Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBGNSkgbAe9IrGgrp9Rkd1TJnXA.roa
File: hBGNSkgbAe9IrGgrp9Rkd1TJnXA.roa (raw, json)
Hash identifier: S3VeMrFu6KUUn9l6NT+EGqDeXBVBaNPdcucsaeYmD94=
Subject key identifier: 84:11:8D:4A:48:1B:01:EF:48:AC:68:2B:A7:D4:64:77:54:C9:9D:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841E4B713FB80CCAA01D5AF4069D97F930
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBGNSkgbAe9IrGgrp9Rkd1TJnXA.roa
Signing time: Fri 28 Oct 2022 11:12:51 +0000
ROA not before: Fri 28 Oct 2022 11:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:4b:71:3f:b8:0c:ca:a0:1d:5a:f4:06:9d:97:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 11:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84118d4a481b01ef48ac682ba7d4647754c99d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:f9:dd:17:d3:97:56:1d:57:05:a9:b9:80:
14:f1:75:7b:8c:71:5f:2b:2c:23:6e:2b:30:76:4b:
e3:67:65:da:56:a4:ab:d7:40:25:e2:7a:94:a5:b5:
df:19:3d:79:bc:80:0e:63:d2:06:cf:bb:63:92:8a:
1b:9a:80:dc:c6:61:c4:23:d9:1b:61:a0:c1:28:c1:
58:52:5c:31:ff:f0:ef:43:53:4c:aa:ed:16:34:94:
4e:37:5d:c3:eb:06:a2:bf:5d:94:5d:56:3a:2c:04:
76:8c:0c:5f:6b:8c:99:56:4a:66:c5:db:d4:df:ef:
e5:0e:9b:0e:c0:0f:54:84:c4:c2:6d:2b:5d:b4:83:
dc:69:ed:93:aa:36:0e:1a:44:76:b5:67:8e:24:e6:
cb:f8:ec:da:7e:ba:6c:31:a2:71:f9:fc:7a:eb:17:
31:45:c0:d9:54:41:f1:b9:4e:50:a6:78:fc:27:3c:
e2:cf:88:f8:3d:20:b3:93:68:c6:c8:b6:94:89:f6:
f3:ec:37:5b:ad:c6:83:42:52:d3:b1:2b:2e:bc:e7:
78:49:cb:fa:dd:ef:14:b7:ba:20:52:93:37:e3:ab:
48:f9:ca:e3:99:cc:6e:2e:b3:c7:e5:71:1a:9d:88:
88:fe:42:4d:a6:2e:d2:63:72:7e:51:11:a6:d8:59:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:8D:4A:48:1B:01:EF:48:AC:68:2B:A7:D4:64:77:54:C9:9D:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBGNSkgbAe9IrGgrp9Rkd1TJnXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:89:42:23:a5:9f:5f:ee:c4:0a:32:6a:f8:70:5e:55:ac:cb:
35:59:92:4c:f6:8e:c8:c6:1e:f4:79:6a:f7:c1:2d:62:78:f1:
96:71:cf:7e:64:aa:99:85:2f:c6:0c:29:50:e0:54:11:f7:0e:
25:70:4e:c7:f4:78:48:65:52:70:60:de:47:5b:ec:1c:70:6a:
2a:6c:0d:6b:05:ad:e7:b0:7f:2a:2a:b9:67:50:55:56:d3:5c:
ba:32:49:a8:83:77:b8:2c:3c:39:57:8f:cd:bb:be:57:7e:29:
36:f0:ee:86:12:c3:c0:4f:af:67:82:50:49:40:14:d2:08:04:
dc:50:1f:36:62:66:86:b0:8d:72:f9:d9:fb:66:0d:8a:bc:d9:
dc:47:d2:0c:94:37:33:c4:07:7d:a5:a4:32:59:68:76:97:64:
ec:7e:ea:71:ed:a8:f9:45:40:69:6e:29:b6:9d:51:41:23:f6:
28:1e:18:9a:d6:91:30:c1:6a:15:48:d4:33:a8:67:ba:82:02:
66:4a:3f:61:f8:14:96:25:a8:cd:a5:63:06:d0:6b:9c:19:98:
00:08:82:1b:69:4a:5a:47:3f:08:60:a7:08:97:65:b0:4d:ba:
d8:7a:43:87:54:23:6d:dd:d9:09:0f:c1:35:a3:68:93:e3:84:
18:ef:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:41 2025 by rpki-client