Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_HRrJXF11T1IcXuv3gni7hDLzkU.roa
File: _HRrJXF11T1IcXuv3gni7hDLzkU.roa (raw, json)
Hash identifier: JlWVWLqleXEuoCSzNwjbPZXW3IKPGzNJu382N45soQU=
Subject key identifier: FC:74:6B:25:71:75:D5:3D:48:71:7B:AF:DE:09:E2:EE:10:CB:CE:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BB51AA778C15FFA2CF2CDAD0EA5016C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_HRrJXF11T1IcXuv3gni7hDLzkU.roa
Signing time: Thu 03 Aug 2023 12:13:58 +0000
ROA not before: Thu 03 Aug 2023 12:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:51:aa:77:8c:15:ff:a2:cf:2c:da:d0:ea:50:16:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 12:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc746b257175d53d48717bafde09e2ee10cbce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:ce:1a:95:7e:2d:5e:ea:a2:a1:9b:29:ac:
d0:c3:60:2c:69:d0:fb:98:5b:bf:d7:ed:08:7c:d3:
f5:b3:65:e3:a3:09:75:a1:30:3c:fd:c2:38:d5:74:
8f:80:d0:ec:fb:20:ad:fd:50:99:28:46:84:16:65:
7b:ed:0d:0e:6e:59:58:0c:94:cc:94:64:a8:69:e7:
41:9c:d7:c7:af:12:87:a5:1b:6f:b0:29:6e:77:02:
7e:81:b9:cf:5f:ae:18:87:45:4e:bd:d6:e7:c0:14:
e3:21:a3:b4:fc:27:96:37:cc:c9:2b:6a:9a:96:b7:
ad:d6:f4:08:9d:1d:8b:23:54:4b:ec:2e:39:f7:bf:
9f:c6:16:7b:56:d3:62:90:95:e1:95:3b:dc:3f:51:
56:ff:89:ff:07:d8:be:01:7b:08:c5:79:8a:41:bc:
8e:14:00:06:63:4b:86:30:4f:16:80:72:b7:24:d7:
05:05:39:c2:e7:e0:65:44:81:95:53:10:c3:77:78:
a4:7b:c8:ea:af:e7:fe:97:c6:43:2a:b9:da:0b:98:
f7:9d:3a:64:8b:95:b1:1b:37:8f:97:72:db:4a:ae:
24:dc:1d:f2:ee:1f:3e:ea:82:1e:6d:ca:b2:10:af:
4c:e2:47:d3:5a:1e:ed:fc:cb:35:c3:4e:71:55:ee:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:6B:25:71:75:D5:3D:48:71:7B:AF:DE:09:E2:EE:10:CB:CE:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_HRrJXF11T1IcXuv3gni7hDLzkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:d1:87:83:4a:9d:9c:ba:43:e5:21:09:c2:63:b6:d4:20:fd:
28:57:0d:0c:2b:64:b9:b3:8e:b3:df:76:89:15:20:31:0c:d6:
bf:38:a3:62:00:a3:cd:a3:43:29:08:cd:9b:1e:1b:9f:11:bc:
66:75:f2:2d:dd:6c:30:84:69:7f:a0:84:12:e2:6f:63:e6:bd:
b4:ee:ef:2b:9f:0c:c2:3e:cd:e9:0e:89:a6:ba:07:eb:ea:0a:
6a:66:f1:b1:10:49:4a:d5:15:73:a2:8b:ec:69:db:34:49:21:
9b:04:b7:b6:30:3f:1e:cd:61:e2:86:ad:6c:64:b3:75:2b:ff:
ed:92:3f:46:26:0e:49:9d:9b:23:cd:fa:79:8d:88:a9:0b:de:
ff:23:a1:f1:d8:4b:c9:e7:30:da:64:f0:82:c9:65:05:c8:a7:
f7:54:e5:9f:5f:95:b7:73:0c:63:56:62:c0:1c:db:17:66:62:
ba:ed:05:3d:9d:86:07:2d:78:15:94:0a:50:07:24:81:38:76:
0d:72:da:c5:99:5f:14:6f:36:37:4f:1b:18:fe:ee:6f:e1:57:
b1:e8:b4:db:0d:d8:49:ff:ae:19:a0:3a:4d:31:58:52:b6:8a:
b0:e9:8c:36:6f:2d:40:ad:16:9d:42:e5:04:a9:bf:d4:06:e5:
03:a8:8f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:01:46 2025 by rpki-client