GoieyDL+fFdOlhsGrtnmyus+strObZ
ADRRFs4WE8fDdeI1KJS9HG2WhacTDAsQhCQEaWTTK+HU0tHGSS0BUZtwbquRCuLs
hyGiP7sNZmnL3tWaYmmTIUJEOrFo++3CnnzGhJM/UDJ40/OSmpxzn4d3EwIKljKc
8ZI=
-----END CERTIFICATE-----
Generated at Thu May 1 06:20:33 2025 by rpki-client