Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0tFHF0shT_ZTdEDr5U__xl1HIU.roa
File: h0tFHF0shT_ZTdEDr5U__xl1HIU.roa (raw, json)
Hash identifier: PR85ugBJ/L6lqrvT78IBe2MzEzXkeLLnLJAzaUIPCII=
Subject key identifier: 87:4B:45:1C:5D:2C:85:3F:D9:4D:D1:03:AF:95:3F:FF:19:75:1C:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66EAE215
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0tFHF0shT_ZTdEDr5U__xl1HIU.roa
Signing time: Tue 01 Feb 2022 13:04:36 +0000
ROA not before: Tue 01 Feb 2022 13:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:b563:12f9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726669333 (0x66eae215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 13:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=874b451c5d2c853fd94dd103af953fff19751c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:e0:ed:a4:59:b4:b4:ba:eb:81:5c:a3:06:
50:bc:de:02:31:bd:69:28:d6:0d:d9:c2:ff:ab:81:
c7:c4:c5:94:48:a1:9b:23:fb:e9:b1:5f:a0:3d:74:
73:a4:2f:92:81:08:d9:84:7b:60:20:d9:3a:37:4e:
1a:ab:6b:56:dd:0e:bb:d1:dd:ea:33:a2:5f:cc:d8:
d6:55:93:31:cc:ce:fa:24:7b:32:79:bd:67:ef:16:
1d:65:fc:8c:c2:dd:da:1b:eb:88:f7:0e:08:d7:9a:
61:12:5f:b7:04:f0:dc:b5:79:c1:0b:10:bb:6c:84:
af:1a:a5:6d:5c:91:95:be:3c:39:81:f5:81:a3:13:
78:1f:37:48:b3:8d:93:6a:3c:72:1a:9e:e0:57:d7:
e4:59:ac:d1:dd:90:6f:77:01:6a:2b:c9:1b:16:4f:
14:90:c9:c5:47:a7:f8:8b:f1:de:b1:07:cd:75:86:
c6:f0:55:bf:12:24:25:2e:8d:f8:e8:d6:53:17:2b:
1a:5d:6f:13:8a:0d:76:2e:ec:3e:52:b8:ca:18:ae:
b2:d6:08:71:39:25:1e:43:50:6a:9c:80:e7:5f:e1:
dd:4e:13:ac:22:1c:eb:a2:f2:42:1b:71:c3:69:46:
e9:ea:63:35:5a:53:b6:67:66:a4:c0:ca:5c:40:5c:
92:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:45:1C:5D:2C:85:3F:D9:4D:D1:03:AF:95:3F:FF:19:75:1C:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h0tFHF0shT_ZTdEDr5U__xl1HIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:4b:9c:ba:64:8a:ee:2e:c9:09:b2:80:c9:47:08:17:9a:14:
78:3b:dc:81:b3:9e:a4:db:d1:c1:d4:fd:e2:3f:73:d5:1f:c4:
ef:c8:93:60:58:80:ab:cb:0e:a6:a9:bc:22:87:0d:a0:80:09:
f1:fb:48:3e:84:be:79:7c:61:b5:50:81:1b:d9:5a:af:c1:a7:
81:c0:e2:bc:57:17:a8:6e:78:27:af:b1:e3:e3:e9:0c:1f:86:
8e:9b:0a:7b:c7:b9:9a:ea:15:ce:34:f9:d6:a8:fb:2f:4a:08:
b3:7e:ec:2b:1b:bc:0e:81:81:15:fc:70:22:6b:9a:52:ea:b4:
71:10:17:d5:09:ff:f6:9d:6f:75:91:2b:57:b4:e0:87:84:9a:
23:5c:94:33:ab:1d:de:e4:65:ec:40:86:84:33:9e:34:a6:77:
a3:de:7e:9d:70:8a:de:c8:bf:4e:6e:06:c4:44:f7:02:27:61:
fc:05:31:e4:92:b4:ee:ce:96:31:12:ba:ee:fc:22:b4:46:16:
cf:0e:92:9c:5b:cb:cc:4f:dd:cb:7b:ae:64:4c:e8:89:12:08:
b4:1e:3b:34:ae:a7:20:16:f7:f7:52:d9:a6:c5:f6:c3:4c:39:
6b:09:5b:c7:57:c2:db:fa:55:47:df:4d:dd:03:0e:be:c2:ad:
f7:ce:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:43:25 2025 by rpki-client