Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPIZ2oaO3ae8V4gr08ze2sQdVs4.roa
File: hPIZ2oaO3ae8V4gr08ze2sQdVs4.roa (raw, json)
Hash identifier: wHetez2YsP8nVVEsRn/yfnRJlJa6ygikwXS1LvtBgi4=
Subject key identifier: 84:F2:19:DA:86:8E:DD:A7:BC:57:88:2B:D3:CC:DE:DA:C4:1D:56:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878DDE8F648B6179E758B256CAF7268DE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPIZ2oaO3ae8V4gr08ze2sQdVs4.roa
Signing time: Mon 17 Apr 2023 06:19:45 +0000
ROA not before: Mon 17 Apr 2023 06:19:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8d:de:8f:64:8b:61:79:e7:58:b2:56:ca:f7:26:8d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 06:19:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f219da868edda7bc57882bd3ccdedac41d56ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:f7:7d:74:ea:59:3b:11:93:18:09:d3:ce:
46:21:43:42:e6:e3:57:da:d7:9f:81:a6:8a:1c:4e:
df:43:6c:df:22:37:d2:49:2c:51:43:b7:65:30:7e:
72:f8:fd:2c:8c:7e:ac:8d:25:bf:87:aa:49:32:1a:
fd:84:64:73:19:da:9e:e6:a6:eb:d9:7c:54:e5:ca:
13:94:a8:0f:40:80:f4:dc:91:cc:7a:6d:7e:69:cb:
bd:af:11:58:a0:bd:f6:fd:10:31:5f:42:93:19:7e:
9d:38:75:0b:07:88:05:a2:59:c1:91:1a:b0:af:3f:
c2:01:ab:5e:7e:f7:95:dd:15:6e:9f:c6:d7:2c:94:
de:c7:91:64:8e:c0:48:ad:2a:1d:6f:f4:c6:22:71:
33:c9:2b:2f:d2:e6:40:8d:23:bb:dd:1c:87:da:42:
2e:dc:9d:5f:17:35:d9:a4:18:8b:e8:1e:a9:47:90:
ad:c4:07:6e:43:2a:80:10:06:ab:99:e8:67:89:a4:
df:33:0c:70:a7:a4:25:a9:d8:fc:77:27:d2:f4:63:
76:9a:68:3c:af:4b:31:46:1e:af:03:9d:97:01:8b:
01:52:62:ee:9c:8c:19:9b:6d:dc:7b:ca:b0:88:5b:
7b:6e:3a:60:0a:43:78:71:b0:6f:4c:78:73:68:5f:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:19:DA:86:8E:DD:A7:BC:57:88:2B:D3:CC:DE:DA:C4:1D:56:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPIZ2oaO3ae8V4gr08ze2sQdVs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:96:7c:a0:9e:f6:a1:16:68:97:e1:11:33:44:56:3d:77:15:
09:69:07:50:8c:26:1e:86:80:61:41:2e:79:98:39:5a:ae:4b:
dd:8d:5a:bf:75:96:56:37:b6:30:42:e1:83:b0:54:7f:2c:6e:
23:fe:63:e8:c5:26:db:1c:bc:24:05:c5:70:ae:0c:64:5c:9d:
b0:c7:7f:37:1f:a7:13:31:1c:57:4a:54:5e:f2:e8:d8:5f:5a:
a2:6c:1e:5f:7b:c9:03:1e:34:1b:84:32:60:1a:b5:bb:e3:39:
a8:83:a5:49:c9:d3:e2:ab:47:07:c2:3e:63:ed:0f:03:31:68:
9a:b7:88:03:54:d9:46:65:ec:a0:24:a1:b0:71:d1:b1:b6:f9:
94:c5:7e:a0:c2:71:88:38:47:9f:2d:14:81:bb:2f:83:23:70:
1c:cc:29:97:b7:72:c8:16:a8:43:54:aa:c9:5f:2c:df:b2:a3:
ed:49:69:04:63:ec:24:a4:27:7d:50:83:27:ab:ac:b7:88:41:
d7:78:1a:ee:98:f3:68:ca:58:bd:08:a5:6d:d5:d4:c4:3b:f7:
80:26:5e:3c:9d:8b:2e:5f:f1:43:08:28:c5:91:85:9f:eb:fe:
07:29:fe:bd:52:49:b6:3f:79:a7:83:20:99:2e:da:3f:88:12:
fe:63:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:46:29 2025 by rpki-client