Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RHofO98vY6LjHDjFbvYGxVQ4yjA.roa
File: RHofO98vY6LjHDjFbvYGxVQ4yjA.roa (raw, json)
Hash identifier: EAHos7DREOBJmQkeXFnYQU3+wwpwHQ2WbyYQWjFSYmk=
Subject key identifier: 44:7A:1F:3B:DF:2F:63:A2:E3:1C:38:C5:6E:F6:06:C5:54:38:CA:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E55F5959D613D1C2A015EF446C16B292
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RHofO98vY6LjHDjFbvYGxVQ4yjA.roa
Signing time: Fri 11 Aug 2023 16:12:58 +0000
ROA not before: Fri 11 Aug 2023 16:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:5f:59:59:d6:13:d1:c2:a0:15:ef:44:6c:16:b2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 16:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=447a1f3bdf2f63a2e31c38c56ef606c55438ca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:ba:7e:00:70:5c:64:f0:6c:fc:d5:ea:f2:
39:61:54:34:82:bf:02:f6:3d:cd:f4:88:dc:b4:2d:
98:e9:12:8a:52:b9:c4:70:f2:b9:65:c1:2d:4f:02:
ed:fc:7d:9c:22:f0:8e:d1:68:63:74:71:dc:6d:ee:
c7:dc:c8:0f:75:f1:8d:b5:63:90:ab:be:fd:7d:e1:
9e:81:a4:6e:74:f6:bc:17:0c:92:c7:24:24:7d:fa:
b4:f5:60:ba:d1:c7:65:63:ec:dd:63:a8:bf:a0:d0:
6f:61:ad:ca:39:06:9f:66:6b:bd:26:64:28:83:c9:
65:90:24:0f:dc:bb:0a:80:95:d8:f4:a5:95:c8:2f:
cc:e4:de:e3:e4:98:b9:86:95:ed:7c:31:17:d5:d2:
d2:5d:c4:b0:38:08:24:a0:9a:c5:bf:1a:4a:54:b8:
7d:47:f3:1f:32:86:d5:3f:50:1d:a0:2f:19:7c:fd:
75:8e:51:2e:18:dc:74:e6:db:60:a4:c3:9b:54:4d:
6c:ad:ca:8d:a8:d7:17:4b:3c:04:d7:24:ab:66:02:
0f:2d:d1:07:44:ae:02:8f:b7:a5:7b:42:74:80:43:
08:cf:a1:59:c6:fb:e3:70:37:36:16:12:e7:af:d5:
90:13:1c:23:f5:73:d0:b4:77:cf:f4:78:b6:78:d7:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:1F:3B:DF:2F:63:A2:E3:1C:38:C5:6E:F6:06:C5:54:38:CA:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RHofO98vY6LjHDjFbvYGxVQ4yjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:ae:e3:31:1d:0b:10:77:a2:74:30:ef:cd:e0:c5:b9:2b:e1:
be:2d:a7:a1:65:d1:4d:e9:bb:56:95:0e:05:41:15:f9:95:b9:
2c:34:4c:aa:cd:7c:6c:9f:d4:2c:49:6f:53:c9:23:c8:fc:1b:
03:5a:4b:53:c1:7d:66:36:ce:89:96:7d:59:90:44:1a:1d:87:
07:d5:24:2b:14:2b:57:89:4c:a2:d0:a6:3a:03:46:6e:c7:31:
be:cd:bf:7f:9f:94:92:8b:39:9f:88:ce:1c:97:47:c4:41:fc:
25:16:c8:b8:9d:e7:33:06:f5:4e:d9:4b:84:b9:32:f8:e7:3b:
c6:0a:69:f7:1d:3d:7d:b0:e1:90:d5:0d:2d:61:a4:df:ea:b8:
bd:14:5b:84:fc:cd:7d:ab:7c:6a:91:b2:55:8e:8b:9b:dd:20:
ef:e0:83:82:84:a8:52:e0:75:c3:02:a5:f6:6c:85:21:e1:b8:
25:7f:9a:fd:3e:de:fe:76:40:d1:c8:ae:82:6a:c6:96:47:a8:
2a:66:db:7a:68:ff:d8:52:d6:6a:f9:8b:05:c0:fb:36:7a:d6:
29:58:c8:e7:f1:6d:8c:aa:2a:66:b8:e6:da:00:4f:ae:d7:28:
f3:12:5c:21:07:16:d3:23:d6:32:99:84:ed:36:f1:7b:16:38:
9d:27:d7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:33:15 2025 by rpki-client