Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HxJUTpTld_nmHeP0QPmaz-nVUPI.roa
File: HxJUTpTld_nmHeP0QPmaz-nVUPI.roa (raw, json)
Hash identifier: ZLMHAzPMWNJMal1GatscBnomfg61QHoaJQQgIcp/6Ak=
Subject key identifier: 1F:12:54:4E:94:E5:77:F9:E6:1D:E3:F4:40:F9:9A:CF:E9:D5:50:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A6119E4E97F5683BAF11114584D57575
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HxJUTpTld_nmHeP0QPmaz-nVUPI.roa
Signing time: Sat 10 Jun 2023 16:09:12 +0000
ROA not before: Sat 10 Jun 2023 16:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:11:9e:4e:97:f5:68:3b:af:11:11:45:84:d5:75:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 16:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f12544e94e577f9e61de3f440f99acfe9d550f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:06:3c:c8:17:d4:d9:a1:2d:5b:01:9e:f1:
ee:e5:0d:ec:3e:a3:58:75:94:96:d6:49:57:cd:04:
54:0a:ce:40:94:e5:e0:e5:3b:15:eb:0a:e0:a2:8f:
c6:36:15:4a:55:90:67:91:5a:40:9c:f5:1b:cf:83:
76:9a:e0:b0:d1:7b:b2:2f:9d:7d:85:9e:97:bc:1d:
f2:75:7c:c7:50:c1:85:86:8d:65:42:7f:0a:7a:e2:
59:fd:df:b4:91:57:dd:7e:95:cf:1c:cc:e4:51:75:
76:e6:03:8e:bf:36:0e:51:40:13:11:85:ee:53:0c:
98:ae:a6:ab:ac:8f:85:1f:16:10:06:eb:7d:f2:28:
38:c8:09:94:7e:32:63:fa:4c:ef:ef:fc:3c:81:ce:
6f:dd:c0:c3:f1:dd:19:2d:e6:a9:21:e6:94:fa:9a:
eb:6c:4c:ff:d6:26:d3:3f:c4:e3:12:69:fb:61:e7:
95:ce:7d:4f:ae:a8:cf:b5:0c:0b:a2:8a:1e:fe:a0:
83:f0:7f:0b:d8:5d:06:ce:85:e2:74:81:bc:f5:be:
6b:b6:8f:a2:06:67:44:e2:97:7f:00:80:cf:a7:be:
73:8f:5f:c2:fe:59:df:ab:02:81:28:79:dc:b0:d8:
06:22:d5:8b:8c:24:48:8d:90:7f:35:75:4f:1c:e4:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:54:4E:94:E5:77:F9:E6:1D:E3:F4:40:F9:9A:CF:E9:D5:50:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HxJUTpTld_nmHeP0QPmaz-nVUPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:4b:a8:25:b0:30:48:f0:da:ca:3a:7f:fb:ef:8c:5b:0a:d7:
c4:28:c1:5e:ba:d8:d5:32:57:2f:2e:08:56:68:f1:47:d6:a5:
ad:b1:a9:5a:cf:ee:c5:53:95:14:e6:26:5e:dc:0e:16:9c:6b:
d8:e7:cc:cd:fe:45:a7:8f:0f:69:80:96:8f:63:c2:7b:a7:d3:
dc:19:4e:09:f0:57:b9:dc:7d:d2:17:30:2b:b7:6a:56:85:40:
53:d9:fc:7e:87:3b:3c:76:38:c3:3b:9f:18:6a:fa:73:29:33:
62:eb:44:a1:f5:28:d0:aa:ba:b6:1c:bb:6e:dc:77:31:06:e2:
6e:3a:84:bc:8e:92:e6:7e:46:b7:e3:f0:27:01:0e:de:ed:c8:
85:f4:4d:40:9d:b4:b8:bb:44:ac:29:64:3d:28:3b:22:61:9e:
0a:f2:93:f3:8a:6a:52:71:c5:e2:44:12:17:1a:45:72:8c:9c:
ca:33:07:5f:11:29:b5:99:a4:71:7b:d6:f0:d8:3a:6f:9e:57:
32:66:cd:f0:fb:49:41:40:34:e8:06:fe:99:c0:35:fc:33:73:
e3:c2:91:71:e5:32:f8:40:30:a0:a8:c2:23:f3:a5:5e:5c:d7:
64:1d:2f:2b:40:41:27:50:cd:36:a3:be:43:31:22:a1:88:4e:
c5:37:9c:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYimEZ5Ol/VoO68REUWE1XV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMTYwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjEyNTQ0ZTk0ZTU3N2Y5ZTYxZGUzZjQ0MGY5OWFjZmU5ZDU1MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4kGPMgX1NmhLVsBnvHu5Q3sPqNY
dZSW1klXzQRUCs5AlOXg5TsV6wrgoo/GNhVKVZBnkVpAnPUbz4N2muCw0XuyL519
hZ6XvB3ydXzHUMGFho1lQn8KeuJZ/d+0kVfdfpXPHMzkUXV25gOOvzYOUUATEYXu
UwyYrqarrI+FHxYQBut98ig4yAmUfjJj+kzv7/w8gc5v3cDD8d0ZLeapIeaU+prr
bEz/1ibTP8TjEmn7YeeVzn1PrqjPtQwLoooe/qCD8H8L2F0GzoXidIG89b5rto+i
BmdE4pd/AIDPp75zj1/C/lnfqwKBKHncsNgGItWLjCRIjZB/NXVPHORq6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB8SVE6U5Xf55h3j9ED5ms/p1VDyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSHhKVVRwVGxkX25tSGVQMFFQbWF6LW5WVVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIpLqCWwMEjw2so6f/vv
jFsK18QowV662NUyVy8uCFZo8UfWpa2xqVrP7sVTlRTmJl7cDhaca9jnzM3+RaeP
D2mAlo9jwnun09wZTgnwV7ncfdIXMCu3alaFQFPZ/H6HOzx2OMM7nxhq+nMpM2Lr
RKH1KNCqurYcu27cdzEG4m46hLyOkuZ+Rrfj8CcBDt7tyIX0TUCdtLi7RKwpZD0o
OyJhngryk/OKalJxxeJEEhcaRXKMnMozB18RKbWZpHF71vDYOm+eVzJmzfD7SUFA
NOgG/pnANfwzc+PCkXHlMvhAMKCowiPzpV5c12QdLytAQSdQzTajvkMxIqGITsU3
nEc=
-----END CERTIFICATE-----
Generated at Fri May 2 16:58:03 2025 by rpki-client