Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrfvqDyuAJtgr-w_L8HfhAlgZBg.roa
File: HrfvqDyuAJtgr-w_L8HfhAlgZBg.roa (raw, json)
Hash identifier: xQeeQjOSf2biFbGq/QFWDQpTv3skeJEXKnfjX7/Wa+k=
Subject key identifier: 1E:B7:EF:A8:3C:AE:00:9B:60:AF:EC:3F:2F:C1:DF:84:09:60:64:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D2B344E8DE76AEDDCCEEED3B5EE31E81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrfvqDyuAJtgr-w_L8HfhAlgZBg.roa
Signing time: Mon 19 Jun 2023 08:09:03 +0000
ROA not before: Mon 19 Jun 2023 08:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:b3:44:e8:de:76:ae:dd:cc:ee:ed:3b:5e:e3:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 08:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1eb7efa83cae009b60afec3f2fc1df8409606418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:1d:62:1a:a4:a4:27:10:ce:27:f2:f7:a2:
94:5a:db:ab:29:ac:d2:4c:10:49:61:b9:25:8d:31:
d3:2e:ce:1a:56:73:8c:65:84:c7:d7:af:64:56:41:
c5:e4:bb:e7:57:70:5d:30:0f:02:8d:72:0a:82:a7:
0d:6e:26:f3:15:47:02:0b:4c:ae:41:28:c3:23:fd:
c1:f9:da:bd:10:23:93:4b:80:13:ff:ed:92:65:7a:
7a:e1:5d:83:03:0f:cf:1e:d0:6e:ea:a7:96:0f:be:
bc:28:6f:e1:3e:8d:4c:03:dd:4c:51:2b:66:04:5e:
b9:bf:24:e3:5b:53:f1:80:e1:b7:b9:95:5d:80:fa:
cd:38:60:60:57:76:49:ef:ec:10:b2:b8:14:a5:4c:
41:a6:86:0e:9a:b9:14:db:fa:74:71:1c:7e:97:73:
fc:14:70:6e:8e:89:e9:d7:2e:d3:5e:1b:48:4a:6d:
b2:7b:c5:0e:a5:13:26:e7:45:43:3b:1e:54:ad:75:
cf:ed:76:53:5a:53:be:1a:26:48:45:dc:a2:c5:17:
0b:fd:01:16:4e:a8:88:89:63:56:9a:29:50:ce:e4:
67:78:93:f6:df:f5:4f:a4:10:0a:bf:f3:19:43:6c:
b9:29:3a:81:2a:c2:fe:3f:eb:71:f1:7b:3e:de:02:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:EF:A8:3C:AE:00:9B:60:AF:EC:3F:2F:C1:DF:84:09:60:64:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrfvqDyuAJtgr-w_L8HfhAlgZBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:25:5e:a6:c3:b4:96:11:f4:43:36:a6:17:97:4a:98:a3:e0:
50:7a:07:75:d0:0b:bd:78:b2:f6:8f:e8:13:42:84:4b:5a:91:
aa:0e:fe:f7:f2:03:65:e7:c6:10:5a:c8:4b:22:56:87:3b:79:
ae:c7:07:ab:cf:53:6b:40:70:88:d0:20:a2:51:60:ca:75:e8:
df:4c:7c:21:ba:3f:62:20:75:00:06:6c:db:dc:39:f7:48:ff:
43:5b:cc:24:a7:f9:24:18:11:48:25:c3:4d:06:b5:03:b4:92:
4d:37:8b:50:cb:65:18:32:b0:4d:3a:14:f1:13:63:5c:7c:59:
64:a0:35:c5:f5:68:42:ae:1d:7d:20:64:79:97:94:6f:2a:18:
47:3e:5a:5a:2a:4a:f3:7c:c7:a2:9f:22:fe:2d:e0:57:c9:52:
48:a7:9b:e1:d9:d6:32:93:45:d8:0c:91:16:bf:f1:73:e7:2c:
66:2a:25:71:1d:48:49:85:6f:1f:44:b0:eb:be:38:f9:ed:4a:
26:ef:b6:b0:03:31:16:fd:84:06:0a:d7:69:8b:42:1f:a8:78:
47:58:a9:eb:19:eb:d0:f6:bd:2a:4a:3d:a4:ba:f9:b7:00:fe:
0c:2d:7b:21:9b:36:a4:53:18:a8:df:d4:4b:5f:65:08:7d:a3:
84:0c:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:42 2025 by rpki-client