Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HsrFyOZlnmEOuFXn8w7pz65cXd0.roa
File: HsrFyOZlnmEOuFXn8w7pz65cXd0.roa (raw, json)
Hash identifier: T95r4tIN7Kui3Vx5Ac805FbH5B9te3ACkqZf0MFflv4=
Subject key identifier: 1E:CA:C5:C8:E6:65:9E:61:0E:B8:55:E7:F3:0E:E9:CF:AE:5C:5D:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855C150F86CC49E5075346189A524D7237
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HsrFyOZlnmEOuFXn8w7pz65cXd0.roa
Signing time: Thu 29 Dec 2022 04:12:42 +0000
ROA not before: Thu 29 Dec 2022 04:12:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:15:0f:86:cc:49:e5:07:53:46:18:9a:52:4d:72:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 04:12:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ecac5c8e6659e610eb855e7f30ee9cfae5c5ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:e4:65:ba:26:51:2f:2a:e3:98:d6:3a:89:
1d:20:8c:b0:9c:47:06:96:01:c5:66:ff:8b:fc:4e:
c4:9b:ce:db:a7:2d:34:e3:70:d7:3a:72:0c:4b:9d:
b7:c1:e9:ae:d4:7d:c4:0b:5a:27:1a:e7:8b:6e:8d:
f5:f9:e7:61:42:9f:32:03:d0:e1:0a:ef:a4:ca:a1:
87:35:8e:d2:e1:ce:83:d5:dc:ac:10:1f:3b:4d:b8:
af:4b:06:01:4f:35:5b:e9:e3:83:b8:bb:10:d6:c5:
2a:6d:41:54:e9:80:b6:c0:eb:aa:44:0d:de:72:c4:
f2:d4:41:97:56:ca:3c:6b:4e:8e:5c:28:72:bd:e3:
b7:56:8c:bc:ab:17:e1:54:3e:11:b5:3b:dc:51:d8:
9b:7b:32:49:a1:92:69:b2:11:55:11:3a:34:0f:e8:
b8:be:d9:ae:13:29:34:b7:ae:bf:2c:6f:56:41:75:
71:df:27:41:65:2d:a6:33:e7:99:ad:48:4a:bb:f5:
68:8c:df:83:c5:b2:7a:1f:8b:4e:64:04:7f:a0:ab:
5b:8b:b7:64:23:10:c1:33:f3:2f:b2:51:9b:a7:88:
56:9b:36:d1:44:f9:8d:d6:f4:99:9c:0f:13:91:3b:
3e:b5:ed:32:c3:40:93:0b:03:34:c0:f1:cb:8e:99:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:C5:C8:E6:65:9E:61:0E:B8:55:E7:F3:0E:E9:CF:AE:5C:5D:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HsrFyOZlnmEOuFXn8w7pz65cXd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:0d:83:b7:b7:7a:46:5b:89:3c:f3:f4:31:dd:87:9b:09:e0:
8f:a4:6e:86:4c:cb:ee:68:aa:cb:dd:f6:60:42:77:75:1b:9e:
79:7c:cd:e7:c2:d8:79:34:7e:a7:f4:cc:a7:b9:44:d4:5c:f3:
c4:4a:e8:8e:bc:9e:3e:8f:62:2d:92:7b:12:75:f8:89:d8:f8:
55:6b:5a:3d:5d:fc:33:58:d9:05:0e:b8:03:09:cf:94:4a:15:
86:42:84:a7:2f:42:fe:1d:90:d6:0c:51:4a:28:e3:f9:c6:8f:
e8:cf:f9:6d:c3:12:25:ba:40:97:20:dc:a3:26:fc:bc:b5:f3:
fa:af:c6:72:a0:4f:bf:0b:23:81:50:cd:7c:6d:53:5c:08:b8:
89:9b:9f:9b:73:fb:68:d6:17:fb:03:db:77:33:ea:94:c4:bd:
00:9d:28:1a:18:a5:fb:11:13:f0:fc:17:85:a7:a4:a2:ef:d6:
4d:c9:36:6c:e8:08:4b:93:93:d1:3b:61:77:7c:5a:a2:81:1a:
13:54:37:b1:65:13:5a:5f:db:c2:cb:4e:d5:bd:2a:1f:0c:f2:
6f:b7:e8:cb:65:5c:46:ea:15:64:f9:49:4e:76:d4:9a:17:f0:
be:ec:c3:35:b4:7c:ca:f8:c8:d7:8f:da:84:3e:95:b0:c0:4b:
80:bd:ba:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVcFQ+GzEnlB1NGGJpSTXI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MDQxMjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWNhYzVjOGU2NjU5ZTYxMGViODU1ZTdmMzBlZTljZmFlNWM1ZGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8HkZbomUS8q45jWOokdIIywnEcG
lgHFZv+L/E7Em87bpy0043DXOnIMS523wemu1H3EC1onGueLbo31+edhQp8yA9Dh
Cu+kyqGHNY7S4c6D1dysEB87TbivSwYBTzVb6eODuLsQ1sUqbUFU6YC2wOuqRA3e
csTy1EGXVso8a06OXChyveO3Voy8qxfhVD4RtTvcUdibezJJoZJpshFVETo0D+i4
vtmuEyk0t66/LG9WQXVx3ydBZS2mM+eZrUhKu/VojN+DxbJ6H4tOZAR/oKtbi7dk
IxDBM/MvslGbp4hWmzbRRPmN1vSZnA8TkTs+te0yw0CTCwM0wPHLjpl8ewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB7KxcjmZZ5hDrhV5/MO6c+uXF3dMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSHNyRnlPWmxubUVPdUZYbjh3N3B6NjVjWGQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFgNg7e3ekZbiTzz9DHd
h5sJ4I+kboZMy+5oqsvd9mBCd3Ubnnl8zefC2Hk0fqf0zKe5RNRc88RK6I68nj6P
Yi2SexJ1+InY+FVrWj1d/DNY2QUOuAMJz5RKFYZChKcvQv4dkNYMUUoo4/nGj+jP
+W3DEiW6QJcg3KMm/Ly18/qvxnKgT78LI4FQzXxtU1wIuImbn5tz+2jWF/sD23cz
6pTEvQCdKBoYpfsRE/D8F4WnpKLv1k3JNmzoCEuTk9E7YXd8WqKBGhNUN7FlE1pf
28LLTtW9Kh8M8m+36MtlXEbqFWT5SU521JoX8L7swzW0fMr4yNeP2oQ+lbDAS4C9
uhk=
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client