Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h9HK_nWiZyBX0bCpgCNXsZKVH-c.roa
File: h9HK_nWiZyBX0bCpgCNXsZKVH-c.roa (raw, json)
Hash identifier: fg7hO1KeSyIjH9po5UVIvXI5AHgY1e81f1u9B96SHzM=
Subject key identifier: 87:D1:CA:FE:75:A2:67:20:57:D1:B0:A9:80:23:57:B1:92:95:1F:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F8162B1FB162F5A549339CED1A719D0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h9HK_nWiZyBX0bCpgCNXsZKVH-c.roa
Signing time: Sun 19 Mar 2023 04:17:27 +0000
ROA not before: Sun 19 Mar 2023 04:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:16:2b:1f:b1:62:f5:a5:49:33:9c:ed:1a:71:9d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 04:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d1cafe75a2672057d1b0a9802357b192951fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:d7:8c:bc:70:11:f0:59:62:98:26:17:49:
f7:e4:70:29:ac:34:ea:f4:8d:ce:53:6e:2e:32:97:
4a:03:57:c8:24:dc:31:30:ed:14:67:27:d5:69:ad:
ed:ac:cd:5e:6e:af:e4:42:18:2a:68:06:84:6e:0d:
20:cd:fe:83:3b:6f:12:ee:e5:cd:c8:4a:90:50:18:
76:00:78:dd:42:9a:25:84:eb:aa:b9:73:4b:f0:47:
8b:b2:49:c5:5b:5b:ca:fe:57:0b:90:10:10:eb:5c:
97:33:2c:9b:24:29:24:2e:22:a6:2d:3d:4f:54:56:
a7:b1:0e:ac:83:91:cf:4e:c1:4e:f3:f7:c0:a1:64:
45:25:b3:54:9f:9f:91:dc:1a:50:bf:7a:54:ba:e4:
fa:0a:86:54:fe:3c:fc:e2:78:9e:bf:ce:08:d4:90:
ce:dc:75:9a:ba:d0:f4:30:6b:ae:59:b5:30:f8:6d:
39:63:c2:b7:e9:60:6b:9f:ae:f9:f6:a9:e3:b2:be:
51:6a:1b:9f:7c:12:8e:b0:64:7d:09:64:c4:55:b2:
07:6f:01:20:14:28:ce:fe:97:78:f9:4e:a2:a6:ea:
56:06:04:6e:d2:05:d2:24:b3:0d:db:61:9e:fb:0d:
09:5d:30:cc:f2:c1:19:6f:05:a2:ce:18:95:e9:73:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:CA:FE:75:A2:67:20:57:D1:B0:A9:80:23:57:B1:92:95:1F:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h9HK_nWiZyBX0bCpgCNXsZKVH-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:53:b1:83:09:c3:ab:f7:82:e3:e2:dc:d1:50:60:39:47:f6:
65:6a:88:06:25:e3:e9:54:63:32:28:b3:eb:af:e8:5f:ce:d2:
64:3a:b6:b4:27:4e:93:01:06:6f:62:85:14:c8:1b:70:3a:fa:
7e:64:b7:32:7d:e1:ac:15:fa:95:55:17:aa:21:46:bd:ca:dd:
c5:50:86:2c:cc:c4:2a:35:1e:f3:98:b5:ab:07:96:3e:2f:38:
af:e2:5c:8a:e5:41:e2:56:41:3e:67:71:61:f0:31:d2:d9:8d:
73:5f:d6:60:0d:c2:f3:0d:62:18:92:b6:c0:76:b8:6f:ad:6e:
ac:b7:9d:75:11:7c:43:ec:5c:c4:ba:7d:81:43:eb:a2:bc:51:
39:66:31:22:54:e1:14:c3:1f:95:6b:c3:6e:df:f1:79:1e:62:
27:22:dd:4b:74:12:16:09:d6:a8:07:83:4e:03:91:cc:d3:63:
bf:bb:5b:ea:1b:95:0e:6e:48:54:35:a0:01:4a:77:26:ae:36:
aa:32:ab:d0:7f:55:20:3d:b3:25:e0:55:d8:b5:0b:c3:bc:27:
c3:74:2a:dc:6e:54:5d:89:4d:d6:32:82:4a:d4:46:0e:b0:64:
1e:bd:84:0b:65:4b:54:35:4d:7f:c2:42:7c:e7:dc:72:d2:dd:
c1:b1:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:23 2025 by rpki-client