Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hWaxZLTp81GXrW2-P4j8HXjskaE.roa
File: hWaxZLTp81GXrW2-P4j8HXjskaE.roa (raw, json)
Hash identifier: 4/Wzxz+0e1lgLVSDISO2qSuaP0P+s5txyJHzP9qkGhE=
Subject key identifier: 85:66:B1:64:B4:E9:F3:51:97:AD:6D:BE:3F:88:FC:1D:78:EC:91:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D99307D5241571C0BFF26B547A10D6B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hWaxZLTp81GXrW2-P4j8HXjskaE.roa
Signing time: Wed 09 Aug 2023 09:13:58 +0000
ROA not before: Wed 09 Aug 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:93:07:d5:24:15:71:c0:bf:f2:6b:54:7a:10:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8566b164b4e9f35197ad6dbe3f88fc1d78ec91a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:05:a7:be:33:6a:11:64:cc:e8:8d:34:75:
da:f3:2f:cc:6a:85:47:dc:f9:81:6b:88:01:61:cb:
96:29:c4:b8:9f:23:64:94:27:5d:78:d9:90:df:80:
95:b4:bf:af:2c:23:4b:96:48:9c:a1:88:c8:8c:40:
8e:09:b6:21:dd:a7:d1:37:29:53:41:d2:c2:d1:ce:
0a:21:b2:3a:21:47:8e:0c:c6:e2:f3:4a:86:00:9c:
39:8e:15:9c:da:e4:64:6b:72:43:95:84:0c:80:e9:
b7:13:c9:99:14:81:52:e9:ab:8e:04:db:48:94:ae:
16:54:c6:c3:44:e6:d4:fb:9c:86:c7:35:40:6a:b9:
2d:1f:89:cf:dc:8a:51:e8:42:7b:1b:d3:68:f9:b5:
4e:42:dc:73:ca:47:bd:08:78:15:01:33:4e:7a:84:
e7:d3:41:d4:2b:5f:89:33:b9:3c:39:fb:6a:b7:67:
b7:46:39:92:18:a0:cd:c4:48:3a:00:40:a6:9c:30:
50:f8:c2:59:14:b3:ee:0e:2a:dd:37:21:e1:c4:43:
45:5a:a2:ea:bf:bd:7d:2c:aa:8a:7d:d7:5d:38:da:
c6:68:a3:7a:a2:4b:01:04:5c:ea:70:9b:60:3d:27:
a1:9b:1b:b7:bf:b6:1a:01:90:c8:c0:ed:28:83:39:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:B1:64:B4:E9:F3:51:97:AD:6D:BE:3F:88:FC:1D:78:EC:91:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hWaxZLTp81GXrW2-P4j8HXjskaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:a2:1c:6e:a9:22:00:41:27:6d:cf:c4:1c:0e:be:86:a9:ce:
c1:98:a3:b3:95:d2:66:65:14:4c:81:86:45:63:5e:bd:ad:df:
e5:df:e4:ba:c6:c7:46:41:59:c4:ec:c6:3e:b8:04:ed:7b:6d:
d9:fd:78:db:f1:e6:f1:88:82:b5:8e:de:98:a7:6e:ba:d7:95:
47:7f:84:f2:a0:63:de:c2:93:1d:b2:66:28:92:21:8b:84:b7:
e4:e9:74:1c:b4:dd:28:35:0f:83:b0:29:5e:ea:19:a4:38:18:
a6:9c:ab:2f:55:ee:17:6e:68:af:66:11:a2:84:22:85:39:b3:
2e:1b:be:53:6c:ae:2c:cd:ff:0e:1a:ef:aa:be:96:da:ff:27:
62:9a:e7:4b:28:35:4b:87:80:b8:00:65:16:04:ba:9a:f5:d0:
ca:99:23:95:36:0a:9d:34:43:87:92:61:92:cf:e1:b4:f1:80:
41:2a:65:ec:b3:d5:ca:1e:72:cc:45:97:19:75:bb:b0:aa:66:
40:bd:95:1d:11:5f:89:6f:ff:c5:37:9c:ce:3b:7c:4a:79:fe:
f9:4f:d4:56:92:28:65:b7:07:72:fd:9b:da:fe:0e:25:0f:75:
16:f1:25:d4:cd:1f:05:79:c6:bf:17:ce:15:5c:92:8d:b7:a1:
77:bb:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:50:35 2025 by rpki-client