Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hW7yY0opERj3TM6LSADcXRNzJvY.roa
File: hW7yY0opERj3TM6LSADcXRNzJvY.roa (raw, json)
Hash identifier: V3voMnxvVXIi9PCHMGQgJo56ZRvJJEgg7mEU7p9roKs=
Subject key identifier: 85:6E:F2:63:4A:29:11:18:F7:4C:CE:8B:48:00:DC:5D:13:73:26:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 834A16F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hW7yY0opERj3TM6LSADcXRNzJvY.roa
Signing time: Thu 12 May 2022 06:13:02 +0000
ROA not before: Thu 12 May 2022 06:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202670841 (0x834a16f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 06:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=856ef2634a291118f74cce8b4800dc5d137326f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:62:f4:28:55:15:c6:4b:9f:4c:94:f5:44:
a6:6d:da:aa:1c:77:5d:94:49:20:67:dd:cd:16:40:
a9:1f:a5:93:42:80:e4:b6:37:c8:59:31:e5:fb:b8:
6f:52:de:8b:8a:06:60:8f:eb:92:21:78:0f:c7:61:
9e:f7:ef:1b:95:50:fd:6a:b0:da:ea:b3:ba:bb:fd:
37:49:a0:69:c5:6e:8d:b1:cf:c5:96:25:c8:11:f0:
40:ca:55:cf:ec:d0:ab:a9:0b:c4:1e:6b:d7:35:40:
c4:41:36:9a:33:24:f9:29:33:78:53:98:23:64:6c:
d7:9c:18:10:0d:e4:d8:e1:e1:bd:57:ba:37:e3:56:
b1:17:ab:95:d4:ac:58:2e:52:20:ee:f6:8e:60:93:
03:28:51:29:97:86:37:9d:d6:89:66:a9:29:3a:c7:
ae:77:a4:02:27:f6:6d:8a:17:aa:5b:d1:d3:39:2b:
76:15:42:7c:db:93:98:a8:9d:21:cd:72:67:e9:e6:
ae:bf:47:42:e1:68:d4:f7:db:60:63:23:c1:f9:c0:
ed:7e:c3:18:94:7c:ca:30:9e:18:1c:18:7a:b7:b1:
90:b6:98:0f:d0:71:c4:bf:24:24:d4:8b:33:21:ea:
45:59:a4:32:36:6d:b4:f3:fe:3d:da:fc:d0:ab:c8:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:F2:63:4A:29:11:18:F7:4C:CE:8B:48:00:DC:5D:13:73:26:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hW7yY0opERj3TM6LSADcXRNzJvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:dc:67:01:e7:a4:f1:a9:32:82:70:bf:07:a4:99:cb:57:2b:
68:7f:ac:8d:e6:12:79:e0:d5:a0:a0:e0:bf:02:46:56:10:a5:
54:0b:36:0e:80:01:20:8a:50:b9:10:b0:e5:54:aa:df:c6:4e:
9d:c8:93:16:57:11:eb:2f:13:87:8f:f1:51:77:1d:5e:0e:ed:
7b:8d:12:77:5c:4a:31:e5:a2:1b:87:24:0b:18:bc:32:3a:d5:
9a:6c:48:dc:61:65:f2:bb:35:eb:ba:b4:54:60:87:d2:f9:67:
ee:1c:14:8a:ac:a3:24:0f:47:0f:1b:d6:2d:e2:13:8b:fc:55:
04:6b:ea:96:7b:bf:be:92:17:28:fc:51:62:4a:20:9b:02:f7:
18:3a:19:75:19:9a:6f:95:e0:cd:ba:ec:e5:6b:ea:d5:4c:cb:
a6:d5:d4:fa:44:d2:59:22:2e:a1:ac:85:8a:60:74:5a:c7:aa:
04:05:3a:a9:f6:36:4b:05:9c:c0:88:8f:89:60:e4:ea:d0:57:
d9:68:dd:57:9e:66:80:14:4e:de:e5:8c:6e:fd:bc:8d:d6:b4:
70:47:fa:cf:10:d2:6f:70:c7:14:73:32:e4:e9:ba:61:75:6e:
9c:fb:d5:0b:08:b1:67:d5:1d:3e:7f:8d:1d:e8:5c:0d:95:84:
04:ee:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:17 2025 by rpki-client