Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hxwg725ExyxvL793-_dVwxFrdYg.roa
File: Hxwg725ExyxvL793-_dVwxFrdYg.roa (raw, json)
Hash identifier: qZ4oE+JnF12mS+ZDJODWnwrY21O2WZUy0GypJT6g7Qg=
Subject key identifier: 1F:1C:20:EF:6E:44:C7:2C:6F:2F:BF:77:FB:F7:55:C3:11:6B:75:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EEAF4EEE3AEF794BB72F3023E8644D95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hxwg725ExyxvL793-_dVwxFrdYg.roa
Signing time: Tue 30 Aug 2022 12:17:22 +0000
ROA not before: Tue 30 Aug 2022 12:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:af:4e:ee:3a:ef:79:4b:b7:2f:30:23:e8:64:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 12:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f1c20ef6e44c72c6f2fbf77fbf755c3116b7588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:81:08:00:c5:c6:6d:19:b0:3a:c5:cd:4b:
4d:7d:7c:ad:f5:53:a1:56:55:eb:6c:2f:15:42:ef:
34:2f:b4:64:93:5b:65:83:9c:2f:4a:da:a9:46:ad:
a8:c7:f1:03:8b:cb:f2:1c:d3:20:e6:81:20:99:36:
6c:5f:ec:7a:a3:58:d7:41:e0:5e:06:37:58:25:af:
37:fe:9d:7f:6f:19:c0:af:32:37:75:99:4e:9b:99:
98:5e:89:b0:a4:f7:8d:ee:35:15:e0:d6:0f:ed:97:
c6:ef:9b:c4:8a:e9:52:d1:33:78:01:99:29:72:72:
5a:9d:36:2a:e2:99:65:62:14:84:a5:7d:a6:3a:df:
b4:36:91:46:3b:bd:7c:5b:88:8c:77:b6:a0:ee:4f:
eb:97:b2:b6:98:c2:6e:0a:36:e7:57:66:9a:0f:bc:
6d:1b:25:84:72:d2:fe:74:42:a5:95:2c:d1:f9:bc:
ca:53:66:34:db:cc:37:d9:d8:b7:01:b9:77:12:e2:
f7:a4:12:a7:2d:ce:76:c0:22:3d:85:42:36:27:25:
42:08:54:76:41:a7:24:17:2d:7e:7d:9a:d4:01:ea:
ff:73:79:b7:09:d1:03:96:82:81:0f:c5:06:14:91:
06:ce:98:1d:5d:1a:62:f2:2c:76:53:af:a5:b7:c3:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:20:EF:6E:44:C7:2C:6F:2F:BF:77:FB:F7:55:C3:11:6B:75:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hxwg725ExyxvL793-_dVwxFrdYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:ef:33:73:69:68:0f:1b:e2:f1:f0:78:f0:7a:ba:01:9a:67:
0d:b8:17:73:d6:2c:c3:87:5f:91:46:f0:21:1b:21:46:e7:2f:
ac:61:99:7c:f7:46:b6:53:d8:52:0a:6b:63:ad:45:53:62:24:
52:bf:a2:1c:e4:d5:9e:ee:2b:ad:f0:5f:6a:42:d8:dc:b9:1b:
36:cf:ce:cc:49:35:80:6d:d2:46:81:f8:08:06:46:01:23:ca:
2b:00:bd:01:06:fc:d6:e8:0d:c3:c4:8f:60:36:f0:1a:32:1e:
9e:6f:35:62:1b:f8:56:af:5a:94:69:9f:93:b1:76:43:be:4d:
8d:47:4b:3b:7a:73:c5:33:0c:d4:66:d9:93:fa:f6:66:28:b9:
db:c7:79:d9:9e:f3:4e:42:71:cc:45:bb:00:1b:a3:97:0d:e6:
f3:de:c5:99:4e:63:bd:09:dc:cb:96:d1:07:5f:17:94:ba:72:
e3:0e:9b:01:f6:c0:c1:6d:f0:d8:b2:30:7d:76:0c:09:e0:97:
97:fd:3d:89:02:33:02:ed:21:da:ac:34:63:a8:68:2c:51:16:
74:e5:18:de:c1:f4:37:f0:1a:6e:7b:33:93:28:31:9f:05:44:
cf:1f:a1:9b:87:ce:6c:ec:1c:5f:18:b1:5a:93:bb:4c:56:7c:
46:0a:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:16 2025 by rpki-client