Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Huc3141u7fQ_VyNRnYC2-hqVNmw.roa
File: Huc3141u7fQ_VyNRnYC2-hqVNmw.roa (raw, json)
Hash identifier: swQTp4Oj/5eLE/Bpqsg9nRAbpDI0szLE+Z6B7eM0di4=
Subject key identifier: 1E:E7:37:D7:8D:6E:ED:F4:3F:57:23:51:9D:80:B6:FA:1A:95:36:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8DAE51AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Huc3141u7fQ_VyNRnYC2-hqVNmw.roa
Signing time: Sat 18 Jun 2022 01:09:44 +0000
ROA not before: Sat 18 Jun 2022 01:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377011629 (0x8dae51ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 01:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ee737d78d6eedf43f5723519d80b6fa1a95366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:3d:79:64:21:9b:a4:90:7e:d2:45:bb:df:
c4:31:6e:5f:84:9e:f1:9c:37:5c:db:1c:ad:90:cd:
df:03:1a:5b:4b:37:c0:50:57:e5:23:d1:41:03:f9:
77:80:57:60:81:99:fc:25:5c:6b:64:98:a5:41:14:
80:77:6c:dd:6a:78:4e:56:20:2b:76:67:f1:a2:9f:
97:ad:2a:f4:3d:77:6e:84:df:11:b9:86:0b:27:56:
14:3c:5c:f2:c3:50:0e:e7:92:14:7d:07:70:98:1e:
ca:d1:a9:0f:82:3e:59:79:7d:fb:55:98:57:f2:d4:
0e:01:00:fd:e8:ff:4b:eb:84:8d:2c:17:78:ce:15:
1d:cf:69:2e:2b:1d:87:6e:16:99:8d:ca:42:3e:bc:
82:5b:2c:9d:1e:7a:f3:d2:3e:e8:21:7d:2a:31:b2:
12:aa:00:0d:e1:d8:01:a5:8a:8a:af:6d:e3:dc:bc:
5c:1e:5c:37:52:67:4a:37:91:8c:f0:38:62:73:3c:
df:a0:84:84:64:8f:16:74:78:7e:c1:2f:f2:44:ea:
82:a5:e6:07:03:3a:ef:2f:62:68:ea:cb:11:b2:80:
20:fb:42:71:0f:00:e0:8a:c5:f7:39:16:5a:78:dc:
46:d3:6b:e3:01:9d:29:f5:da:f2:a0:f8:11:bc:bd:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:37:D7:8D:6E:ED:F4:3F:57:23:51:9D:80:B6:FA:1A:95:36:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Huc3141u7fQ_VyNRnYC2-hqVNmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:95:9e:df:fd:b8:8e:6f:8c:cd:3f:11:70:dc:cf:3b:d1:b1:
e8:e4:d8:75:d0:34:ca:a6:32:65:76:50:a2:1c:00:ed:0a:38:
40:e9:ca:53:97:da:71:35:dc:ee:25:b2:f1:c4:04:ca:aa:bc:
bd:bb:e3:8f:5a:67:55:b0:51:71:28:e8:b3:1a:82:b5:f7:32:
4b:f4:28:86:c5:9e:01:5c:5c:91:d0:6a:79:7d:4d:35:8c:7f:
9d:ac:2e:84:2d:4b:76:93:c3:6f:be:17:cc:c8:45:09:a4:0c:
c2:a2:44:d6:55:90:3d:76:4f:1a:8e:84:8c:85:8f:e6:42:14:
5e:4a:6c:74:7e:2b:77:f4:0a:04:b6:7d:15:3d:34:e5:e8:96:
82:fb:a1:91:0d:4e:63:2d:f9:94:b4:75:b7:7d:a0:00:4d:0d:
e1:48:6f:18:f2:b0:7f:7d:79:65:0a:8b:19:98:cf:be:f4:0b:
69:3b:26:fa:a9:72:7f:af:0e:11:1e:f8:c7:68:04:5b:b3:b2:
00:70:a5:94:bc:98:d4:f8:27:e4:4e:c9:29:54:e0:0b:5b:e6:
47:e7:c9:9b:9e:86:79:8f:ae:6e:6e:25:ae:4a:d9:59:01:10:
c4:a1:81:17:b1:2a:8e:58:ad:25:03:c8:e7:4d:75:a5:8c:dd:
0b:43:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:38 2025 by rpki-client