Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZ1yI-agXOtrqjKmUNe-Ba8L0H4.roa
File: hZ1yI-agXOtrqjKmUNe-Ba8L0H4.roa (raw, json)
Hash identifier: NtbUPL7BBhb67kJTNH/niOm4qLdFae5S0kBM5H3qy4c=
Subject key identifier: 85:9D:72:23:E6:A0:5C:EB:6B:AA:32:A6:50:D7:BE:05:AF:0B:D0:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 806A9A92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZ1yI-agXOtrqjKmUNe-Ba8L0H4.roa
Signing time: Mon 02 May 2022 11:11:26 +0000
ROA not before: Mon 02 May 2022 11:11:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2154470034 (0x806a9a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 11:11:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=859d7223e6a05ceb6baa32a650d7be05af0bd07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:49:e3:31:eb:5f:0d:35:6b:8b:e0:45:d1:
74:10:0a:1a:d5:36:37:b0:24:1a:7d:e9:12:13:65:
83:f6:06:cf:f3:a0:2a:a6:99:35:8f:28:e6:79:6e:
d6:cd:d8:cc:bf:2a:1a:cb:2e:57:8f:01:5a:11:23:
58:36:b7:03:bb:a7:e4:0c:93:d4:70:17:c1:8c:e7:
9f:79:6a:ec:3c:09:16:76:d9:c2:b5:91:45:c3:ad:
bf:f2:24:6f:73:d4:6f:27:a1:4b:5d:ab:7d:9b:da:
3b:40:15:3a:04:1d:07:32:6d:8b:84:92:51:e3:aa:
c5:66:b2:3b:c0:1a:67:d3:d1:fc:55:c3:4f:97:45:
27:9f:e9:c7:cf:db:d0:cb:c6:05:e5:c2:4f:0a:8c:
17:f3:09:68:25:28:c1:73:52:e4:33:e5:a2:6e:99:
02:a8:01:fd:77:57:2e:20:73:ab:13:28:67:f0:85:
99:77:f8:df:4b:b1:82:6e:f2:1a:f2:b8:e2:eb:2b:
3b:84:01:1b:c9:d3:c2:59:39:0e:f1:4b:8f:93:a2:
3d:e5:ff:7f:a2:c7:03:ce:eb:16:a2:25:48:c8:03:
d6:38:df:3e:c4:1f:80:fc:bc:12:7e:21:e5:99:64:
0b:5a:ff:67:4b:bd:01:89:a5:fb:d6:d9:a8:b7:45:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:72:23:E6:A0:5C:EB:6B:AA:32:A6:50:D7:BE:05:AF:0B:D0:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZ1yI-agXOtrqjKmUNe-Ba8L0H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:cd:61:ca:2f:7e:6a:58:ae:0e:ae:b5:6f:55:ea:00:c7:57:
ae:a3:ec:20:1b:c4:0d:ff:b0:8b:99:ac:3b:4e:a1:42:7d:f3:
06:82:47:6f:4d:46:99:f4:00:99:60:c9:b9:0e:51:61:9b:06:
2c:18:8f:a6:23:9c:2e:b1:e6:87:f4:0a:5a:19:79:dd:fb:37:
5c:79:4d:bb:b3:36:d1:f8:13:89:10:a4:c6:37:44:7f:f7:95:
a0:f5:bb:dc:56:57:9d:18:4c:a8:3b:f7:fb:48:04:38:21:bf:
35:82:73:e3:56:dd:3b:71:f4:a1:66:5c:6d:d8:11:7a:c2:8f:
71:3d:58:78:68:2e:d9:21:99:c8:88:9e:fa:c6:b3:a3:dc:33:
ec:a5:81:a0:6d:7f:e2:ba:a7:58:69:0f:b3:4e:c2:08:6e:d7:
5b:91:98:15:17:41:19:19:5e:ec:c3:7b:bc:d3:96:6a:24:f1:
2f:01:5a:8a:d4:bc:a1:99:d3:d5:d7:b2:f4:53:c7:96:c2:b3:
7a:c2:2e:2b:cd:9a:0d:ec:01:e4:76:e8:46:9f:f1:f8:a4:32:
98:dc:86:21:a4:92:fa:20:fa:cc:26:15:da:21:5c:3a:1a:4f:
85:ad:62:02:aa:ed:7b:80:94:3d:48:ad:db:79:7e:35:07:93:
7c:14:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:12:49 2025 by rpki-client