Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZM1-VfpzZTLwXne91IafoPBjqc.roa
File: hZM1-VfpzZTLwXne91IafoPBjqc.roa (raw, json)
Hash identifier: 1Si/IGukrZpReWl2DO0dT599wJcr0qpyMezbbYLb5VA=
Subject key identifier: 85:93:35:F9:57:E9:CD:94:CB:C1:79:DE:F7:52:1A:7E:83:C1:8E:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AD9BCE2276B6C157446B6FA850BD8871
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZM1-VfpzZTLwXne91IafoPBjqc.roa
Signing time: Sun 23 Apr 2023 10:14:41 +0000
ROA not before: Sun 23 Apr 2023 10:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ad:9b:ce:22:76:b6:c1:57:44:6b:6f:a8:50:bd:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 10:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=859335f957e9cd94cbc179def7521a7e83c18ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:65:bf:1e:3d:6f:59:22:cf:b3:6d:10:30:
38:d4:d1:52:69:16:7a:cd:54:f5:c2:25:3a:bb:a7:
0a:30:35:a9:3c:d6:7c:32:c1:bb:94:83:a9:6d:9a:
a1:f1:4b:f1:7d:81:3f:79:eb:b4:36:f5:92:95:68:
26:c5:bc:79:3b:6d:72:09:b3:ff:06:65:eb:dd:17:
f8:9f:75:6d:25:66:06:f6:06:94:03:eb:1d:37:90:
48:89:15:34:52:76:82:d6:0b:3a:d1:d4:a7:cc:f7:
7b:8f:13:1c:e0:e6:cf:10:4b:2c:05:da:b0:73:b4:
ec:be:3c:59:d0:6c:3a:77:1f:c8:39:33:28:52:02:
16:c2:57:34:11:d3:6c:d7:37:b8:b3:6b:43:be:19:
5f:00:37:81:1e:b9:c8:c0:a7:91:69:a4:23:e3:7b:
19:1b:21:79:a3:a9:22:b3:8f:b2:2a:48:b1:1c:b9:
fc:b7:b0:40:85:bd:a1:2b:0f:1c:ae:a1:ab:45:ad:
68:f7:38:66:6e:da:19:12:d9:ed:8a:ef:fc:47:e9:
8a:83:dc:26:47:b7:f7:92:da:4a:31:36:3d:88:7d:
c0:e5:42:6c:0b:c8:59:59:eb:23:db:c5:a1:35:b7:
88:2f:98:31:d9:f7:14:05:bb:6b:66:e9:54:39:56:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:35:F9:57:E9:CD:94:CB:C1:79:DE:F7:52:1A:7E:83:C1:8E:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hZM1-VfpzZTLwXne91IafoPBjqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:4d:78:c7:b7:53:e0:ea:91:89:0a:88:84:75:e1:69:ca:de:
39:cb:aa:ab:1f:d1:ee:06:9b:06:87:c6:6d:64:9a:84:0a:f5:
6b:4e:ce:e2:36:a5:8f:07:8a:10:1e:bb:ad:17:c3:8b:30:10:
72:19:c6:d6:88:29:c0:3d:37:3c:aa:e8:91:38:ab:b1:3d:38:
be:f0:85:d3:03:d2:ba:30:9d:32:60:ac:c7:fb:d2:b7:06:9e:
6e:ba:df:7e:9b:44:dd:11:98:13:a2:1a:f3:47:73:f7:52:46:
cb:ec:a6:5b:ef:94:6e:59:25:e6:e3:aa:83:1a:4e:b5:78:73:
f1:ec:3a:7d:29:e3:40:7c:43:2f:32:99:56:9b:3f:1c:3d:ad:
f8:60:61:c5:8e:86:e0:44:7d:2f:8f:51:47:b6:cc:8d:67:e7:
4d:31:57:c8:54:1e:d5:0a:ff:50:74:7a:e2:c3:85:5e:f6:1f:
d7:44:23:1a:ba:fc:f8:36:f6:36:59:80:9a:d6:03:ed:8a:12:
9d:4f:35:31:ec:47:de:e5:21:2a:36:d4:c6:29:c9:66:af:c6:
c6:91:47:d5:99:c4:63:e6:1a:e0:31:12:ef:2e:20:50:ed:d7:
bc:6c:5b:1e:4e:e6:43:6e:3b:f1:26:ba:45:aa:3f:b3:4a:ae:
1c:79:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:12 2025 by rpki-client