Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYNrIoakAEYHTKWFals9FLGerrw.roa
File: hYNrIoakAEYHTKWFals9FLGerrw.roa (raw, json)
Hash identifier: TlQSVR9QJKn7FFXWT83Gyy8mPnJST+5pzIQtIBomTKs=
Subject key identifier: 85:83:6B:22:86:A4:00:46:07:4C:A5:85:6A:5B:3D:14:B1:9E:AE:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018764D4D46B6E34F3761B9E6A6A947A7026
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYNrIoakAEYHTKWFals9FLGerrw.roa
Signing time: Sun 09 Apr 2023 07:04:42 +0000
ROA not before: Sun 09 Apr 2023 07:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:64d4:6d59/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:d4:d4:6b:6e:34:f3:76:1b:9e:6a:6a:94:7a:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 07:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85836b2286a40046074ca5856a5b3d14b19eaebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:1d:de:95:fe:c5:b8:c2:5e:a8:8a:57:10:
4b:d9:92:4f:c8:64:cf:ea:2a:97:c3:60:7b:e2:94:
df:7c:cb:81:83:4d:5f:92:e9:53:10:05:cf:97:f9:
b1:28:13:d9:97:6c:12:44:1e:2e:fa:8e:dc:eb:2e:
54:e1:d7:47:d7:8b:13:86:b8:79:2f:6a:6f:48:d4:
6f:41:49:31:3e:85:f8:42:0c:7d:7a:16:29:82:5f:
30:d2:ea:e3:62:11:89:eb:7e:ac:cd:7a:99:62:d4:
ee:5a:be:82:da:90:53:c1:b0:65:92:59:2f:90:72:
3a:0d:77:97:d3:08:58:79:d4:6a:67:ce:e3:d1:91:
43:41:f2:d4:4f:93:f5:7b:cf:74:e5:b1:90:44:2d:
79:70:cb:ab:ed:8c:fd:cd:4d:b7:46:a2:b9:24:73:
a6:fb:13:09:2a:c6:c3:3a:19:81:f4:cc:22:81:94:
c8:c0:64:29:0f:ce:58:3a:35:34:aa:7e:51:ae:d1:
54:19:40:8c:21:b0:76:03:54:7a:f3:7f:88:be:8e:
57:a6:72:33:07:a1:ba:95:60:7a:89:08:00:ae:b4:
f9:f8:54:11:79:d6:e0:92:69:c9:f7:c9:ad:af:8a:
0c:18:cf:43:96:d6:6a:56:8c:62:f4:fd:69:23:cb:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:6B:22:86:A4:00:46:07:4C:A5:85:6A:5B:3D:14:B1:9E:AE:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYNrIoakAEYHTKWFals9FLGerrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:80:bc:91:ca:09:54:bb:61:50:c3:fc:86:7c:c6:9c:8d:99:
81:16:5d:5e:fa:a0:ef:55:69:1f:17:a4:9f:05:d5:43:2f:f5:
42:ae:86:62:a2:be:f1:70:d6:85:27:d9:8c:15:59:d4:c6:c0:
91:26:d2:dd:d8:14:46:a0:da:5d:77:5d:13:5d:31:11:50:27:
e1:66:fd:16:e8:4b:6d:b6:7b:52:5f:59:fe:a9:dc:74:2b:b4:
22:6e:84:3f:7b:9b:e4:3d:41:ef:6e:58:19:ea:ee:ce:db:70:
61:62:cb:4d:4a:f0:4d:d5:f1:5e:ac:f1:1c:fd:71:d3:5a:07:
e3:85:ad:dc:89:4a:af:c8:4f:e6:ec:b6:03:02:e9:41:76:f2:
1c:0c:50:c5:b3:19:33:63:0c:98:93:3d:58:6d:a3:16:de:8a:
fe:51:6e:be:42:d5:05:ba:89:b4:74:86:0a:b4:31:f0:ee:0f:
4f:c2:97:f7:56:10:e7:70:14:5e:be:b2:6c:bd:c5:30:8f:bf:
7f:92:4b:88:0f:1c:4f:02:88:e2:45:e5:ac:60:a6:51:97:c0:
2a:0b:8a:76:7b:d3:d7:ac:18:25:30:79:13:3e:bf:29:a7:0f:
9b:23:42:6c:64:bb:24:2f:2d:29:23:b0:cf:4e:58:a1:ed:0f:
cd:76:57:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:39 2025 by rpki-client