Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hcum64rl8NxIDkugNl2sdwqH39A.roa
File: hcum64rl8NxIDkugNl2sdwqH39A.roa (raw, json)
Hash identifier: fDulJKm6505T3mLKAXrZJ2fwBLNeMyuvu9de5vhcDss=
Subject key identifier: 85:CB:A6:EB:8A:E5:F0:DC:48:0E:4B:A0:36:5D:AC:77:0A:87:DF:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866CC864E68169F37213A0EC5A3A9455A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hcum64rl8NxIDkugNl2sdwqH39A.roa
Signing time: Mon 20 Feb 2023 03:05:17 +0000
ROA not before: Mon 20 Feb 2023 03:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6cc7:7e38/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6c:c8:64:e6:81:69:f3:72:13:a0:ec:5a:3a:94:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 03:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85cba6eb8ae5f0dc480e4ba0365dac770a87dfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:1c:09:f3:44:76:02:0c:cf:ee:99:1e:85:
0e:37:74:bb:fd:9b:3a:a0:a0:34:d5:7e:8c:f4:20:
fe:1f:2c:c0:15:1f:e6:f9:82:f1:16:8d:46:31:e6:
64:78:3d:f8:0a:b9:11:b8:08:e3:ec:07:55:9c:14:
77:4b:df:7e:30:28:3d:2c:38:46:6c:0e:8a:2b:76:
0b:94:fe:4d:27:9a:7e:fc:e5:3f:44:7b:c2:1f:40:
7d:eb:c4:f2:49:5e:13:eb:43:0a:62:cf:39:3d:da:
27:f6:24:b7:3b:d7:e5:b8:1a:18:de:f7:5e:4b:70:
6d:c8:9b:90:c4:0b:5c:fa:b5:85:0a:6c:23:36:65:
f2:eb:5f:38:a6:97:6c:f0:32:fc:6e:59:36:78:58:
c9:35:74:08:ba:ad:13:09:05:7b:17:7e:a0:74:c7:
63:5f:1a:ac:6b:e3:63:5d:29:c6:95:03:a3:d9:0a:
ac:f2:83:62:cd:f3:2c:02:85:20:e3:ff:8c:d6:d6:
9e:34:31:18:76:a2:39:7a:21:72:b1:54:d0:1a:d3:
e5:8a:26:2e:e7:04:85:a8:3f:fe:cf:fd:1a:da:31:
8c:c7:70:99:0a:14:21:7f:ce:38:30:6f:9b:c1:88:
fa:c2:27:bd:aa:df:d1:66:70:58:20:1d:f5:09:be:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:A6:EB:8A:E5:F0:DC:48:0E:4B:A0:36:5D:AC:77:0A:87:DF:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hcum64rl8NxIDkugNl2sdwqH39A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:74:cf:0e:9d:bc:d3:33:27:f3:52:e0:2c:3c:38:c1:58:be:
08:fa:7c:72:d3:ee:29:14:85:80:22:b3:1e:60:60:63:61:b4:
3f:16:42:eb:a8:94:bb:bb:3c:b9:bb:3f:8d:8e:d0:70:46:bd:
58:51:6e:57:cb:f7:c9:ac:fd:c3:6a:f6:70:ed:e8:54:9f:c8:
3f:be:71:9d:ea:98:f7:cf:3e:b6:0a:1a:1c:3b:86:84:b7:0e:
5f:dc:3b:2b:84:18:8e:ae:e7:c6:c9:cc:ce:13:4d:0d:6d:53:
95:0e:0d:68:8b:70:0c:88:ef:e7:54:38:bf:3b:93:50:55:c6:
a3:14:89:68:91:35:4b:d2:b1:be:bf:49:7d:17:4d:37:99:13:
75:da:2c:80:d6:c4:90:14:4d:32:15:a4:c5:a0:51:07:82:11:
fe:74:b9:a5:4f:be:bb:8d:4a:c9:07:b6:7f:de:4a:5d:79:bc:
25:18:92:d3:b3:25:9e:ca:e6:75:07:9c:04:5b:e1:9d:42:6f:
a7:3e:a4:91:6f:8f:95:af:be:ca:91:5f:48:20:4c:5d:ef:26:
9a:43:6a:83:78:6e:69:5a:b1:e5:f8:9f:e7:76:9c:e6:4e:97:
63:0d:ae:aa:9b:43:40:e1:59:d0:92:78:61:91:94:06:ca:ec:
a2:25:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:37:56 2025 by rpki-client