Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYnwpOg8waC-I9BBFpNN-D9lNoM.roa
File: hYnwpOg8waC-I9BBFpNN-D9lNoM.roa (raw, json)
Hash identifier: Kxrxjd5AbzfffR3NUDvjBcChBw5IBnA+H8KrXcR122Q=
Subject key identifier: 85:89:F0:A4:E8:3C:C1:A0:BE:23:D0:41:16:93:4D:F8:3F:65:36:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A175FBC944CCBAEFA9B79AB946A96532D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYnwpOg8waC-I9BBFpNN-D9lNoM.roa
Signing time: Mon 21 Aug 2023 09:14:24 +0000
ROA not before: Mon 21 Aug 2023 09:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:5f:bc:94:4c:cb:ae:fa:9b:79:ab:94:6a:96:53:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 09:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8589f0a4e83cc1a0be23d04116934df83f653683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:9c:77:fe:83:48:20:58:b7:b3:a9:50:97:
62:6b:d0:c3:a9:8b:fe:3c:f3:e7:8e:e2:e2:fd:60:
e7:62:1b:44:d7:da:7f:7c:0c:6f:95:cc:51:bf:19:
bb:31:4f:ae:4c:77:dc:b1:33:24:71:01:63:42:a4:
48:05:77:8d:18:be:cc:dd:f6:59:6f:87:20:a4:f5:
69:5b:65:f4:61:52:cd:82:37:ec:c1:4c:67:c6:eb:
89:e2:fc:5e:f5:5c:23:5c:38:c8:ea:cf:27:36:e1:
d5:3e:8b:18:d5:79:4b:a4:c7:4f:8e:cf:1e:c9:78:
82:ed:1c:0a:15:f5:98:4f:84:34:30:e9:61:c6:b9:
95:2c:9d:ef:42:6e:f9:5e:38:4b:50:48:86:a8:e4:
2a:c8:5b:a4:19:c2:76:30:64:c0:e4:fd:b6:8f:bf:
ee:7a:93:cc:81:4a:36:fa:c6:24:29:eb:ff:8a:81:
84:f0:bd:72:9e:d3:9c:f4:25:8e:2d:38:44:b9:e1:
0b:54:01:fc:e8:92:bb:75:dd:31:00:a8:a8:de:cd:
8b:05:47:f2:87:a5:eb:5e:3c:69:e4:4e:ff:90:2c:
1c:e6:96:7f:5e:34:ec:b8:cd:5a:fa:12:db:0f:07:
d2:8f:1d:b3:47:fa:1e:71:6e:7b:ab:77:35:10:04:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:F0:A4:E8:3C:C1:A0:BE:23:D0:41:16:93:4D:F8:3F:65:36:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYnwpOg8waC-I9BBFpNN-D9lNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:96:f2:64:fd:27:15:bc:6a:a5:d0:0e:2b:15:73:9c:65:fa:
37:50:73:d9:dd:02:6a:65:71:50:a4:eb:c8:31:80:6b:26:d2:
00:d5:c5:07:da:71:7a:ed:69:8a:19:f6:d1:1f:8b:3e:af:50:
1f:d4:ea:69:8f:55:d1:9d:43:71:f5:85:9b:19:b9:a8:65:6c:
f7:41:47:df:7b:c5:da:a0:eb:35:50:b3:19:4a:9b:51:c4:86:
8a:82:7a:65:ad:fc:d4:1b:2d:a7:66:4b:ce:74:15:fe:7f:74:
47:37:34:57:b2:a3:c4:1d:a3:9b:e7:2e:c5:b8:26:32:b2:84:
0a:b2:55:d9:82:d2:23:ae:38:59:fa:22:dc:aa:4a:94:46:b3:
15:f8:26:97:4f:59:d3:26:14:a8:38:4b:0b:a1:e9:33:a7:69:
4e:20:90:e3:84:09:22:12:57:6a:8e:89:cc:f3:2b:de:3d:d7:
e0:7f:30:60:b7:dc:55:66:a9:00:70:89:95:d7:2c:4f:63:0b:
a9:51:21:be:67:44:5b:40:ec:7f:69:f0:19:4d:ef:64:c0:a8:
ee:5f:a9:9c:85:29:09:7b:67:eb:79:8c:6d:ee:d1:73:b3:d1:
99:c4:bb:22:9b:b8:bc:2b:d3:d9:dd:1b:75:fb:14:e9:44:6f:
c8:e5:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:32 2025 by rpki-client