Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HtJgPK07-RngXIyM8ejMrIJbX-U.roa
File: HtJgPK07-RngXIyM8ejMrIJbX-U.roa (raw, json)
Hash identifier: G8pXjXG7kXXH59bdfP4DVeP5MdDqdWxK8hQpv3KiDOE=
Subject key identifier: 1E:D2:60:3C:AD:3B:F9:19:E0:5C:8C:8C:F1:E8:CC:AC:82:5B:5F:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B3D03D52BDDD2565D4A95C11D6C7E4A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HtJgPK07-RngXIyM8ejMrIJbX-U.roa
Signing time: Mon 24 Apr 2023 15:09:41 +0000
ROA not before: Mon 24 Apr 2023 15:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:d0:3d:52:bd:dd:25:65:d4:a9:5c:11:d6:c7:e4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 15:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ed2603cad3bf919e05c8c8cf1e8ccac825b5fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:bb:44:de:fb:d8:a4:6e:5b:35:da:b9:1c:
c3:11:fb:f7:84:71:30:a9:3d:ce:fb:3a:c1:eb:24:
21:36:be:21:70:ca:4e:72:47:5c:f9:4b:42:0e:d8:
6f:6a:bc:42:73:31:0b:04:6f:1a:55:16:eb:a6:e1:
bc:2d:32:ee:67:a6:9a:27:9c:85:33:62:b9:98:ab:
3b:af:cc:ba:da:7a:ce:cc:77:c9:91:17:9c:c1:64:
8e:37:af:7b:10:ae:49:5c:2d:f0:0c:46:2f:7d:be:
66:05:3a:95:48:51:51:7c:47:6e:e7:bd:1b:74:22:
c8:ba:5c:e2:f6:4b:60:c5:af:c5:27:08:d6:5b:92:
b6:c4:a0:72:93:1b:0f:21:ad:f2:1b:be:88:d4:a1:
3b:99:6a:44:60:2a:c6:70:d5:e8:6c:19:a3:c2:15:
8c:c6:88:55:c3:8f:26:43:1b:2d:da:8c:86:f1:8a:
3c:3c:17:88:14:bc:d1:65:af:49:64:bf:f6:24:e7:
98:95:f4:78:0c:3d:9c:fc:54:57:35:cc:20:ec:6d:
99:ab:fd:e6:67:3e:4a:87:d6:3b:c5:7f:e5:9e:33:
8c:8e:e2:75:f6:71:5f:5b:ca:7c:19:8a:fd:1a:b9:
b9:95:0c:e7:1a:d1:c6:49:6f:a4:8e:d7:fb:88:e4:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D2:60:3C:AD:3B:F9:19:E0:5C:8C:8C:F1:E8:CC:AC:82:5B:5F:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HtJgPK07-RngXIyM8ejMrIJbX-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:30:b1:54:d2:3c:78:c4:07:22:0a:b0:b1:58:b7:d0:a8:4d:
b9:ee:62:5a:a4:7b:29:8f:2c:45:0b:ff:a5:17:b3:23:e1:a1:
71:ae:14:97:18:90:61:f9:ba:95:f5:b3:c9:5f:b4:61:c9:f6:
1f:04:a3:13:85:e1:2d:19:b3:ea:23:bf:d8:e6:ae:50:70:92:
71:62:ee:31:b7:a2:f2:5a:a7:a3:6a:f6:bd:60:f3:f0:e7:c9:
29:ed:7f:24:63:c6:f2:37:42:c9:f9:5a:ba:da:05:8d:61:bb:
22:f6:61:2b:72:ff:e3:34:f3:8e:05:05:55:15:3e:23:ed:82:
f3:00:ab:b6:2f:ed:57:a3:f4:46:37:38:44:b9:33:eb:bf:35:
f7:76:f0:95:23:ba:09:12:38:9f:c7:16:66:b3:77:a7:92:6c:
71:b5:7e:71:c2:7b:69:eb:78:7b:5b:54:00:ee:8b:51:53:5c:
c7:e5:ee:05:10:ac:ac:af:8c:5d:05:27:b8:0e:c1:f2:4c:19:
80:ac:b4:8c:cb:e2:9e:c8:6e:47:c4:e5:8e:9a:a8:46:8c:0b:
2b:14:67:d0:47:63:3f:f3:39:9f:9a:e5:e1:6a:b0:e9:1b:87:
26:d6:91:7a:f2:28:8c:84:44:96:e2:da:e3:37:66:2c:af:6b:
1c:c4:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:54:51 2025 by rpki-client