Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXUoj6bq7xFSW4Lx44kB-eGYunA.roa
File: hXUoj6bq7xFSW4Lx44kB-eGYunA.roa (raw, json)
Hash identifier: e+eSsp9QK9RB1bozhuHv3/BeHYXe1VB6jPGBQGRlfJw=
Subject key identifier: 85:75:28:8F:A6:EA:EF:11:52:5B:82:F1:E3:89:01:F9:E1:98:BA:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C6C2C4B3EC136C4CC1109AC733E3E3C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXUoj6bq7xFSW4Lx44kB-eGYunA.roa
Signing time: Tue 11 Oct 2022 11:16:36 +0000
ROA not before: Tue 11 Oct 2022 11:16:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:c2:c4:b3:ec:13:6c:4c:c1:10:9a:c7:33:e3:e3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 11:16:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8575288fa6eaef11525b82f1e38901f9e198ba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:5e:26:57:77:61:43:b2:ab:3f:68:51:3c:
3f:32:43:df:73:6a:8d:45:b3:ac:74:8f:5c:5a:23:
c1:16:fa:4e:0f:f3:96:68:88:c2:f0:83:ff:67:72:
27:9d:ad:c8:88:e6:c8:ff:00:13:c9:93:4b:d0:5a:
62:d8:e4:fa:70:f6:0a:ce:4c:19:56:a2:87:98:c8:
53:ef:73:e9:03:a2:20:26:03:ee:45:26:c7:c3:bb:
4f:92:65:d7:d2:2d:64:13:71:f3:4d:3b:d1:ce:7f:
14:a4:0f:b7:1a:ab:24:ee:20:0d:5d:70:8e:4c:31:
fd:0d:09:26:b6:fc:7d:b4:af:54:7e:f5:0d:fb:dc:
c2:2c:76:24:1c:da:51:b1:00:10:dc:75:e2:3c:90:
a2:02:4b:e8:d4:dc:d3:f4:94:93:ea:f3:6e:53:26:
7d:5a:b1:7c:d0:e1:15:b5:d8:c5:28:64:6f:36:c4:
78:3c:f2:2d:80:22:6e:fb:5c:10:96:9c:0b:c6:61:
df:80:f6:f6:a1:bf:69:3e:52:78:89:77:07:ef:65:
23:b3:5b:72:be:60:29:d4:24:f2:35:5a:83:18:76:
af:62:92:2f:6c:9b:b2:b5:e4:6c:39:d9:0e:b7:6d:
f6:a4:33:41:06:f5:8a:df:4c:1b:48:91:86:4a:5e:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:28:8F:A6:EA:EF:11:52:5B:82:F1:E3:89:01:F9:E1:98:BA:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hXUoj6bq7xFSW4Lx44kB-eGYunA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:3f:df:2a:63:42:4f:76:00:23:7e:63:ee:47:ac:18:5e:48:
e7:5e:75:71:55:1b:23:18:2b:87:08:ec:3f:31:98:f5:4e:7e:
24:ee:45:30:d6:ae:69:df:e9:17:1a:f5:0b:c8:99:03:df:86:
93:dd:56:e7:79:30:60:be:bc:d9:55:42:89:28:14:73:09:81:
33:4e:ad:cf:a1:e5:20:3d:1d:c9:7d:73:40:7e:2e:85:8c:e4:
34:34:33:de:c4:b7:b0:bc:4c:75:21:94:79:30:61:e8:81:fb:
ca:92:eb:20:fd:6b:81:09:30:fa:53:ed:e6:1d:08:0f:a0:66:
2a:da:84:08:80:33:9a:10:f3:d7:dc:6c:a0:e3:bf:bb:45:99:
a5:34:6d:0a:af:8c:e5:90:10:ab:06:4a:fe:27:af:c6:64:94:
90:52:2b:c5:32:67:6b:f0:48:33:53:ff:3f:2d:89:6b:1a:bd:
ee:d6:1e:ee:cd:0b:f1:32:3e:d8:0b:4a:78:53:e0:f2:e1:ac:
2d:3c:5c:c5:d5:7c:a5:25:be:26:92:bf:f0:ed:b1:ad:28:48:
a0:77:0a:d2:95:1a:10:bd:14:94:8c:3e:82:56:f7:be:d9:7b:
df:c7:5d:aa:ff:06:24:ac:13:6c:13:f1:3b:00:24:d3:82:ce:
20:7e:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:42 2025 by rpki-client