Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hIc8HDLokji8vPZqcFbLLdPOxeo.roa
File: hIc8HDLokji8vPZqcFbLLdPOxeo.roa (raw, json)
Hash identifier: +xg7mV1lMo/yHoUe/spuXnQ0vW7LuPM0AKdFyabP5hg=
Subject key identifier: 84:87:3C:1C:32:E8:92:38:BC:BC:F6:6A:70:56:CB:2D:D3:CE:C5:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AAD004F1BC445802DF1E3F3EC3CCFCD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hIc8HDLokji8vPZqcFbLLdPOxeo.roa
Signing time: Mon 31 Jul 2023 07:18:26 +0000
ROA not before: Mon 31 Jul 2023 07:18:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:d0:04:f1:bc:44:58:02:df:1e:3f:3e:c3:cc:fc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 07:18:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84873c1c32e89238bcbcf66a7056cb2dd3cec5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:94:37:e1:32:00:65:3f:dc:c5:99:63:20:
ba:c1:5a:b1:09:9e:05:c8:25:95:81:fb:19:90:71:
c6:9d:3e:57:f7:6b:50:9e:62:74:14:2a:34:7c:99:
ea:40:e7:b0:25:43:cd:e5:f8:55:46:86:be:a9:7c:
86:1a:64:d8:0c:d0:e3:59:54:13:88:28:15:b2:58:
5b:8b:5a:2e:38:46:df:40:4e:12:a1:30:44:1e:15:
5c:a1:1c:d4:d0:b8:85:f5:75:f2:43:a0:e4:2c:e0:
b7:cd:2e:8b:3d:05:a5:e3:2a:d4:ed:77:89:0c:01:
3d:cc:e4:69:b9:fb:bf:fc:4b:f7:a8:28:d2:0a:a6:
80:3f:6d:8d:66:f9:77:04:f7:c1:56:1b:51:2a:be:
01:d8:be:34:08:ee:60:97:90:26:53:a0:19:4a:0c:
a7:fb:1b:76:9f:05:80:44:84:bc:08:cb:c3:af:65:
db:30:ac:db:3d:49:e0:38:f8:45:d7:c1:99:c0:56:
26:35:ba:ea:87:40:44:bf:25:dd:af:7b:49:95:1d:
56:7d:a4:7d:5a:43:e2:d1:e2:21:23:1a:8b:98:bd:
3b:0e:53:b1:f5:5f:3d:37:a8:1f:56:ea:a6:b0:c3:
d9:84:60:3e:e4:c4:02:c7:ed:1c:5b:22:dd:16:50:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:3C:1C:32:E8:92:38:BC:BC:F6:6A:70:56:CB:2D:D3:CE:C5:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hIc8HDLokji8vPZqcFbLLdPOxeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:33:fd:bb:b3:ec:5b:96:5d:95:ef:1e:00:5f:4f:04:26:fe:
05:4a:c3:f4:04:f0:c0:89:ac:4a:4d:d9:5d:ea:82:86:59:a0:
9a:53:f8:11:8a:7a:fd:89:e2:74:84:8d:58:87:6a:93:5b:04:
95:d7:b2:83:4e:6f:9b:c2:07:2d:a7:7d:4e:a6:8a:2d:b9:d0:
8d:82:87:9c:49:35:05:5f:fd:08:f7:46:b7:99:ff:4f:56:0f:
29:1b:00:88:7b:87:36:95:f0:5c:f0:e4:64:ad:9e:b4:a6:4f:
9c:67:99:fe:ce:1e:10:2f:f9:bd:fe:b3:8d:f4:53:2d:fb:fd:
e6:e5:20:97:69:c8:29:cd:7f:1f:c5:33:d9:f8:d4:7a:f9:fc:
c2:21:d6:0d:bd:58:e6:75:b5:c8:d3:0c:df:bb:4d:04:48:ee:
96:b6:56:44:f4:3f:69:12:0c:dc:19:ab:78:63:13:bf:5c:e1:
28:ec:09:fa:2b:4c:b2:b7:36:68:70:d4:08:bd:e1:bf:a8:62:
4d:4d:9a:c3:a0:d1:c5:1a:b1:f3:8f:0b:60:67:56:30:cf:bf:
4b:25:eb:7f:05:0b:13:ca:db:f2:84:66:70:bd:20:0c:5a:85:
e7:3b:16:e1:b3:ff:45:93:86:d2:85:52:64:00:64:3a:a7:e1:
88:83:39:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:22 2025 by rpki-client