Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hF9qSAvaSfByQYsfkvlsz-wiKKk.roa
File: hF9qSAvaSfByQYsfkvlsz-wiKKk.roa (raw, json)
Hash identifier: FtT8VvxQNbJHpSYRukTXk2TJ0HpUAfBdhMm2FxpL3E4=
Subject key identifier: 84:5F:6A:48:0B:DA:49:F0:72:41:8B:1F:92:F9:6C:CF:EC:22:28:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018620692EF60C93060486FE943CA7BFF1DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hF9qSAvaSfByQYsfkvlsz-wiKKk.roa
Signing time: Sun 05 Feb 2023 07:10:09 +0000
ROA not before: Sun 05 Feb 2023 07:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:20:69:2e:f6:0c:93:06:04:86:fe:94:3c:a7:bf:f1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 07:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=845f6a480bda49f072418b1f92f96ccfec2228a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:69:c9:fb:a7:ff:3c:17:bf:b7:f4:fd:c0:
0d:aa:aa:5f:8f:79:9f:28:0b:fc:83:f7:3b:ca:63:
b1:ae:cb:30:ab:5c:8b:1d:b4:46:81:14:dd:ee:b6:
e5:36:83:33:1e:32:16:f7:fe:ff:43:0a:1f:65:2b:
49:d3:50:40:ad:a7:4a:c0:9c:da:18:40:35:b5:1b:
00:95:0f:9b:6f:10:12:19:4e:62:e6:85:a9:7e:6a:
cf:85:f0:83:a5:bd:c2:43:51:10:6c:45:86:ee:55:
b5:7b:c0:25:52:93:a1:b0:bc:14:c8:f8:0c:6c:ac:
28:c7:53:8a:14:8b:67:69:da:1e:d4:58:c9:60:f7:
63:7c:cd:43:11:99:8c:48:54:95:0f:b8:eb:05:14:
0e:6c:8e:f9:6f:6c:f4:d7:30:4d:0b:22:9f:d8:0d:
29:74:af:a7:ac:aa:4d:f5:81:0f:00:8a:8c:4d:07:
85:f8:24:72:7e:38:41:e3:dd:ad:1e:dc:fb:2c:e8:
a3:78:7e:a8:df:c1:f6:ef:65:4a:ba:ce:9c:e5:b7:
af:31:fc:a3:07:3c:9a:10:7a:84:88:88:57:34:ce:
47:0b:df:6b:45:23:a4:c6:9c:54:20:a3:56:4b:bb:
b4:e9:1f:1a:7a:12:18:fb:b3:62:08:7f:f7:54:4c:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5F:6A:48:0B:DA:49:F0:72:41:8B:1F:92:F9:6C:CF:EC:22:28:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hF9qSAvaSfByQYsfkvlsz-wiKKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:35:c3:b2:a4:36:ae:28:68:21:a8:1d:26:ea:3d:32:72:b4:
43:2d:84:22:e7:4f:77:a3:aa:09:ca:d7:18:83:95:e2:45:db:
ed:1c:96:2c:4b:a0:14:e3:11:63:89:70:1b:e0:2f:92:6d:ad:
f5:89:86:42:a6:03:22:1a:d4:0c:96:8c:3e:92:e8:40:28:1f:
e5:76:be:51:f7:d0:1e:5e:f9:15:f1:7c:97:df:b6:30:4e:8a:
ba:47:64:85:db:24:f2:84:93:bd:fe:a6:a4:80:c4:65:42:ca:
78:46:fb:06:ef:49:48:4d:3f:37:61:85:3d:a3:5e:f5:38:de:
7c:bc:2a:f8:7f:69:68:cb:ad:5a:d7:3a:ef:17:89:55:77:2e:
c0:1d:81:dc:33:3a:83:b3:16:6f:13:d2:6f:ff:c3:6a:e6:4f:
99:07:61:3e:c7:dd:48:07:21:15:13:38:3a:8b:63:32:e0:69:
20:01:de:ba:53:2f:10:ec:19:ab:d3:e1:07:89:d4:d1:e7:59:
ad:e9:b9:92:51:d3:f7:d5:58:b3:7a:fb:38:12:4d:dd:95:7a:
4f:08:e3:a9:18:4e:a6:b9:b0:57:45:54:0e:b8:ce:5c:0c:67:
95:07:6a:80:b5:f0:fd:f4:3b:b1:e6:5b:97:67:85:1c:c0:2d:
e5:62:94:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:37 2025 by rpki-client