Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhyClOBbi9v2Ku66H0fG0dveU_0.roa
File: hhyClOBbi9v2Ku66H0fG0dveU_0.roa (raw, json)
Hash identifier: CCo8ehVt9IuHUoIgYMAePQ17cZMqWPmcMdWqQngWEto=
Subject key identifier: 86:1C:82:94:E0:5B:8B:DB:F6:2A:EE:BA:1F:47:C6:D1:DB:DE:53:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D1746BE0C519EAEEC06EC49580BE72F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhyClOBbi9v2Ku66H0fG0dveU_0.roa
Signing time: Sat 11 Mar 2023 16:15:13 +0000
ROA not before: Sat 11 Mar 2023 16:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:74:6b:e0:c5:19:ea:ee:c0:6e:c4:95:80:be:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 16:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861c8294e05b8bdbf62aeeba1f47c6d1dbde53fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:01:00:f0:71:2a:9f:43:40:c2:3f:3b:9a:
9c:ce:8c:e1:64:f8:9d:54:02:34:c0:f6:16:0d:86:
fc:c1:6d:13:b0:f3:77:e8:c0:65:71:60:7f:21:da:
a7:94:a8:00:6b:5c:51:1e:22:a2:94:7f:23:fc:77:
db:73:66:74:98:fb:55:ae:05:70:7a:1d:6b:ad:40:
f2:cb:a2:d6:ec:52:da:5e:e2:09:d3:11:39:3a:47:
fe:e2:89:f9:4f:51:8a:93:29:20:60:a1:ec:cc:1e:
f6:ae:b4:51:74:17:92:dd:ed:f7:97:5b:8e:72:05:
c7:d9:ce:26:98:86:e4:fc:5b:62:5c:2d:11:54:ee:
4f:6b:f5:7b:2b:c5:f6:c1:a1:a9:8e:29:db:51:45:
5a:7e:69:19:d9:3e:cc:62:0d:5f:6b:a3:4b:18:8f:
84:f9:ec:cd:bf:a1:ac:af:95:4c:b8:d5:32:32:0c:
63:cc:8b:eb:50:76:55:0a:70:6b:7c:b1:fa:d5:ca:
13:88:15:48:b9:17:f9:02:4b:10:a2:79:fa:c1:bf:
0b:5b:ef:9f:b8:79:0a:98:e3:27:ef:23:ed:9f:1e:
a1:71:f7:78:59:dd:d8:8d:88:f0:bd:c4:39:11:89:
89:e2:0a:a9:83:85:2b:27:fe:cf:6e:ef:e8:3c:ed:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:82:94:E0:5B:8B:DB:F6:2A:EE:BA:1F:47:C6:D1:DB:DE:53:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhyClOBbi9v2Ku66H0fG0dveU_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:87:e2:41:fe:d3:6d:16:1e:9f:dd:15:c6:2e:85:80:d4:2d:
ce:b3:f3:6b:45:e7:c6:82:72:6b:0d:82:4e:d6:6c:05:83:d2:
c7:e4:3d:12:ac:de:34:08:5c:de:85:b9:39:f6:e2:49:1d:e5:
0c:98:95:89:79:5f:55:e7:b0:9f:4f:92:2b:40:05:58:a8:78:
2f:c3:69:2e:2b:55:57:f4:2c:c5:c7:05:ca:a6:99:d9:c3:d3:
c6:37:e3:59:2e:b5:9e:ec:a8:8d:b2:07:1f:55:98:e6:38:91:
e2:70:24:7d:34:1d:a0:80:51:c0:c5:44:70:34:3d:18:74:40:
7f:98:60:b2:50:b5:01:49:b0:fb:6f:04:b5:72:ff:1c:45:7b:
8c:d4:cc:dc:66:a8:2c:d8:21:3f:08:7b:40:33:65:c3:0b:e0:
9e:33:e4:d6:fc:7d:7e:c0:e9:d9:0a:e5:d4:7a:2c:77:c8:24:
50:84:09:94:a4:e1:c0:f8:73:97:e2:fd:5e:15:69:04:f3:e2:
41:59:44:d3:e6:b8:9c:3d:f7:56:78:d6:3d:71:bf:63:77:43:
a0:7d:6b:63:c0:b4:30:5c:b8:fe:a0:50:4e:a7:19:54:23:8d:
56:e3:c0:5e:03:84:cf:7d:fb:8c:42:11:68:01:d4:9d:e5:9c:
ef:24:5e:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbRdGvgxRnq7sBuxJWAvnL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzExMTYxNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjFjODI5NGUwNWI4YmRiZjYyYWVlYmExZjQ3YzZkMWRiZGU1M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpsBAPBxKp9DQMI/O5qczozhZPid
VAI0wPYWDYb8wW0TsPN36MBlcWB/IdqnlKgAa1xRHiKilH8j/Hfbc2Z0mPtVrgVw
eh1rrUDyy6LW7FLaXuIJ0xE5Okf+4on5T1GKkykgYKHszB72rrRRdBeS3e33l1uO
cgXH2c4mmIbk/FtiXC0RVO5Pa/V7K8X2waGpjinbUUVafmkZ2T7MYg1fa6NLGI+E
+ezNv6Gsr5VMuNUyMgxjzIvrUHZVCnBrfLH61coTiBVIuRf5AksQonn6wb8LW++f
uHkKmOMn7yPtnx6hcfd4Wd3YjYjwvcQ5EYmJ4gqpg4UrJ/7Pbu/oPO3xcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIYcgpTgW4vb9iruuh9HxtHb3lP9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaGh5Q2xPQmJpOXYyS3U2NkgwZkcwZHZlVV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADiH4kH+020WHp/dFcYu
hYDULc6z82tF58aCcmsNgk7WbAWD0sfkPRKs3jQIXN6FuTn24kkd5QyYlYl5X1Xn
sJ9PkitABVioeC/DaS4rVVf0LMXHBcqmmdnD08Y341kutZ7sqI2yBx9VmOY4keJw
JH00HaCAUcDFRHA0PRh0QH+YYLJQtQFJsPtvBLVy/xxFe4zUzNxmqCzYIT8Ie0Az
ZcML4J4z5Nb8fX7A6dkK5dR6LHfIJFCECZSk4cD4c5fi/V4VaQTz4kFZRNPmuJw9
91Z41j1xv2N3Q6B9a2PAtDBcuP6gUE6nGVQjjVbjwF4DhM99+4xCEWgB1J3lnO8k
Xmg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:12 2025 by rpki-client