Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhn0iVzl0QySC7b252bsolofdHA.roa
File: hhn0iVzl0QySC7b252bsolofdHA.roa (raw, json)
Hash identifier: WwgfaaZxuP+k1vbOISV6ju4ZR0hF31h5wWnCEN6v1dk=
Subject key identifier: 86:19:F4:89:5C:E5:D1:0C:92:0B:B6:F6:E7:66:EC:A2:5A:1F:74:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E17868D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhn0iVzl0QySC7b252bsolofdHA.roa
Signing time: Sun 19 Jun 2022 11:09:44 +0000
ROA not before: Sun 19 Jun 2022 11:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383906445 (0x8e17868d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 11:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8619f4895ce5d10c920bb6f6e766eca25a1f7470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:d9:11:c0:1d:9b:28:da:c6:35:29:b3:3c:
f7:9a:1b:49:ba:53:ec:68:e4:87:4d:ec:1e:36:49:
54:36:63:a1:bd:64:63:69:7e:ca:6c:19:e3:5e:b2:
d8:4e:9b:97:6b:e4:14:60:8f:6f:e2:3f:a1:19:98:
ec:53:cb:7b:a8:ea:16:8c:2b:98:5f:2b:11:bf:1a:
0b:ef:1f:00:25:f2:8b:5f:91:b8:03:59:0b:5d:58:
b6:a3:ce:3c:64:3d:3b:a8:73:41:d0:6f:2d:83:df:
55:9f:60:72:29:26:c5:6f:31:52:2e:cc:49:3b:a0:
fd:dc:76:ac:92:25:f5:17:1e:97:86:53:83:25:8a:
3b:90:d9:4f:ac:2e:9e:4b:43:32:71:c9:73:8d:9e:
4d:37:f9:17:b8:18:c0:aa:bc:8d:3d:f8:e9:a4:72:
e6:6a:ce:ba:04:74:09:d5:47:55:a5:53:55:c1:d9:
4f:31:9b:7a:ec:d4:26:ce:79:95:41:38:88:bd:0d:
1f:74:85:4d:b6:b1:fe:02:6f:71:a9:73:15:24:31:
3d:bc:11:71:0b:5d:38:ba:65:53:b6:40:25:d9:d1:
f9:b3:6b:08:45:e1:ff:9e:24:24:91:2d:b0:e6:34:
09:28:8b:29:a1:98:61:37:02:88:9b:97:fe:39:28:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:F4:89:5C:E5:D1:0C:92:0B:B6:F6:E7:66:EC:A2:5A:1F:74:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhn0iVzl0QySC7b252bsolofdHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b7:2e:81:c5:46:ee:69:bb:5f:94:65:fe:32:03:6d:f2:4c:
0d:1e:7e:33:11:f0:b4:7e:13:ef:3d:f2:ff:17:39:16:8f:3c:
b1:12:02:f2:68:f1:68:1f:97:ff:58:3c:10:01:43:7a:7b:6f:
c2:12:53:9e:32:4f:0f:47:a3:3e:47:19:d3:1f:eb:d0:d0:5a:
e9:dd:f4:f9:da:de:c1:f9:6a:89:1b:a0:a8:64:8f:8c:3a:17:
6e:fc:28:ae:f8:a5:bd:37:ef:90:8d:88:f4:ed:b6:cd:eb:fb:
4e:16:47:50:54:54:83:94:14:1a:6d:93:d1:0d:4b:f4:b0:56:
31:0e:0c:32:a7:0c:31:89:ea:49:cf:b4:c9:84:52:24:fd:e1:
b2:14:18:de:07:84:a4:c6:e1:5c:ba:ad:43:6c:8b:c8:c4:9c:
53:a3:e0:e5:65:5c:52:7f:1f:f1:43:4a:a3:4b:ac:62:42:1d:
ba:e1:ed:f2:ad:0a:4a:63:fa:68:b3:d3:5f:8f:d5:3c:a1:27:
e5:51:b5:3e:d7:9d:0f:0a:7f:d7:f3:cb:fe:f5:d8:a7:c2:8a:
cf:53:9c:7c:a2:56:71:bf:22:f5:b5:a4:b1:e8:0e:06:6b:6e:
f6:f5:cd:91:cb:78:6d:c2:17:c0:1a:a3:ab:93:bb:d0:be:1f:
b5:9e:97:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:43:43 2025 by rpki-client