Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTMZEiaU1sdQHaP9kRXZwJ2tdVA.roa
File: hTMZEiaU1sdQHaP9kRXZwJ2tdVA.roa (raw, json)
Hash identifier: zDSLUr8ECi9JpbqO5ECUc8up4m6QhsCBgL4Dfs34zLY=
Subject key identifier: 85:33:19:12:26:94:D6:C7:50:1D:A3:FD:91:15:D9:C0:9D:AD:75:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880F0386FD35B99A19E61E3E05212ACF45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTMZEiaU1sdQHaP9kRXZwJ2tdVA.roa
Signing time: Fri 12 May 2023 08:11:09 +0000
ROA not before: Fri 12 May 2023 08:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:03:86:fd:35:b9:9a:19:e6:1e:3e:05:21:2a:cf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 08:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=853319122694d6c7501da3fd9115d9c09dad7550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:bd:83:bd:7c:3f:28:01:ee:b5:98:9d:d1:
ac:5b:19:77:a2:d8:43:17:a2:62:bb:39:33:a0:d3:
e6:09:b9:30:b5:e0:0e:86:c2:7c:70:b7:42:9c:2d:
5b:8d:83:85:82:ab:73:fb:e7:62:70:b8:62:c3:3b:
bc:87:31:47:f0:f9:ea:bf:12:a6:93:78:05:65:61:
bc:c3:0d:af:aa:86:69:c2:c5:b6:53:e5:b2:c3:61:
44:42:32:ae:17:3b:73:44:ef:66:ea:9b:7d:f2:78:
30:56:d8:e0:5f:df:12:88:30:8f:b3:9e:91:24:49:
6a:64:6e:81:d4:fd:ba:cf:9f:3e:42:d1:33:2d:34:
8e:8b:f8:39:bf:25:db:9b:39:81:6c:5a:67:b0:cd:
ac:a2:fc:b9:7d:67:ad:d1:17:dd:7e:d0:df:d1:7d:
fd:2e:ff:5c:71:73:85:3d:9f:e5:fa:cc:f5:7b:f8:
ca:cb:da:20:19:6d:cd:6a:eb:46:06:ff:00:2b:50:
65:f9:78:14:84:44:9e:e2:4e:77:0f:ae:5f:26:6d:
52:9c:74:66:86:4a:ab:e2:f6:2e:d3:e8:76:f9:98:
95:5b:20:dc:44:24:58:cc:bb:9b:e5:51:b3:aa:6f:
44:79:47:0d:fd:01:42:97:49:42:0f:15:35:bf:b0:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:19:12:26:94:D6:C7:50:1D:A3:FD:91:15:D9:C0:9D:AD:75:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTMZEiaU1sdQHaP9kRXZwJ2tdVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:25:81:51:3d:4d:ef:ae:24:81:f9:4a:37:31:6e:42:30:e0:
59:5f:58:4a:d7:6f:56:b8:a6:4a:18:06:dd:7f:dd:80:0f:90:
62:63:33:8b:a8:da:2c:df:62:d5:ce:42:d1:b5:b8:8e:30:6e:
70:c4:92:58:09:e8:d5:05:64:35:29:f8:5b:47:91:f4:f9:32:
83:41:d5:cf:e4:4d:1b:4f:76:61:38:4e:bb:5c:37:ac:df:47:
69:d6:9b:a3:7d:bf:65:5d:54:44:e2:dd:30:08:f2:66:c3:e7:
ac:f6:dc:76:f1:ae:df:e2:e2:36:a3:44:31:0a:e0:ac:3e:7f:
db:0a:91:8d:c9:c1:f5:e0:f5:13:60:34:cf:c3:45:ac:39:34:
4f:06:d3:1c:ef:e3:e3:41:00:2d:6c:00:4d:1e:7a:74:49:de:
7b:7d:9a:7a:aa:78:b1:82:51:dd:df:67:bd:39:c7:b6:b3:14:
6d:49:0f:8e:df:04:22:71:b5:d5:e0:cc:20:72:0c:7f:5a:1e:
db:73:2c:40:89:da:31:e8:54:ff:9c:f8:67:ec:e6:88:b2:06:
37:8b:8a:07:9c:ec:53:50:45:75:c2:c6:28:8d:8f:cc:bd:e0:
78:a9:37:d1:eb:73:88:d9:d3:0a:40:bd:c6:04:b4:23:a0:55:
1a:e1:ef:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:13:29 2025 by rpki-client