Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_sHB4SJYP43cJ5HNRlVubqH7ZNM.roa
File: _sHB4SJYP43cJ5HNRlVubqH7ZNM.roa (raw, json)
Hash identifier: C653vMn1Xb+bVWMcKFWjhklqNX+E0wHdU2DbKAsXqCU=
Subject key identifier: FE:C1:C1:E1:22:58:3F:8D:DC:27:91:CD:46:55:6E:6E:A1:FB:64:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DE536A5560EEEACC636E32E041F994EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_sHB4SJYP43cJ5HNRlVubqH7ZNM.roa
Signing time: Tue 14 Mar 2023 04:14:14 +0000
ROA not before: Tue 14 Mar 2023 04:14:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:53:6a:55:60:ee:ea:cc:63:6e:32:e0:41:f9:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 04:14:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fec1c1e122583f8ddc2791cd46556e6ea1fb64d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:45:4c:4b:32:26:eb:dd:4b:63:74:52:eb:
d3:f0:43:27:8e:1b:e8:a0:40:5c:69:8d:8a:83:22:
c2:17:8a:e2:64:9b:67:86:12:a2:11:c0:4d:90:c5:
ba:a0:3f:8e:16:54:54:72:bb:f2:c7:ee:72:03:e3:
9a:68:c4:1d:d5:d5:13:c3:32:ad:25:c9:24:aa:1c:
53:2f:59:3e:51:b4:d7:ab:c3:0e:81:12:7e:33:fe:
06:45:69:15:3b:37:6a:3a:c1:6c:91:bf:1d:0c:36:
6d:99:63:c7:60:8b:57:c6:75:67:78:07:fe:a1:ef:
15:3f:85:da:a0:a1:fe:6c:80:a7:e5:59:d7:49:1d:
fb:65:74:46:df:30:32:b4:d9:14:52:a6:68:98:0f:
d3:16:3e:28:d1:e0:71:6a:33:55:19:98:ef:7e:84:
a6:e6:20:9f:45:f9:4b:c5:b4:ab:39:88:30:09:a4:
cd:3a:ba:5e:71:22:3a:ff:79:61:8d:5f:50:10:b1:
88:a3:c9:64:11:7f:c7:77:31:ab:f7:51:c1:c0:90:
cc:9f:31:83:67:86:00:d6:30:b8:5e:86:0b:2d:87:
e5:17:42:85:b6:2a:21:43:14:8c:42:88:b4:f2:fa:
90:da:6c:ca:68:4d:a5:24:91:64:4c:88:89:1b:02:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:C1:E1:22:58:3F:8D:DC:27:91:CD:46:55:6E:6E:A1:FB:64:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_sHB4SJYP43cJ5HNRlVubqH7ZNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:27:72:76:b6:d2:c4:6e:90:a1:7b:af:96:d8:d0:63:f3:4b:
c3:c1:96:6e:d9:74:c3:0e:09:5c:4d:b3:4c:6a:0e:64:ae:cf:
8e:20:7c:56:66:65:c2:94:e9:5f:58:7c:a5:7d:4e:09:23:e4:
ca:1d:19:26:6a:3b:a2:c7:37:15:53:94:ba:c4:32:f7:1f:8d:
43:79:b2:bf:d8:b2:49:49:68:3f:26:b3:56:a5:41:da:fb:e4:
48:c9:c0:7f:ef:9b:3d:2f:9b:a5:91:1c:57:98:1a:e7:5d:01:
87:3f:72:9b:cc:f7:fa:95:a3:59:0a:bc:d4:f2:47:c1:47:04:
6a:81:bd:24:1b:97:cf:ff:77:b8:d8:9d:d3:56:1a:b5:f3:64:
70:76:b4:72:e9:5e:c0:94:7f:a3:f6:ee:3d:c0:eb:58:93:d3:
cf:2c:69:9b:13:ac:c0:e0:d6:b4:8c:80:40:76:f1:10:ba:ec:
ce:43:56:e0:bc:47:cb:09:e2:a3:32:f1:a3:c9:61:a4:4a:5b:
e4:7b:51:86:9f:cb:75:2a:3f:78:6d:f2:af:95:7a:89:6d:eb:
d3:f4:af:ec:40:e0:7c:aa:c3:7b:71:c4:ca:de:c0:a9:59:cf:
b9:e8:37:d1:cd:4b:1b:ca:90:55:49:0d:84:3a:25:52:bd:0e:
b8:23:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:44:13 2025 by rpki-client