Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTv_YkvksiXXWZWp7zS67YO9ZWg.roa
File: hTv_YkvksiXXWZWp7zS67YO9ZWg.roa (raw, json)
Hash identifier: iZjiningJBSZ9GmqirhAFGM/5oIckQHwyvm9QQdKS2g=
Subject key identifier: 85:3B:FF:62:4B:E4:B2:25:D7:59:95:A9:EF:34:BA:ED:83:BD:65:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71D9B0B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTv_YkvksiXXWZWp7zS67YO9ZWg.roa
Signing time: Sat 12 Mar 2022 07:09:26 +0000
ROA not before: Sat 12 Mar 2022 07:09:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910091952 (0x71d9b0b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 07:09:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853bff624be4b225d75995a9ef34baed83bd6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:ff:89:ed:81:09:fe:c8:d7:67:a2:e8:ad:
df:28:fe:5a:3b:4e:16:0c:fe:5b:cd:55:cc:d3:89:
43:35:cd:0b:7c:15:6f:9f:30:8b:83:01:58:79:34:
fa:d5:67:dc:5b:26:e1:37:5c:69:64:57:d3:53:0c:
21:4d:7f:2f:92:c2:9e:7b:cd:8a:c6:3b:9c:09:40:
a3:a7:e3:ab:de:cc:fd:a8:74:3d:9e:37:ae:59:ea:
35:a0:a0:24:02:9a:87:2b:81:54:31:1e:71:78:06:
ad:33:0f:3f:b2:76:df:24:c3:b3:93:40:50:79:b3:
be:2d:4a:e5:2e:e6:45:3d:e8:23:7f:d5:78:7d:5f:
de:e1:6e:21:31:98:fd:84:9f:8f:e9:12:df:6e:5a:
0a:7c:3a:eb:0d:2b:9a:6b:13:27:78:81:25:1f:98:
8f:3f:e5:0b:0f:67:d8:31:f3:e1:6a:46:fd:60:29:
cb:c4:2f:b6:1c:99:d8:04:d4:83:47:14:fd:57:17:
f0:c8:1b:f3:f3:c2:36:a1:78:af:01:d4:4a:f1:71:
05:de:c1:ea:04:23:f5:3c:7e:18:53:a0:9e:f1:7c:
5d:bc:ec:27:41:c0:26:29:3a:1f:50:a2:e7:0b:02:
6e:b0:07:b1:78:16:01:06:07:0e:ca:c7:e0:b3:31:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:FF:62:4B:E4:B2:25:D7:59:95:A9:EF:34:BA:ED:83:BD:65:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hTv_YkvksiXXWZWp7zS67YO9ZWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:10:6a:d2:f9:16:b0:03:2d:6d:78:4c:41:40:ce:1f:28:f7:
b3:82:6f:68:38:f3:79:c0:0e:53:97:3e:fd:c7:7e:94:29:a6:
8a:42:c9:68:fe:83:3a:5c:41:e7:89:f0:5d:5a:3a:b8:a8:f0:
ce:91:67:e9:66:0c:b2:00:77:6b:19:04:d4:f3:d2:b2:ae:12:
ce:41:c3:1a:0f:bf:55:88:5f:c2:4e:f5:b4:43:45:ee:a7:cf:
a8:87:8b:c9:d4:57:bb:0b:9a:32:d5:e0:e8:d4:6f:c6:03:3e:
f9:01:bb:9a:ec:94:70:61:5a:bc:83:3e:d0:b1:a5:20:60:20:
bd:58:a7:66:5d:27:62:5e:8a:13:ee:d7:46:7c:c9:4f:07:6e:
18:64:67:ec:94:e3:f4:fd:c2:32:30:04:2b:d2:46:55:25:53:
4c:76:fe:c7:cb:71:0a:a0:fb:8b:f7:4e:0c:47:18:70:c8:8a:
e2:4a:ab:86:55:f0:d2:d7:ec:ba:9d:94:8e:fe:85:b2:73:42:
0f:9b:1d:cb:0e:ed:16:c5:ae:c6:cd:b8:44:0d:03:6b:af:46:
88:14:34:1c:08:35:0f:ad:7f:9a:e9:b2:5c:aa:46:4e:bf:59:
1f:cf:a5:17:31:69:50:65:73:52:ac:77:cc:14:fe:d5:de:66:
ec:27:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:42:43 2025 by rpki-client