Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_n05HJxk95c7cq_-r6-HlGPLabo.roa
File: _n05HJxk95c7cq_-r6-HlGPLabo.roa (raw, json)
Hash identifier: cXBDS8AVb5E+qP9s2aLT8Zi6nt+ONcbHXEz2Zwgr//Y=
Subject key identifier: FE:7D:39:1C:9C:64:F7:97:3B:72:AF:FE:AF:AF:87:94:63:CB:69:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827C1628B565F02D59EDF7C663D0240E3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_n05HJxk95c7cq_-r6-HlGPLabo.roa
Signing time: Mon 08 Aug 2022 06:13:23 +0000
ROA not before: Mon 08 Aug 2022 06:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:16:28:b5:65:f0:2d:59:ed:f7:c6:63:d0:24:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 06:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe7d391c9c64f7973b72affeafaf879463cb69ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:6c:b0:25:2b:52:c8:77:92:5f:f8:ff:84:
df:2e:2f:e4:c8:10:b5:39:29:d1:f2:ad:c2:58:de:
8a:0a:ed:0d:40:a2:e6:af:2a:32:fa:76:82:d4:ee:
41:c6:0c:00:27:9f:64:2d:95:5d:aa:f8:84:92:99:
30:e4:9e:17:8d:9b:48:0e:a8:9d:ad:da:75:0d:db:
18:b5:c0:f9:9d:d1:ff:e6:4e:84:0d:46:25:48:c1:
08:3c:d1:0a:10:72:32:de:ba:06:ee:1d:d8:ab:5e:
62:cc:19:07:ec:52:6b:2d:bb:32:29:68:d9:e3:30:
bc:04:87:42:8b:25:fb:ce:b9:41:cf:f3:c9:fb:06:
e3:6d:fd:b7:7a:eb:15:fc:31:05:34:71:da:4e:f8:
f9:b3:00:80:ae:2a:8a:45:5d:97:38:ce:eb:ac:37:
16:a0:cb:36:3a:db:f5:40:ba:f8:77:48:f9:5a:4a:
b1:54:06:83:a6:9d:16:29:aa:8d:76:80:cf:7d:36:
c8:4d:d0:cd:ff:b8:2b:74:a9:9b:35:ce:31:f2:86:
27:59:ad:92:26:59:c4:2e:90:fb:20:fa:2e:ef:7b:
e4:da:0c:72:75:0c:31:d0:ca:de:40:21:b6:60:8a:
fe:a1:76:e9:e8:96:e5:43:ee:e6:89:dd:fb:6c:96:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:39:1C:9C:64:F7:97:3B:72:AF:FE:AF:AF:87:94:63:CB:69:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_n05HJxk95c7cq_-r6-HlGPLabo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:7e:4a:fc:c5:7f:53:99:7e:50:43:6d:2b:35:54:c0:11:68:
e6:4c:d2:89:ab:bc:3c:63:12:ab:86:cd:bd:62:7b:7c:14:14:
00:4e:52:5e:b4:d8:27:3e:a6:4b:34:e5:7c:e9:53:14:ad:04:
01:ce:5b:05:42:d9:9f:91:e7:cc:2f:8e:60:5a:45:a5:56:68:
b8:d7:a8:0e:93:d4:c6:43:2f:ac:a3:f5:ac:1f:34:de:34:b6:
b9:59:01:60:2a:e4:34:ad:64:6e:2b:92:fb:78:75:a8:19:7b:
34:38:1d:2d:f5:dd:fa:db:ce:f5:21:99:10:41:9d:4a:22:61:
76:52:d3:4e:4c:e3:6b:97:4e:0f:b1:1d:e2:19:66:b5:59:26:
aa:a4:e2:5d:9f:f0:da:f9:59:5c:1f:41:94:8c:61:c8:53:c2:
d9:72:b1:30:5d:4e:c8:db:8d:84:60:76:56:3e:2b:39:32:14:
1f:c2:b6:f4:fb:00:49:58:1b:ca:ff:93:63:a1:90:fe:b7:d6:
5c:22:c0:62:12:f9:f9:36:f6:a5:b8:06:85:83:fa:dd:b0:fd:
ed:9b:65:5f:ee:46:97:51:e0:99:cd:8d:da:d1:49:1f:53:36:
11:e4:2a:15:01:65:20:be:47:33:ef:7c:8a:2e:5e:01:f3:f7:
fe:2f:9c:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJ8Fii1ZfAtWe33xmPQJA47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA4MDYxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdkMzkxYzljNjRmNzk3M2I3MmFmZmVhZmFmODc5NDYzY2I2OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSNssCUrUsh3kl/4/4TfLi/kyBC1
OSnR8q3CWN6KCu0NQKLmryoy+naC1O5BxgwAJ59kLZVdqviEkpkw5J4XjZtIDqid
rdp1DdsYtcD5ndH/5k6EDUYlSMEIPNEKEHIy3roG7h3Yq15izBkH7FJrLbsyKWjZ
4zC8BIdCiyX7zrlBz/PJ+wbjbf23eusV/DEFNHHaTvj5swCAriqKRV2XOM7rrDcW
oMs2Otv1QLr4d0j5WkqxVAaDpp0WKaqNdoDPfTbITdDN/7grdKmbNc4x8oYnWa2S
JlnELpD7IPou73vk2gxydQwx0MreQCG2YIr+oXbp6JblQ+7mid37bJYq3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP59ORycZPeXO3Kv/q+vh5Rjy2m6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX24wNUhKeGs5NWM3Y3FfLXI2LUhsR1BMYWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC1+SvzFf1OZflBDbSs1
VMARaOZM0omrvDxjEquGzb1ie3wUFABOUl602Cc+pks05XzpUxStBAHOWwVC2Z+R
58wvjmBaRaVWaLjXqA6T1MZDL6yj9awfNN40trlZAWAq5DStZG4rkvt4dagZezQ4
HS313frbzvUhmRBBnUoiYXZS005M42uXTg+xHeIZZrVZJqqk4l2f8Nr5WVwfQZSM
YchTwtlysTBdTsjbjYRgdlY+KzkyFB/CtvT7AElYG8r/k2OhkP631lwiwGIS+fk2
9qW4BoWD+t2w/e2bZV/uRpdR4JnNjdrRSR9TNhHkKhUBZSC+RzPvfIouXgHz9/4v
nPo=
-----END CERTIFICATE-----
Generated at Thu May 1 11:08:56 2025 by rpki-client