Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h81YX3XMIN-tFk9yogXzM1LG0m8.roa
File: h81YX3XMIN-tFk9yogXzM1LG0m8.roa (raw, json)
Hash identifier: +X4svxDxFzRAOcJkCqj6auQhCowHuaYeFfMI4HFH3w8=
Subject key identifier: 87:CD:58:5F:75:CC:20:DF:AD:16:4F:72:A2:05:F3:33:52:C6:D2:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3F40B442E2024D68CEE0A7CB788E8406
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h81YX3XMIN-tFk9yogXzM1LG0m8.roa
Signing time: Tue 29 Aug 2023 03:05:19 +0000
ROA not before: Tue 29 Aug 2023 03:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3f40:99ec/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3f:40:b4:42:e2:02:4d:68:ce:e0:a7:cb:78:8e:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 03:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87cd585f75cc20dfad164f72a205f33352c6d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:9e:30:26:5f:8e:52:31:c9:27:04:30:d3:
4f:de:ca:72:bb:bf:cf:4b:1c:dd:27:63:f2:52:61:
5c:11:bb:fc:b3:78:27:ba:54:71:fb:75:db:6c:9c:
6f:15:d7:27:c8:23:a7:26:a0:bd:50:61:a8:bd:4a:
33:ad:21:d5:09:ee:5f:a4:39:c7:f7:42:cd:c9:9e:
6f:f0:9f:48:e1:5d:9e:93:6c:cc:24:80:8c:e7:a4:
43:9f:4f:09:9a:5d:5f:9c:1b:e8:e7:3c:e7:d6:b4:
eb:07:e1:a3:1d:8f:76:b9:b1:08:ea:49:89:a6:e7:
c6:9b:b2:09:d9:87:44:80:fb:72:06:01:16:0a:51:
00:51:02:87:bc:f7:8b:4a:ed:f8:8c:bc:0d:b2:11:
4b:33:5c:23:43:07:a7:76:54:27:a9:e4:42:94:f6:
68:bd:e2:3c:a4:1f:0c:dd:be:1d:ea:29:11:38:ce:
3c:8b:cd:7a:6a:e1:78:9c:62:cd:c2:05:76:3f:41:
f2:dc:00:91:78:f4:0f:28:35:c6:87:4e:d4:ac:8d:
17:31:4e:2e:a8:51:27:50:de:80:33:43:60:4d:7c:
43:42:50:86:dd:2b:b5:62:aa:e6:ca:44:fd:2a:99:
3e:bb:22:a2:53:93:bb:62:61:e3:2f:da:72:0f:28:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:58:5F:75:CC:20:DF:AD:16:4F:72:A2:05:F3:33:52:C6:D2:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h81YX3XMIN-tFk9yogXzM1LG0m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:21:31:a4:54:f4:d1:8e:88:cd:86:fc:d2:7e:ca:e7:1c:c5:
2b:59:f7:d9:e8:2b:6b:75:ed:46:92:3e:35:c2:d6:69:b7:0d:
a1:0a:e0:5e:7a:20:7b:62:13:fe:09:e7:47:6e:e6:9b:05:d4:
6b:56:7b:5d:20:70:05:88:00:73:38:9d:05:44:7f:59:59:1b:
61:a6:c4:f0:33:bf:fb:02:7a:fb:48:95:1c:e6:4b:54:5a:6b:
e5:d2:d8:8b:56:a1:7b:98:5a:ac:28:57:33:a0:e6:7b:79:e8:
1d:b7:03:65:84:7d:e0:57:65:cd:a2:12:0d:3d:c0:60:cf:eb:
6e:7e:24:76:e4:1c:39:ea:1b:9f:c1:63:c4:11:80:e9:4f:78:
9e:d3:38:77:45:93:27:ca:d4:f8:9e:4a:40:54:bf:02:95:e8:
01:2d:35:26:95:ae:b3:e6:6c:ea:6f:a0:f5:05:e9:e5:0f:d1:
7b:be:ec:38:15:a2:7c:54:64:d7:6b:9b:c6:12:ed:24:0c:e3:
e5:83:7a:3e:16:fc:1d:b5:a7:46:3a:d5:ef:65:37:f8:3d:68:
e2:17:af:9a:9b:52:bf:0c:46:01:7f:c9:8b:fd:fe:87:ee:81:
97:dd:31:56:6f:3c:f5:0c:c7:fd:0f:36:d0:d0:e2:1a:d0:41:
b9:38:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:49:38 2025 by rpki-client