Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK2cVC26UaYpt7lhC9jSl7yOkJ0.roa
File: hK2cVC26UaYpt7lhC9jSl7yOkJ0.roa (raw, json)
Hash identifier: 2JD8ouM+z6pghSDRAU/2A3Pju0nlRG7BISnyrajHlZo=
Subject key identifier: 84:AD:9C:54:2D:BA:51:A6:29:B7:B9:61:0B:D8:D2:97:BC:8E:90:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8321064C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK2cVC26UaYpt7lhC9jSl7yOkJ0.roa
Signing time: Wed 11 May 2022 17:13:02 +0000
ROA not before: Wed 11 May 2022 17:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2199979596 (0x8321064c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 17:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84ad9c542dba51a629b7b9610bd8d297bc8e909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:a1:0e:c5:79:f7:67:14:d6:83:49:10:14:
28:2e:7a:a8:7e:4e:1c:e7:96:e9:43:64:bd:5a:49:
88:15:0e:6c:56:8f:16:4f:c3:4f:5c:16:3f:80:02:
fb:5e:7a:b9:af:43:71:ff:6a:fb:dc:b9:a9:d0:d8:
60:e0:f7:ed:a9:3e:b7:92:43:55:b0:5f:08:54:11:
ab:14:45:36:35:af:97:12:89:7b:19:6b:ce:57:79:
53:14:bc:d6:a1:c6:76:1f:1b:41:49:fc:87:b5:6e:
d1:21:7c:d8:77:91:4f:a7:2f:34:de:cd:80:a9:9d:
d0:41:ec:54:73:7b:28:99:e8:fc:5f:9b:45:72:97:
8b:3f:86:2a:98:89:a8:c8:e7:5c:35:ab:7d:fe:a7:
dd:8d:4e:99:28:f5:67:af:f9:0d:5d:eb:b3:8d:23:
4c:e1:36:a5:43:60:27:85:09:4b:76:ab:a0:bd:9c:
5c:2f:12:56:db:d4:f0:23:40:91:04:d7:96:82:e9:
c4:d4:79:5e:08:99:90:50:14:7a:1c:50:96:ce:78:
cc:55:6b:65:76:d9:68:7d:b2:3f:82:d2:41:d7:a2:
a8:fd:ad:cb:18:e7:41:85:bd:4d:2c:20:3f:1e:be:
93:e4:e2:78:02:68:32:b4:5f:75:28:25:39:b3:3f:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AD:9C:54:2D:BA:51:A6:29:B7:B9:61:0B:D8:D2:97:BC:8E:90:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hK2cVC26UaYpt7lhC9jSl7yOkJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:9d:25:2c:20:3b:08:88:ee:a8:4d:4c:00:62:c6:09:20:29:
8a:cb:18:30:b2:1d:33:e3:9c:f5:2f:8d:68:a8:cb:42:67:c0:
22:3d:c2:79:30:6b:8a:df:55:4b:28:64:18:44:37:01:a2:90:
a9:b7:fa:9f:de:18:95:d1:40:af:49:0c:fe:9c:32:a0:c2:e1:
b8:36:be:a5:de:ac:b2:73:de:7d:32:4a:bf:ec:87:fa:e6:53:
d5:ec:27:ec:aa:12:36:cd:c4:8e:69:00:1b:92:17:de:40:ba:
14:20:4b:f4:56:dc:22:f1:b7:d6:f6:f6:6e:2b:f9:1c:7e:a9:
ca:29:cf:ea:f7:57:5e:39:2e:87:28:0c:00:75:c8:eb:7c:ec:
08:c2:10:ec:18:7e:dc:b7:78:a0:4d:17:d0:f9:1d:7c:60:b5:
ac:ae:50:71:2e:8c:52:38:5a:94:43:88:1e:ec:0b:ad:db:97:
c8:0b:4b:9d:f1:da:76:41:b6:61:24:f9:ef:59:3c:72:a3:69:
9c:43:ad:4a:90:80:5e:10:b0:f9:52:39:b9:ee:98:6b:2e:46:
b6:22:10:2d:b0:55:19:62:5e:0e:db:40:ac:e9:bc:3e:a9:b6:
17:47:22:45:cb:8e:18:64:bc:62:36:d2:53:d3:18:ab:49:08:
07:ad:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:27 2025 by rpki-client