Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HzuV4xxGKOTrodY5_EnFMJN3leM.roa
File: HzuV4xxGKOTrodY5_EnFMJN3leM.roa (raw, json)
Hash identifier: ySm2eeiWo2heC4/wSQd63nyQRdKFtrcTbR42WnBSGNQ=
Subject key identifier: 1F:3B:95:E3:1C:46:28:E4:EB:A1:D6:39:FC:49:C5:30:93:77:95:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C97E2A1FCD4D28DA19D504529A9F8D4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HzuV4xxGKOTrodY5_EnFMJN3leM.roa
Signing time: Fri 28 Apr 2023 20:11:41 +0000
ROA not before: Fri 28 Apr 2023 20:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c9:7e:2a:1f:cd:4d:28:da:19:d5:04:52:9a:9f:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 20:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f3b95e31c4628e4eba1d639fc49c530937795e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:e6:8a:e4:5e:47:48:cd:c5:f1:a8:2f:ee:
00:19:03:24:c7:63:19:d9:47:67:09:b3:8a:5f:f7:
0e:fa:6a:28:34:95:f1:b3:8f:ba:ed:60:6b:54:3c:
cf:d2:40:a3:32:a7:08:fe:4f:5b:2a:85:c1:01:28:
5c:72:ea:19:41:be:5a:63:63:6a:00:98:57:9e:f2:
15:8f:bc:34:d1:b8:44:da:b9:26:ad:b5:5c:68:4a:
8f:c7:8c:63:80:68:b6:fd:d9:0c:ea:c1:aa:bf:30:
5d:3f:13:66:14:d2:d4:33:a3:6a:f9:da:51:32:fb:
5e:6d:0e:d3:38:10:26:8e:86:b4:97:63:30:16:78:
42:17:37:4c:86:26:76:11:43:35:f8:e9:89:cd:0c:
80:18:1a:3c:a8:8c:e6:e1:52:bf:9a:9a:a4:8c:c0:
e2:ca:c3:63:c6:b0:11:b3:45:9e:70:28:91:27:04:
5c:61:de:80:9b:dd:42:2d:b3:a0:31:00:8a:07:22:
f9:36:a7:58:ea:5b:d7:65:d2:fe:59:e0:5e:5b:d5:
01:4f:ab:49:a4:2e:b3:bc:45:a6:f5:8d:9d:a9:0f:
30:2c:bf:92:cc:9a:71:fe:ea:a1:71:22:e9:19:0c:
37:5a:6a:28:49:c9:c2:b4:cb:8f:f4:20:5d:16:5e:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:95:E3:1C:46:28:E4:EB:A1:D6:39:FC:49:C5:30:93:77:95:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HzuV4xxGKOTrodY5_EnFMJN3leM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:e9:ed:75:8a:b9:51:27:d9:46:f4:ab:5f:57:58:36:37:ca:
be:d5:ca:88:f1:fa:17:40:bb:81:46:1d:e6:75:ee:f7:8e:ce:
5f:2a:fd:8d:a3:27:ce:87:45:f5:9d:0b:18:4c:5f:05:47:45:
47:a9:32:2f:c9:b0:24:36:70:04:0e:6f:a7:34:8d:47:f4:2e:
ac:5f:76:2f:b0:be:61:fc:46:87:8a:28:73:27:9d:fe:24:b0:
88:9c:1c:23:48:cc:28:43:84:d1:a1:6d:05:cc:ac:83:91:45:
81:4d:a8:f8:25:59:f0:33:52:c0:61:4a:16:a1:1f:23:fe:05:
be:8c:30:1d:a9:13:85:45:f8:da:54:2a:08:2e:6f:4b:35:e0:
a4:05:15:4c:d9:92:e7:c9:c3:dd:62:c9:ff:2f:ed:c0:47:01:
d1:3d:f3:ff:0d:0f:6b:ee:ae:ee:a1:89:99:44:96:03:b8:b3:
db:b4:9b:c5:4c:c8:6e:81:33:7c:85:27:7f:56:d6:40:a9:2f:
12:dc:1d:ee:de:03:a9:07:58:a9:00:65:ea:a9:5d:9e:f5:b6:
ba:a7:4b:c7:ef:a5:aa:28:19:06:bf:c0:87:8c:ed:ab:9e:81:
f1:5e:a9:d0:37:e5:d0:65:1e:82:c3:0f:89:d8:5a:ef:4d:7e:
84:2c:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:00:19 2025 by rpki-client