Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5kRs6KMFD9n4tYyqx76YXK8DBc.roa
File: h5kRs6KMFD9n4tYyqx76YXK8DBc.roa (raw, json)
Hash identifier: FlEGvVWUi3PT9jE5120iVIOEQWNsP4I5iFZc0hF0xds=
Subject key identifier: 87:99:11:B3:A2:8C:14:3F:67:E2:D6:32:AB:1E:FA:61:72:BC:0C:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DE79C85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5kRs6KMFD9n4tYyqx76YXK8DBc.roa
Signing time: Sat 26 Feb 2022 16:10:55 +0000
ROA not before: Sat 26 Feb 2022 16:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843895429 (0x6de79c85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 16:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=879911b3a28c143f67e2d632ab1efa6172bc0c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:f8:8c:c3:8b:cc:01:8e:d7:31:14:b2:5f:
22:5e:81:b9:2c:9a:cb:95:d4:4a:7a:9a:6e:9e:e7:
4c:27:33:34:f9:18:0c:83:2f:81:74:9d:21:42:d0:
56:6d:39:ff:2f:c4:b4:4e:75:45:72:6e:1d:18:74:
51:56:7b:40:c5:b1:75:1e:31:00:78:4e:72:d5:bf:
6b:f1:b6:d5:71:a4:ff:ab:02:62:54:d6:0c:b7:2f:
50:b6:48:c3:2f:6c:f9:dc:dd:27:1f:95:1f:d3:33:
df:be:44:7f:1c:06:0b:a2:25:39:95:b6:26:3c:2e:
1c:16:0d:f2:e7:6a:4d:cc:61:9b:8b:23:04:9b:65:
c7:0d:2a:26:b1:2c:22:22:3a:30:f3:bb:95:92:6a:
91:28:03:8f:65:75:03:6b:8f:3c:1f:60:6e:d1:09:
cb:97:40:cc:e6:10:73:05:96:94:3c:eb:93:40:25:
fe:c7:c5:dc:ec:f9:9a:e2:50:12:98:3c:51:b1:3f:
46:d1:62:3c:68:df:22:33:39:c0:89:c9:1e:cb:e1:
7a:64:34:e2:2c:d3:81:1e:2d:5b:5d:88:1a:8e:e2:
36:60:3c:95:4a:97:16:7b:bf:6b:d9:38:15:6a:5f:
5c:94:cc:21:70:55:00:77:55:51:88:96:85:ca:7f:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:11:B3:A2:8C:14:3F:67:E2:D6:32:AB:1E:FA:61:72:BC:0C:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5kRs6KMFD9n4tYyqx76YXK8DBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:61:40:9d:ae:90:7b:68:79:5f:dd:00:72:4b:e7:c3:cb:a9:
a0:3a:44:8e:9d:2d:55:e7:32:9f:8d:91:25:8f:32:dc:2e:eb:
50:80:39:12:7f:43:2a:4a:ac:49:d5:d7:f9:62:1f:fe:39:dd:
64:2c:17:9d:19:3e:5d:24:24:59:02:00:76:3a:e0:74:75:d1:
35:26:b7:32:39:dd:2f:0f:6a:a4:59:d0:45:32:47:2a:46:78:
b1:62:59:b3:0f:e7:ec:4b:1f:91:be:26:c3:c9:92:ee:48:58:
24:5b:96:92:40:03:50:26:3c:55:2a:29:20:a1:b1:d1:8c:11:
19:6a:8a:47:ec:cc:74:65:ae:d2:d6:dc:8c:d2:46:d5:72:f6:
50:0e:3a:86:6e:c8:83:ff:ec:a2:e5:1d:ac:78:c1:53:06:0a:
03:a0:fe:ae:8f:e8:14:c0:71:c2:6c:ea:36:32:ca:7c:1c:09:
77:bd:c4:ad:06:54:f5:76:a5:67:91:f6:bb:df:42:47:40:d2:
c6:95:7f:78:60:a7:59:4c:31:5c:cd:0e:a1:fc:28:61:02:c9:
8a:81:91:24:21:07:76:d1:cc:36:df:0c:d4:b9:a2:73:27:5f:
07:8f:44:68:20:d0:f7:05:14:d1:91:25:f0:a3:01:8d:a7:46:
1f:20:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:25 2025 by rpki-client