Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCjtgaEFebo448yhBK_SCCduUjY.roa
File: hCjtgaEFebo448yhBK_SCCduUjY.roa (raw, json)
Hash identifier: IlOtWGSS9EWze3/rxwSB9BjSxTTWuaEEBfAwM40SnG8=
Subject key identifier: 84:28:ED:81:A1:05:79:BA:38:E3:CC:A1:04:AF:D2:08:27:6E:52:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BE94707
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCjtgaEFebo448yhBK_SCCduUjY.roa
Signing time: Sat 11 Jun 2022 19:09:04 +0000
ROA not before: Sat 11 Jun 2022 19:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347321095 (0x8be94707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 19:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8428ed81a10579ba38e3cca104afd208276e5236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:5b:88:8e:af:fd:23:dc:dc:70:c8:29:bb:
a6:a5:25:e3:d4:81:9d:b1:4a:41:df:ff:f9:de:26:
86:66:b3:84:d5:92:58:e3:84:4d:bb:9f:8f:16:a9:
54:31:7f:a2:e9:95:61:1b:39:54:78:16:85:bc:47:
04:fc:2d:e4:86:26:78:12:71:83:70:32:60:79:ed:
fe:b9:00:09:86:bc:0f:7f:dc:df:ef:4c:70:97:b1:
78:e9:1f:00:c6:2b:28:c5:f5:c2:d5:3e:c5:54:57:
94:47:f7:41:05:06:f7:e5:79:13:6d:ae:0f:0d:bb:
46:54:68:3e:37:01:c9:59:67:b2:27:fc:2f:a1:33:
dd:0f:7a:7c:85:16:34:ab:54:b8:7f:2b:0f:89:a6:
e7:eb:8f:37:4b:a0:d9:ae:5d:b9:f2:cb:7d:d4:f3:
03:db:1d:76:b1:ff:a3:d1:7b:a0:9c:7e:5c:24:c1:
65:b2:b7:83:8d:7c:83:1a:73:b9:8f:bc:b5:da:82:
21:e3:4c:a4:3c:61:74:f2:55:e8:9a:03:80:64:dc:
73:bc:de:63:c5:fd:a1:6b:b5:1c:c3:0e:46:d8:d0:
9b:2e:e4:ff:81:c6:05:06:10:8e:e4:a8:a9:bd:fb:
7f:50:8e:eb:b0:9a:0c:5c:96:50:ec:00:9e:35:13:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:ED:81:A1:05:79:BA:38:E3:CC:A1:04:AF:D2:08:27:6E:52:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCjtgaEFebo448yhBK_SCCduUjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:04:90:d5:af:2e:aa:50:77:12:03:93:16:91:6a:b6:f3:54:
bf:5b:0b:12:8f:29:00:92:2c:a2:4e:dc:e4:0b:3f:92:56:b9:
dc:9c:10:d9:4a:cc:63:b2:f8:24:2b:a7:7c:d8:a3:eb:83:5a:
36:67:d1:ac:dd:0e:3d:00:61:41:74:9f:0c:7c:58:91:a4:45:
38:5e:7c:94:24:e1:1d:71:ab:1a:7d:86:3c:93:ee:44:61:dc:
98:54:41:a2:77:81:fb:f7:2f:7e:7f:d3:45:54:15:4a:58:51:
c9:66:7a:8b:ac:7f:1b:8b:45:32:4c:72:c4:3a:00:8a:ad:0f:
48:af:4b:1e:53:9b:e8:51:6e:a2:89:de:64:4b:60:c9:c3:95:
72:56:01:f1:18:80:26:37:2e:ec:60:ec:73:87:40:b5:f5:58:
28:91:f6:f4:24:2c:5e:b9:6f:c7:ec:48:0c:ca:a7:ba:9b:de:
a7:56:ff:b9:02:44:da:04:20:a3:f7:de:0c:71:16:7c:ff:4d:
a8:40:a7:76:54:c2:45:75:46:01:8b:18:bd:96:2b:c6:14:b7:
56:ff:4b:c3:53:63:19:d5:3b:35:8a:1b:bc:ee:99:8f:18:46:
04:56:a4:7b:f4:00:7a:0e:82:07:ef:db:de:d8:69:a8:32:0f:
b8:69:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:26:11 2025 by rpki-client