Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrAHmcjJMuJFnaWYzV4-9nMwm_M.roa
File: HrAHmcjJMuJFnaWYzV4-9nMwm_M.roa (raw, json)
Hash identifier: 7kM/yxCEcNF1KKMd3srb9DlZEBMbWL+gt58bZoqlyI8=
Subject key identifier: 1E:B0:07:99:C8:C9:32:E2:45:9D:A5:98:CD:5E:3E:F6:73:30:9B:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C79B18A8C18BE5B55EA32777B8449291
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrAHmcjJMuJFnaWYzV4-9nMwm_M.roa
Signing time: Wed 30 Nov 2022 08:15:41 +0000
ROA not before: Wed 30 Nov 2022 08:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:9b:18:a8:c1:8b:e5:b5:5e:a3:27:77:b8:44:92:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 30 08:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eb00799c8c932e2459da598cd5e3ef673309bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:80:60:9c:26:2d:78:43:5f:01:be:f2:b7:
78:6d:36:32:02:b7:f6:17:14:6d:6e:04:d2:77:09:
91:0e:fb:d4:33:d1:30:c7:b4:23:f5:e2:a5:2d:e0:
bc:67:c2:f5:bf:2b:47:1d:06:27:8c:21:34:1b:ee:
91:42:b6:68:52:96:1e:3b:2d:7c:bf:32:f4:27:54:
1b:0f:8f:31:51:b5:ba:8d:34:18:9c:e5:a2:2a:71:
5c:b8:50:00:3b:cf:5a:1f:cc:3e:3d:8f:0b:ed:2d:
15:0a:2f:75:fe:42:e0:f5:89:8a:bd:f8:d7:2f:36:
ce:9c:10:79:98:ff:4e:cb:f8:6e:ac:26:6c:8b:06:
db:e6:91:91:73:90:35:8d:21:06:c4:ea:bd:18:51:
b9:c1:b7:35:13:0b:4d:f5:e3:c6:6e:6d:b8:48:99:
47:15:5e:ea:c2:5b:27:94:6d:bc:15:8d:b7:17:26:
a8:c0:7f:1e:b3:f6:3d:1a:c7:79:fb:f1:c7:98:06:
a6:e3:0e:10:f5:ba:54:87:bc:75:23:44:eb:4c:6d:
6c:82:66:99:3f:93:d6:f7:ff:30:c7:67:04:a0:17:
37:c1:81:74:7c:96:6c:36:32:e6:81:65:c4:75:64:
96:30:8b:54:e0:f9:7e:a8:9a:c6:f0:6f:f9:86:19:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B0:07:99:C8:C9:32:E2:45:9D:A5:98:CD:5E:3E:F6:73:30:9B:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrAHmcjJMuJFnaWYzV4-9nMwm_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:dd:ee:6a:37:16:7f:3b:10:1b:fb:b3:3e:81:2e:bf:11:c2:
b7:b6:ed:a4:da:74:22:51:cb:67:48:87:26:4e:be:3b:35:35:
76:0a:48:6d:9f:8a:04:b6:82:18:05:49:cd:4d:38:3d:fb:82:
38:b8:a5:f2:f8:88:ad:51:64:43:35:7e:68:17:8c:e4:1d:5e:
4f:81:f3:e0:41:43:c3:d6:bb:9e:ca:35:0b:9c:90:13:93:06:
3e:11:d9:ee:f9:49:8e:48:5c:cb:e8:03:0c:ba:3b:b3:d2:eb:
d2:5e:1e:1a:8b:89:67:2a:87:cd:35:3b:70:cc:0d:81:42:3b:
c9:d7:e2:9c:3a:0f:03:89:b7:dc:31:5b:13:ea:30:5a:f3:c5:
58:54:7c:58:42:e7:24:df:b9:4e:a3:f9:5a:f7:c2:8b:f1:7f:
84:32:3b:ee:07:34:a6:38:50:37:6f:b5:ea:ce:09:1f:68:ee:
13:de:e4:80:2f:14:e3:e5:d5:8b:06:7d:0c:08:93:61:dd:07:
2c:61:cc:b2:aa:48:ca:6c:1a:89:22:a7:23:f6:3a:27:5d:8c:
56:b5:32:ad:c7:36:2d:e6:dc:f5:0b:a9:d1:67:56:c4:e9:9d:
70:48:ce:ff:9f:61:6f:0c:23:cf:b0:1a:a7:a3:9b:c4:3a:12:
bd:8b:cd:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTHmxiowYvltV6jJ3e4RJKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTMwMDgxNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWIwMDc5OWM4YzkzMmUyNDU5ZGE1OThjZDVlM2VmNjczMzA5YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNSAYJwmLXhDXwG+8rd4bTYyArf2
FxRtbgTSdwmRDvvUM9Ewx7Qj9eKlLeC8Z8L1vytHHQYnjCE0G+6RQrZoUpYeOy18
vzL0J1QbD48xUbW6jTQYnOWiKnFcuFAAO89aH8w+PY8L7S0VCi91/kLg9YmKvfjX
LzbOnBB5mP9Oy/hurCZsiwbb5pGRc5A1jSEGxOq9GFG5wbc1EwtN9ePGbm24SJlH
FV7qwlsnlG28FY23FyaowH8es/Y9Gsd5+/HHmAam4w4Q9bpUh7x1I0TrTG1sgmaZ
P5PW9/8wx2cEoBc3wYF0fJZsNjLmgWXEdWSWMItU4Pl+qJrG8G/5hhmXzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB6wB5nIyTLiRZ2lmM1ePvZzMJvzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSHJBSG1jakpNdUpGbmFXWXpWNC05bk13bV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJrd7mo3Fn87EBv7sz6B
Lr8Rwre27aTadCJRy2dIhyZOvjs1NXYKSG2figS2ghgFSc1NOD37gji4pfL4iK1R
ZEM1fmgXjOQdXk+B8+BBQ8PWu57KNQuckBOTBj4R2e75SY5IXMvoAwy6O7PS69Je
HhqLiWcqh801O3DMDYFCO8nX4pw6DwOJt9wxWxPqMFrzxVhUfFhC5yTfuU6j+Vr3
wovxf4QyO+4HNKY4UDdvterOCR9o7hPe5IAvFOPl1YsGfQwIk2HdByxhzLKqSMps
GokipyP2OiddjFa1Mq3HNi3m3PULqdFnVsTpnXBIzv+fYW8MI8+wGqejm8Q6Er2L
zRs=
-----END CERTIFICATE-----
Generated at Fri May 2 10:32:59 2025 by rpki-client