Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK1jGuPy52FxbAcsNGrctOJZ9iI.roa
File: hK1jGuPy52FxbAcsNGrctOJZ9iI.roa (raw, json)
Hash identifier: wZ32vkodoogQfUB28xFKWORPz+ev5G6GEv37PgpmqQk=
Subject key identifier: 84:AD:63:1A:E3:F2:E7:61:71:6C:07:2C:34:6A:DC:B4:E2:59:F6:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CC7B2CA7A7AC182BEC8FE4733989D312
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK1jGuPy52FxbAcsNGrctOJZ9iI.roa
Signing time: Sun 18 Jun 2023 03:10:04 +0000
ROA not before: Sun 18 Jun 2023 03:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cc:7b:2c:a7:a7:ac:18:2b:ec:8f:e4:73:39:89:d3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 03:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84ad631ae3f2e761716c072c346adcb4e259f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:1b:ad:96:6c:0b:82:2e:99:0d:62:1f:d3:
a8:36:11:58:e7:15:9d:35:58:00:ae:ca:34:cc:ed:
7e:fb:d3:14:79:75:7d:55:b5:42:50:3f:b6:cb:60:
24:c4:85:ab:bd:71:ee:93:16:a9:03:dd:12:44:d9:
d3:04:55:46:b7:3e:82:29:70:05:7b:25:d5:ba:18:
19:9e:f1:c0:48:5b:58:38:c1:79:bb:d3:78:9e:61:
f2:c7:da:00:78:68:39:32:f2:56:5f:0c:51:4f:bd:
3d:2a:86:53:2c:7c:9a:dd:37:fe:aa:3a:34:cb:6a:
55:cc:8d:5a:94:a4:2a:03:11:d4:54:8d:88:6f:13:
ad:f1:6a:7e:4e:17:36:18:a9:f1:c5:a5:32:dc:95:
17:f9:5d:69:65:9c:d0:06:73:62:5b:88:fc:2d:73:
bb:56:e8:5d:96:07:31:2a:7f:62:e4:29:d1:d8:9c:
de:92:77:67:cc:0b:eb:6d:29:2f:4f:68:b7:99:47:
0f:15:df:e9:4e:57:f0:8a:3d:cb:6f:1d:6f:af:58:
36:62:98:10:a9:73:e0:84:3f:67:4c:75:f1:7d:bf:
1c:27:8f:7e:c2:13:25:e5:f7:d5:5e:59:79:59:3b:
23:fa:49:19:b4:00:41:47:59:21:66:45:00:23:d7:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:63:1A:E3:F2:E7:61:71:6C:07:2C:34:6A:DC:B4:E2:59:F6:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK1jGuPy52FxbAcsNGrctOJZ9iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:59:3d:ed:12:7e:aa:6e:35:68:e8:f9:96:2a:d5:e8:83:42:
5b:7a:ab:1d:8b:35:d8:71:44:6e:67:cc:6e:d6:91:2a:6c:f2:
ff:79:bd:59:dc:3b:34:a4:1e:4c:ce:7a:c2:64:b0:9f:09:1d:
d2:e3:46:35:48:84:e1:db:58:a7:0c:3e:11:2b:d2:36:89:9b:
3d:20:91:11:75:f4:84:39:f5:6e:52:57:4c:77:10:07:31:95:
76:7d:6d:d2:82:5b:18:8b:56:40:d8:91:c8:d0:1e:e6:49:11:
52:3a:3e:49:76:d9:a0:ca:2e:ba:f2:4e:1e:fa:2a:30:5f:9a:
68:88:52:6a:5f:7f:4a:3f:c7:ae:10:2b:b1:97:19:d2:7c:ac:
38:84:6a:a9:d0:c9:04:7b:d3:57:00:e7:79:67:0f:04:c1:e4:
db:0a:e8:c5:a8:d0:44:ef:92:8d:80:af:34:be:f5:b6:54:46:
49:fa:dd:6d:19:08:20:0e:70:79:63:31:f5:d2:51:cc:f6:69:
da:ff:33:93:e3:54:1b:4e:ce:3a:42:07:a7:9b:a0:04:98:90:
25:80:81:42:26:43:1e:61:8e:0e:6c:5c:74:20:28:72:58:9b:
5d:13:62:10:31:fa:8a:d2:25:bd:ce:6b:7e:79:6e:7a:6b:a3:
55:f2:6e:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjMeyynp6wYK+yP5HM5idMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE4MDMxMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGFkNjMxYWUzZjJlNzYxNzE2YzA3MmMzNDZhZGNiNGUyNTlmNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUcbrZZsC4IumQ1iH9OoNhFY5xWd
NVgArso0zO1++9MUeXV9VbVCUD+2y2AkxIWrvXHukxapA90SRNnTBFVGtz6CKXAF
eyXVuhgZnvHASFtYOMF5u9N4nmHyx9oAeGg5MvJWXwxRT709KoZTLHya3Tf+qjo0
y2pVzI1alKQqAxHUVI2IbxOt8Wp+Thc2GKnxxaUy3JUX+V1pZZzQBnNiW4j8LXO7
VuhdlgcxKn9i5CnR2JzekndnzAvrbSkvT2i3mUcPFd/pTlfwij3Lbx1vr1g2YpgQ
qXPghD9nTHXxfb8cJ49+whMl5ffVXll5WTsj+kkZtABBR1khZkUAI9eqoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIStYxrj8udhcWwHLDRq3LTiWfYiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaEsxakd1UHk1MkZ4YkFjc05HcmN0T0paOWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB9ZPe0SfqpuNWjo+ZYq
1eiDQlt6qx2LNdhxRG5nzG7WkSps8v95vVncOzSkHkzOesJksJ8JHdLjRjVIhOHb
WKcMPhEr0jaJmz0gkRF19IQ59W5SV0x3EAcxlXZ9bdKCWxiLVkDYkcjQHuZJEVI6
Pkl22aDKLrryTh76KjBfmmiIUmpff0o/x64QK7GXGdJ8rDiEaqnQyQR701cA53ln
DwTB5NsK6MWo0ETvko2ArzS+9bZURkn63W0ZCCAOcHljMfXSUcz2adr/M5PjVBtO
zjpCB6eboASYkCWAgUImQx5hjg5sXHQgKHJYm10TYhAx+orSJb3Oa355bnpro1Xy
bi8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:06 2025 by rpki-client