Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hdwgAC1D-06yQG35HazuxbMa6Tk.roa
File: hdwgAC1D-06yQG35HazuxbMa6Tk.roa (raw, json)
Hash identifier: hWYYDrs2L7w8snmFmzYHAZxQYHTlhk/MyFp4aXvcq7U=
Subject key identifier: 85:DC:20:00:2D:43:FB:4E:B2:40:6D:F9:1D:AC:EE:C5:B3:1A:E9:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861F8F4A54A95CF5F870F43A5CD9147067
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hdwgAC1D-06yQG35HazuxbMa6Tk.roa
Signing time: Sun 05 Feb 2023 03:12:09 +0000
ROA not before: Sun 05 Feb 2023 03:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1f:8f:4a:54:a9:5c:f5:f8:70:f4:3a:5c:d9:14:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 03:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85dc20002d43fb4eb2406df91daceec5b31ae939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:0a:d1:fe:a7:51:c7:a7:2d:14:db:5b:4b:
ec:e7:c1:af:dc:c4:7b:03:89:b3:bd:2d:43:0c:2b:
94:38:6e:35:53:56:ab:a4:65:07:29:60:22:2e:7a:
a1:2b:ea:3c:93:40:e6:b0:d7:a2:0c:fb:71:0c:6d:
16:c5:ea:28:b5:de:5e:91:5e:4c:f4:b5:9c:19:39:
1a:22:6a:54:0c:ab:3b:79:0b:17:fd:0d:4c:2e:69:
e6:98:66:a4:6d:c9:19:dc:e4:3c:d3:39:d8:26:17:
28:eb:09:4c:57:5b:f8:1c:7f:0b:9a:28:8a:d7:f9:
31:dd:e7:2d:7f:71:b2:d9:b9:7f:d0:5e:e3:62:b0:
15:0a:62:32:26:3a:40:1a:6d:53:6a:bb:12:1c:c5:
58:f8:9e:26:a9:9c:7d:44:44:43:71:14:ec:12:a8:
73:d5:2b:bb:06:93:75:e7:50:1b:b8:11:0f:b4:6a:
61:ea:3b:bc:8a:84:52:fc:fc:00:3b:0d:6f:b2:a8:
d2:4e:2a:a5:f6:c3:e1:d9:d8:16:d5:1e:da:9b:1a:
5b:dd:33:5b:fd:b0:90:8c:d5:6d:ed:3b:bc:04:6f:
eb:5e:ed:9c:af:26:1c:d6:24:c7:c8:66:78:ab:58:
57:18:d4:1b:a9:fa:42:2a:92:fc:9b:de:7f:11:88:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:20:00:2D:43:FB:4E:B2:40:6D:F9:1D:AC:EE:C5:B3:1A:E9:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hdwgAC1D-06yQG35HazuxbMa6Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:5f:8f:88:10:83:6d:f2:c5:da:34:3f:5a:c1:e1:fe:38:52:
e6:25:c8:37:4a:cf:d8:fe:bf:a3:da:92:aa:73:2e:5d:bc:b0:
ab:89:2f:e9:52:97:05:ed:2e:30:1f:40:30:e2:39:d4:43:9d:
82:d1:d8:9d:96:ae:64:f9:54:1e:a4:9a:e1:40:e3:bc:4c:5f:
6d:65:40:80:bb:0e:08:14:2b:da:93:86:7f:c7:4b:c6:37:83:
32:b3:d1:5e:49:d7:a1:0a:f7:32:c9:d3:82:b0:f9:6e:9f:5d:
23:79:bc:2a:f2:9c:af:a6:f3:64:9a:fb:36:d6:ff:25:f8:c2:
24:e7:3b:ee:9d:f5:71:7e:21:13:e3:b5:f5:41:bb:8c:54:27:
0b:89:e3:6b:87:cf:f7:4c:e1:cb:ab:bc:7f:3e:82:8f:49:e0:
24:7d:a9:be:50:d0:05:8c:07:a6:05:87:3a:d1:68:e0:85:28:
7e:c8:b8:b2:07:e8:f7:12:af:21:b4:a3:9b:9c:fe:39:98:c4:
90:88:d4:4a:a1:e4:85:28:a2:fc:ea:d1:ef:8a:0e:b5:5f:bf:
4d:55:b2:46:26:bf:e9:14:40:47:c9:05:f8:b1:71:c8:e1:fb:
c7:26:56:e8:c6:df:80:7e:3c:13:ad:02:c7:04:ea:17:21:ae:
0d:02:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:45 2025 by rpki-client