Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hVV-mHlhy6pM9EIjo7-3E1CfHn0.roa
File: hVV-mHlhy6pM9EIjo7-3E1CfHn0.roa (raw, json)
Hash identifier: VJ1/+OzYFZHpX+Hd/YjxOehUOMCQqQjtUyOzK1aoSrU=
Subject key identifier: 85:55:7E:98:79:61:CB:AA:4C:F4:42:23:A3:BF:B7:13:50:9F:1E:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189710A988A5830BEED114B064CF04FA7B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hVV-mHlhy6pM9EIjo7-3E1CfHn0.roa
Signing time: Thu 20 Jul 2023 02:04:27 +0000
ROA not before: Thu 20 Jul 2023 02:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:710a:5ccc/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:0a:98:8a:58:30:be:ed:11:4b:06:4c:f0:4f:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 02:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85557e987961cbaa4cf44223a3bfb713509f1e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:50:af:40:59:ff:bb:20:b3:ab:51:6f:63:
26:e0:92:97:b0:49:47:f1:ac:38:54:69:17:70:bd:
a2:65:0d:03:53:62:39:02:64:a4:07:0b:ce:d8:9f:
33:ee:95:d1:06:f8:78:65:f9:c6:a5:93:10:34:3f:
7c:6d:52:ea:ea:a4:7b:45:af:e3:82:8b:44:6f:a2:
3e:38:3f:0d:d9:ab:42:87:89:96:d6:a2:9e:e7:b9:
a5:19:bd:45:c4:f7:79:53:e7:21:4f:36:f2:34:2d:
25:ef:8c:7b:f0:dd:a1:eb:37:10:03:fe:35:fc:b4:
b0:ac:41:c8:8b:37:63:be:7f:e1:5f:a9:f7:65:ea:
1b:a3:4c:9c:82:d1:0b:c7:12:1a:89:25:9b:b2:e3:
02:cf:e6:b5:eb:e0:1a:eb:c8:ad:f6:b4:e3:6a:15:
14:ab:1e:bb:fb:04:36:4f:9d:4f:26:77:6c:03:fe:
44:7f:41:3d:97:31:b3:0d:d5:8c:21:cc:b4:43:2e:
6e:c1:95:da:fc:e7:c6:04:ea:17:2e:dd:e5:23:c1:
14:8f:8b:1d:60:da:b4:16:7e:f3:b0:7f:0c:48:8c:
26:c4:ab:6b:58:70:7a:4d:f2:35:95:ab:03:d5:d4:
d5:a5:78:b1:8b:b1:93:f3:ae:64:4b:8d:e6:ec:27:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:7E:98:79:61:CB:AA:4C:F4:42:23:A3:BF:B7:13:50:9F:1E:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hVV-mHlhy6pM9EIjo7-3E1CfHn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b7:77:cf:82:5f:61:3d:b6:dd:16:27:bf:e7:a6:ae:c1:e5:
7a:19:34:62:16:ff:37:69:d1:30:bb:d9:a4:43:6f:49:de:3a:
3f:31:89:0c:55:0b:e2:5f:af:01:32:eb:f5:a8:7c:7a:19:fb:
9c:a8:56:74:aa:94:77:30:57:d1:c2:ab:bc:8d:66:7a:fa:52:
c3:07:87:ce:88:31:93:8b:4a:25:8b:66:72:0e:71:7c:64:9a:
66:1f:df:11:7b:7e:ab:17:c9:2d:e6:a1:ba:68:a7:9c:f0:ca:
1f:ea:29:9c:d0:8c:d4:ea:e4:49:75:ae:45:17:c1:41:27:97:
79:aa:34:17:1f:93:d6:99:91:45:9f:e9:5b:cc:67:3e:42:82:
bd:7e:dc:e7:fc:30:6c:0a:ba:52:cf:89:0f:41:b5:96:ec:26:
86:9f:3d:dc:6a:e5:b3:21:43:99:0f:f2:25:64:82:4b:58:e6:
bc:68:77:7c:a5:b9:7e:d6:12:9a:6f:85:fe:d4:85:fd:d5:84:
08:fd:b9:a9:5e:6e:e4:cb:c5:80:dd:d0:b5:48:31:f2:c5:18:
99:42:49:88:c6:7d:84:92:a2:07:76:9a:0b:5b:1d:52:08:d2:
cc:64:fb:7e:4d:97:43:f3:a3:a3:ce:d8:6b:a8:32:98:14:b3:
53:18:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:17:31 2025 by rpki-client