Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCQQ2lnkYMCnYIpuSAGfnbyEgyo.roa
File: hCQQ2lnkYMCnYIpuSAGfnbyEgyo.roa (raw, json)
Hash identifier: zrPHvObfs4E2nDHthKaLfkYb22g9G2AdEWvi+pgVm5k=
Subject key identifier: 84:24:10:DA:59:E4:60:C0:A7:60:8A:6E:48:01:9F:9D:BC:84:83:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872888D6F484FB94B98093DF93367E682E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCQQ2lnkYMCnYIpuSAGfnbyEgyo.roa
Signing time: Tue 28 Mar 2023 14:04:29 +0000
ROA not before: Tue 28 Mar 2023 14:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:2888:b8f2/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:88:d6:f4:84:fb:94:b9:80:93:df:93:36:7e:68:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 14:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=842410da59e460c0a7608a6e48019f9dbc84832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:cf:07:77:9c:74:7d:d6:8c:f2:62:c9:84:
40:36:bb:7d:af:3f:26:44:40:5b:10:35:c7:c7:ba:
f1:5d:73:e7:02:1a:81:86:b8:a9:3a:63:56:60:0c:
92:5a:4c:d4:aa:57:30:c7:f0:07:fa:aa:21:e8:6b:
f6:5c:7b:8b:26:e2:a6:15:61:a2:89:be:b7:e9:14:
c4:83:16:d0:6f:23:09:a3:fe:27:8f:07:62:b3:04:
56:21:b9:33:04:cf:a3:22:8a:b6:c8:74:d0:be:28:
3a:72:1c:fe:ed:70:70:51:ba:91:48:6b:db:1e:64:
07:ef:f5:b8:b5:f8:07:f1:b4:81:47:17:db:ec:95:
3e:0c:c3:2a:18:a7:32:37:54:be:3c:51:0d:2d:8c:
d1:bc:07:21:76:c5:f6:59:ff:62:9a:e4:33:d1:e9:
b3:bf:bf:a1:2e:d9:fb:7c:0b:45:8e:13:45:a1:01:
bd:0a:71:24:85:a9:3d:aa:f9:af:d9:ff:b9:5e:67:
78:0c:74:94:a5:dd:bd:00:4e:f1:2d:aa:bd:bc:30:
3f:08:0e:49:1d:71:38:55:e4:7c:88:2d:18:45:7e:
ee:e5:dc:25:41:6f:eb:9a:ab:31:56:07:d1:69:89:
a8:82:50:ee:b7:c6:c8:2b:ce:a0:42:a6:3a:ed:10:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:10:DA:59:E4:60:C0:A7:60:8A:6E:48:01:9F:9D:BC:84:83:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCQQ2lnkYMCnYIpuSAGfnbyEgyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:fa:5a:60:d0:41:30:d4:41:8d:d2:29:f5:01:2b:f0:ff:3b:
64:28:4e:56:30:fd:b5:24:7c:50:ed:1c:be:31:ab:23:49:f7:
8c:7b:2c:8e:5e:db:ce:02:65:4c:ff:86:e5:1b:f7:a2:40:06:
24:f1:b0:1e:90:61:40:d7:b2:8a:96:4d:a0:c9:93:ea:73:f0:
47:ac:7f:58:2f:06:58:4d:3b:89:94:ec:46:a7:78:8a:b7:47:
07:bd:f4:66:19:e2:bb:79:04:57:5a:6f:88:86:35:9d:35:d5:
b1:19:60:6e:ca:6b:59:8d:ac:69:d0:18:ff:74:6a:73:62:f7:
3c:6d:e7:52:84:c5:41:98:2d:61:27:bc:34:c5:54:0e:6b:27:
87:c9:d4:b1:cf:81:82:12:fd:56:45:b4:f6:8d:f0:0f:f1:0e:
05:7b:80:da:85:23:d6:7d:e2:90:4e:50:c2:6f:30:d1:2c:7c:
a8:82:69:d1:f7:c0:a6:e4:c5:1d:fb:0f:c4:60:55:fc:59:6d:
3b:04:32:89:55:23:4c:5a:b0:93:04:0b:8d:48:3f:0d:db:eb:
da:74:ef:db:97:6e:89:b8:4f:8b:08:e1:81:26:1c:7b:75:3b:
fe:df:73:fc:f4:63:2c:f6:51:ca:f6:4f:93:af:13:a2:28:5d:
34:80:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:39:53 2025 by rpki-client