Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heQUmgLejLSk0gQNsYCi6SwOmRs.roa
File: heQUmgLejLSk0gQNsYCi6SwOmRs.roa (raw, json)
Hash identifier: 53cBl5A5WMH7TUSD61HTI7Tx0OBYoWYA6ygJqn5leTc=
Subject key identifier: 85:E4:14:9A:02:DE:8C:B4:A4:D2:04:0D:B1:80:A2:E9:2C:0E:99:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E4823A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heQUmgLejLSk0gQNsYCi6SwOmRs.roa
Signing time: Mon 25 Apr 2022 05:10:00 +0000
ROA not before: Mon 25 Apr 2022 05:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118656932 (0x7e4823a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 05:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e4149a02de8cb4a4d2040db180a2e92c0e991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:d2:f5:12:eb:ec:41:95:d9:ac:84:40:89:
a6:b1:fb:29:84:cb:c9:ab:a7:05:be:d6:31:45:14:
07:ac:c7:d5:40:2f:0b:17:f0:60:f9:a7:09:4c:d2:
ca:90:69:14:6c:7f:0a:67:3f:cf:98:16:f8:0d:44:
cb:a9:e9:3d:ae:d4:5e:15:73:c4:3e:7e:b8:66:42:
2b:bd:e1:c6:41:56:c8:1f:74:c4:ff:0d:b2:ec:a9:
87:ed:7e:74:15:68:02:fe:a3:20:0e:99:44:19:5c:
d2:9a:b3:13:f8:36:af:4d:08:65:42:4e:38:64:13:
36:c9:12:80:67:cb:63:79:11:a0:12:2c:4e:49:b2:
47:d9:18:9f:1f:1b:8e:f7:15:f0:24:74:6b:c3:a3:
c3:43:76:3b:89:d9:0f:ac:e4:d6:64:0d:13:a7:5e:
e3:44:b0:06:7f:b8:3e:7f:da:10:e6:09:3f:77:67:
8f:52:5f:3c:03:4f:dd:fd:d1:26:d9:cd:3f:9c:f8:
f5:d3:e8:93:64:89:91:a8:5b:72:bf:28:1c:a9:bb:
37:b5:d0:fc:48:9b:3c:3a:d6:2e:d1:e3:f1:3a:84:
51:e0:cc:71:1d:81:ae:dd:a6:cd:ee:6a:14:c6:5f:
86:11:90:5f:41:9e:51:7f:a9:95:d5:7e:59:36:2d:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:14:9A:02:DE:8C:B4:A4:D2:04:0D:B1:80:A2:E9:2C:0E:99:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heQUmgLejLSk0gQNsYCi6SwOmRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:ef:93:5d:5a:f8:06:c6:45:dd:62:4f:ad:b8:87:ac:15:86:
0a:62:7c:06:b8:24:75:d3:8b:b5:19:ca:4d:d8:a5:86:a5:3e:
a2:3c:29:2e:fa:bf:4e:4d:85:72:a5:5e:e2:17:9a:c3:d5:ba:
96:96:89:c1:33:25:42:ae:e4:c7:2d:bd:aa:68:37:25:89:fe:
5f:de:53:07:11:e5:9b:ee:23:0e:48:dd:38:66:05:24:a3:c1:
e3:11:2b:54:75:43:45:bb:a2:be:fa:1c:ad:e3:55:eb:a9:40:
a9:9d:97:6e:e6:b7:06:9a:e3:3b:6d:a2:84:c8:d5:3f:07:2c:
55:62:16:81:0e:b2:7e:63:07:a6:fa:3b:96:92:7e:18:09:1e:
44:18:21:85:eb:65:6a:36:ed:cc:78:95:18:b8:82:6e:9f:54:
f4:49:9a:8d:22:a1:d1:47:a4:b2:9e:8c:f4:dc:15:12:b2:fe:
d8:2a:b5:a3:7a:eb:1b:98:6a:b4:2e:9d:7a:7b:1c:b1:6c:e0:
58:5d:21:1c:6d:b7:ec:a8:59:94:1d:3e:a5:35:be:8e:8b:45:
98:76:11:86:4f:cd:56:7b:38:13:dd:d0:9d:54:9c:37:44:69:
f1:b7:7a:78:f2:76:f1:94:59:1f:c9:fe:b7:3a:ed:40:29:89:
2e:4f:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:02 2025 by rpki-client