Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HwWFE0ovJA2qc8mhexBVD7fsid4.roa
File: HwWFE0ovJA2qc8mhexBVD7fsid4.roa (raw, json)
Hash identifier: xWBR9bEVqlz3faDZ5f4PiCRHEfp5kUXSRdo6nW7Dk/M=
Subject key identifier: 1F:05:85:13:4A:2F:24:0D:AA:73:C9:A1:7B:10:55:0F:B7:EC:89:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E22931DE2F446494DFACD17C58C0631B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HwWFE0ovJA2qc8mhexBVD7fsid4.roa
Signing time: Wed 03 May 2023 15:09:23 +0000
ROA not before: Wed 03 May 2023 15:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:29:31:de:2f:44:64:94:df:ac:d1:7c:58:c0:63:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 15:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f0585134a2f240daa73c9a17b10550fb7ec89de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:e3:42:f4:ae:78:71:f7:9b:e4:fd:59:5a:
c4:ec:cb:c0:94:10:0a:04:65:dc:fa:8b:66:13:b0:
11:39:76:53:f9:41:40:9a:82:bf:a7:26:64:d4:48:
a4:8b:e1:6b:b5:f7:a7:01:8e:41:e5:61:bd:ea:a7:
35:7a:96:72:83:ca:d4:d2:c4:dd:7f:9e:d6:5c:1c:
46:df:c0:1f:fd:17:a5:27:ce:42:9b:a8:d8:ee:97:
e0:cf:b6:67:07:37:c8:4f:fb:2a:6c:f6:94:57:0d:
8b:22:16:2a:fe:64:e1:38:25:1e:e7:d2:74:ed:b6:
cf:16:6a:05:5b:b1:c4:c7:54:e4:a6:b1:31:81:f0:
d6:7e:19:b4:69:6e:22:69:c4:49:d9:17:31:2f:2d:
d4:b9:af:03:af:85:f0:2b:10:af:da:27:8a:91:ca:
84:f5:14:bd:c4:3b:6e:42:a9:b2:15:ec:c1:d7:cc:
45:87:10:4a:5b:8f:6c:3d:34:a1:36:20:0a:a3:61:
9b:57:09:6c:67:e3:8a:d9:75:32:a7:92:5a:99:49:
6c:58:a8:81:5b:db:43:8a:aa:18:05:c4:77:04:42:
c2:4c:68:8d:f6:86:4a:63:85:8c:f2:20:0c:d3:59:
c5:71:d6:56:a5:5f:06:4a:d9:69:2d:bb:f4:70:46:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:85:13:4A:2F:24:0D:AA:73:C9:A1:7B:10:55:0F:B7:EC:89:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HwWFE0ovJA2qc8mhexBVD7fsid4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:a1:73:17:c5:47:0a:44:c7:55:31:0e:ac:16:32:53:a5:0e:
0d:98:f1:2a:39:68:63:77:5b:39:14:32:4a:08:c6:b5:6a:3a:
81:cf:4d:03:d5:cb:83:37:40:5f:bf:64:47:d9:cf:4d:d4:cf:
77:6d:d9:25:26:e4:3b:7e:66:77:27:04:df:90:86:48:b8:2c:
9e:99:56:e0:ba:04:11:37:18:43:ed:91:a5:ca:db:e1:e8:22:
1c:f8:4f:22:6f:1f:1f:ad:92:cc:f8:22:e4:35:7f:63:ea:e7:
1d:c4:0e:b4:73:88:e6:d8:0b:66:68:8e:8c:f1:6f:b9:c7:ac:
0f:16:1c:c9:1c:bd:80:05:e7:f6:9f:4d:57:c0:71:4b:c7:1d:
99:0b:3d:fa:3d:8f:a4:a1:d1:92:fb:2c:e9:6f:18:db:24:f1:
2d:18:9e:56:39:2b:0e:0f:13:c3:14:9f:77:2d:97:b0:c2:bb:
fb:26:a5:eb:98:8b:af:c0:b5:45:d5:65:a6:f3:de:ef:b6:e3:
59:c3:92:85:ab:9f:03:2e:7b:aa:38:64:31:18:1f:01:0f:4f:
c6:c7:5a:19:ff:bc:61:02:b3:ac:5e:8d:34:11:e2:1c:57:94:
92:00:b6:e3:0c:c0:56:db:bd:3f:e0:bb:a9:db:61:3d:51:36:
89:cb:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:39 2025 by rpki-client