Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrsHjvFLwAqErTYTSOT1RwW3sgk.roa
File: HrsHjvFLwAqErTYTSOT1RwW3sgk.roa (raw, json)
Hash identifier: IjQD6nBK7lhWjAYClJUQRWrQXFHtvxSi3Leh7oOExF8=
Subject key identifier: 1E:BB:07:8E:F1:4B:C0:0A:84:AD:36:13:48:E4:F5:47:05:B7:B2:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018527B6E3003A369BB6D0CD569B0D393A90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrsHjvFLwAqErTYTSOT1RwW3sgk.roa
Signing time: Mon 19 Dec 2022 00:09:35 +0000
ROA not before: Mon 19 Dec 2022 00:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:27:b6:e3:00:3a:36:9b:b6:d0:cd:56:9b:0d:39:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 00:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ebb078ef14bc00a84ad361348e4f54705b7b209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:aa:05:1b:f5:57:18:63:c2:a0:de:8f:e2:
89:a5:1c:0b:a3:7b:ec:44:61:eb:68:52:47:e6:68:
f5:f0:cd:60:4f:cb:7e:f8:a4:0e:d8:1d:5f:1e:2a:
b6:05:c6:db:5e:18:a8:2a:12:a0:05:2a:49:db:6b:
37:02:45:35:9a:8b:05:51:a4:d3:ab:64:70:01:61:
6b:a1:09:83:8b:5a:4f:f8:3d:26:5e:42:e4:2b:d8:
ac:f7:18:34:22:92:47:25:de:c2:fa:d3:57:c3:eb:
1d:0e:1b:c5:4d:2e:51:55:36:a4:e7:22:dc:a3:0e:
8f:fd:42:34:1b:f8:7b:58:b8:f3:7e:e4:01:92:69:
66:95:ea:9e:2e:ed:52:92:cf:18:c9:62:d2:80:3e:
78:c9:17:48:e6:ce:4a:ec:85:2b:4d:ee:7a:cb:e5:
be:f5:0e:a1:dd:f2:db:29:32:63:d8:e7:54:5c:17:
6c:ea:4c:ed:07:7d:83:17:15:3c:2c:8d:b3:d7:67:
6e:08:0c:4e:c0:c8:53:2b:f7:91:3d:92:55:28:2d:
7a:91:ce:5d:58:5d:ff:91:fe:1e:7c:a4:62:3b:f3:
d7:1c:e5:fa:dd:cb:a3:46:06:65:9b:16:8a:6b:d0:
8e:2f:e5:b1:c1:cd:e5:ac:6e:25:eb:26:e8:e5:94:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:07:8E:F1:4B:C0:0A:84:AD:36:13:48:E4:F5:47:05:B7:B2:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HrsHjvFLwAqErTYTSOT1RwW3sgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:5b:be:a3:8a:35:df:c2:c3:56:ba:2e:0c:f4:62:8c:05:c8:
9f:ea:8b:38:48:56:02:36:91:2f:41:0a:c9:07:56:29:c0:6b:
bb:ac:9c:a1:93:da:5b:38:4a:c8:03:5a:40:32:21:1f:b6:e9:
37:75:fe:96:27:b6:12:b0:2f:cf:79:d8:ea:f3:f6:97:f1:b1:
0c:38:e1:17:19:a2:01:49:3b:86:8e:7f:fd:02:1d:fb:5f:08:
40:61:2a:95:a8:6f:c1:63:2c:71:99:6f:6b:6b:a9:49:6b:23:
2e:ac:b8:f4:91:61:4d:6a:53:7a:80:2b:64:ee:3f:61:82:dc:
2e:ff:97:4b:8d:2a:5e:ca:ae:70:62:c2:5b:d7:9c:2f:9f:35:
f4:f1:49:9b:93:94:25:12:fe:98:99:95:30:6a:a4:96:0b:d8:
71:83:e2:04:68:0e:a3:d1:37:a0:23:06:0c:f3:f7:88:1d:5d:
d6:4e:3e:d4:11:3a:72:0a:6e:08:5e:4a:62:5d:cb:c4:29:27:
5e:2a:1f:c4:00:b0:ca:c4:85:60:18:7f:bb:7a:48:3a:2f:6e:
1a:a7:27:ea:6b:29:99:87:d9:42:0f:e7:2a:4b:ab:4e:b0:ba:
71:ea:19:41:cd:2b:40:89:d7:66:53:59:a1:ec:ce:60:c8:4a:
f9:ae:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:27:02 2025 by rpki-client