Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0FmdTLVFFkcfnzdER-hQA5fHV0.roa
File: h0FmdTLVFFkcfnzdER-hQA5fHV0.roa (raw, json)
Hash identifier: m7ZERASG1pK8DD/EbifOMR/dO+o+dQLUbG+rP+ZEsDU=
Subject key identifier: 87:41:66:75:32:D5:14:59:1C:7E:7C:DD:11:1F:A1:40:0E:5F:1D:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821097F3F2112EDB260B3435315EF008EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0FmdTLVFFkcfnzdER-hQA5fHV0.roa
Signing time: Mon 18 Jul 2022 09:16:09 +0000
ROA not before: Mon 18 Jul 2022 09:16:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:97:f3:f2:11:2e:db:26:0b:34:35:31:5e:f0:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 09:16:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8741667532d514591c7e7cdd111fa1400e5f1d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:ac:9a:e9:55:f1:4b:3e:9f:e2:2f:7a:64:
08:41:5c:f0:c2:a2:9a:5e:04:aa:eb:59:f4:a4:11:
5a:1e:e5:1e:2a:c2:c0:eb:a6:9a:30:ba:d7:ab:e4:
fd:a5:2b:60:e2:3d:46:06:0c:88:04:fa:49:e5:15:
9f:57:aa:9e:3d:7d:ea:22:d5:37:81:43:60:b0:fd:
9f:83:d6:65:e6:b2:0a:04:74:c7:75:e7:92:24:6d:
5f:6e:de:5c:54:e8:63:c4:90:0f:89:b4:9b:16:c5:
9d:56:58:7c:b0:a9:ac:91:2a:6a:15:dc:58:ad:8a:
17:77:a1:e2:fb:fd:a3:1f:57:fe:79:6e:2d:13:1e:
a0:15:47:b1:f4:a2:d3:67:70:f3:c5:67:36:f4:81:
7e:38:79:3a:35:0b:95:c9:8d:17:59:03:5a:58:9b:
89:d9:f0:4a:31:6a:92:d3:a1:af:f5:0b:2d:b0:21:
45:49:95:73:5d:c3:94:d1:8d:de:96:00:c1:54:8d:
9d:6f:4a:dd:08:b0:bc:ce:8b:75:c0:39:29:b9:8f:
09:88:a1:88:e5:af:c8:ec:8c:d9:0b:a4:11:18:e8:
aa:37:82:8b:81:50:39:eb:7c:64:b4:2e:08:d8:bb:
84:68:98:7a:64:6e:6f:4c:15:f6:f6:c1:13:a9:c1:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:41:66:75:32:D5:14:59:1C:7E:7C:DD:11:1F:A1:40:0E:5F:1D:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0FmdTLVFFkcfnzdER-hQA5fHV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:df:8c:d8:92:87:3b:60:e9:7b:29:db:62:a6:3d:f3:fc:cd:
c9:85:c0:85:56:fe:58:ee:69:98:9b:af:59:e0:b1:af:ee:f7:
ac:7e:b8:ac:f1:a5:d9:ef:90:6b:b1:8b:44:cb:54:d2:0e:c3:
44:9f:f7:27:3d:df:aa:58:9b:89:26:2d:75:48:4b:67:01:93:
9f:5b:bf:ee:c2:4d:f8:c5:b1:77:95:b3:97:7f:5a:32:53:a6:
c0:d5:96:ac:5f:30:b4:7c:14:a0:37:fb:8a:7b:8d:6b:5d:f2:
5f:d3:f4:73:a0:00:c1:22:c8:e1:73:7f:93:b5:8d:88:c5:5e:
9a:1e:d7:6a:eb:49:1a:ff:9d:a0:f9:c1:f7:45:66:15:ad:2d:
bf:bb:be:ba:b1:14:17:d2:13:4b:fd:fb:f5:12:e4:75:0f:a5:
b5:bb:6c:76:e8:4c:bf:3d:21:27:74:98:f3:49:b1:b3:86:52:
9a:4e:05:21:fb:1f:15:7b:2c:6a:ad:25:18:c2:04:2c:ed:d0:
d3:6e:6c:18:b3:63:67:51:45:80:a0:cc:ef:f7:7c:e7:26:aa:
0c:f0:31:2c:f2:9c:d6:33:09:91:47:75:bc:f4:4e:35:a5:56:
82:09:ad:49:03:cf:4b:6e:8e:e1:c7:ee:44:42:9f:f6:08:17:
6e:34:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:25 2025 by rpki-client