Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hm5v-bapbfr6Ak80PQOHd4MyoxA.roa
File: hm5v-bapbfr6Ak80PQOHd4MyoxA.roa (raw, json)
Hash identifier: LXPEorU4TDkuQURmZSY9LleQH9PyBNZMHo3T6HxjpLk=
Subject key identifier: 86:6E:6F:F9:B6:A9:6D:FA:FA:02:4F:34:3D:03:87:77:83:32:A3:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854B8C92ACDD583F561CDA616C8D09FE00
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hm5v-bapbfr6Ak80PQOHd4MyoxA.roa
Signing time: Sun 25 Dec 2022 23:09:41 +0000
ROA not before: Sun 25 Dec 2022 23:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4b:8c:92:ac:dd:58:3f:56:1c:da:61:6c:8d:09:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 23:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=866e6ff9b6a96dfafa024f343d0387778332a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:72:3a:1b:69:4f:61:91:2c:0b:a3:93:52:
2c:dc:31:5c:2f:38:5b:9d:f6:40:1e:75:fb:0a:f9:
15:e1:a1:ae:0d:15:63:e2:39:b3:a3:0f:e5:c8:37:
54:20:5d:47:01:aa:84:8d:fd:4e:2d:4d:61:2e:9f:
05:cd:10:92:9b:50:1f:83:85:cd:59:7f:ed:6c:53:
31:c9:05:3e:f4:c2:3b:36:79:65:f8:cd:98:7d:07:
8f:87:3a:9a:b1:d9:13:67:98:1e:07:f5:db:4b:ac:
c2:e0:70:c7:de:e4:b8:4d:e7:49:04:c5:53:c0:8e:
72:d6:58:35:a3:8e:f3:64:45:0e:9a:0a:8f:38:0a:
ab:b4:f3:d1:aa:3f:6b:2b:e7:dd:51:ec:8d:e3:b2:
13:a1:15:e6:c9:d3:40:00:49:cb:ca:8c:50:59:f2:
8b:8b:1b:75:88:dc:88:d5:44:fe:38:b2:c2:2a:51:
ed:8a:65:84:9e:3e:31:fd:cb:91:bd:75:b0:85:b6:
ec:e7:f2:fb:f0:af:7c:f2:58:14:db:a4:f0:c7:40:
83:ba:a5:04:f1:3d:df:92:99:f9:50:d8:85:72:a0:
ce:37:39:0b:f1:c9:72:61:fe:d4:cb:d3:c2:a3:a0:
e7:0c:f9:a9:32:43:02:58:66:16:f6:b2:2e:3c:db:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:6F:F9:B6:A9:6D:FA:FA:02:4F:34:3D:03:87:77:83:32:A3:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hm5v-bapbfr6Ak80PQOHd4MyoxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b8:52:c3:4a:3c:aa:c3:3a:ac:d8:ef:7d:2a:be:2e:4f:05:
c5:d8:a6:d3:15:a2:11:a6:eb:99:8a:29:37:16:0b:20:be:ac:
1d:1a:1a:8a:5a:bf:45:9b:a7:2c:b2:f5:ca:dd:37:c6:33:29:
b7:92:0d:ec:7a:6a:77:8e:93:40:55:db:96:7c:a6:dc:65:5f:
32:9e:58:57:34:51:a9:70:4f:38:fb:b9:d1:06:a4:80:7c:fd:
1b:55:d6:9c:c8:fa:3e:09:05:cf:b3:69:83:95:eb:51:3d:35:
dd:c6:38:21:46:26:c9:83:6f:ed:58:11:b7:57:a1:fe:b8:8e:
e9:9a:2c:82:96:09:07:87:58:c5:c5:09:eb:41:cd:eb:9d:f6:
d6:31:74:b6:46:c9:98:f2:d6:ef:54:21:d1:02:f7:db:12:d9:
94:52:e6:d0:bb:42:ba:eb:4d:02:fb:4a:e2:04:c0:96:30:26:
5d:c2:26:6a:65:e7:c8:07:4a:e0:07:7b:7b:cd:ed:80:73:84:
c7:13:6b:98:e0:d8:08:3b:1f:4b:d1:fa:5b:58:df:63:37:52:
ca:98:10:ee:9f:36:f3:b4:6d:a7:23:fe:3c:53:fc:88:ed:b4:
4c:b7:ba:85:e4:6a:32:fb:ac:71:f5:b0:ee:47:6f:4c:75:d0:
3c:71:95:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVLjJKs3Vg/VhzaYWyNCf4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI1MjMwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjZlNmZmOWI2YTk2ZGZhZmEwMjRmMzQzZDAzODc3NzgzMzJhMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiklyOhtpT2GRLAujk1Is3DFcLzhb
nfZAHnX7CvkV4aGuDRVj4jmzow/lyDdUIF1HAaqEjf1OLU1hLp8FzRCSm1Afg4XN
WX/tbFMxyQU+9MI7Nnll+M2YfQePhzqasdkTZ5geB/XbS6zC4HDH3uS4TedJBMVT
wI5y1lg1o47zZEUOmgqPOAqrtPPRqj9rK+fdUeyN47IToRXmydNAAEnLyoxQWfKL
ixt1iNyI1UT+OLLCKlHtimWEnj4x/cuRvXWwhbbs5/L78K988lgU26Twx0CDuqUE
8T3fkpn5UNiFcqDONzkL8clyYf7Uy9PCo6DnDPmpMkMCWGYW9rIuPNtB4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIZub/m2qW36+gJPND0Dh3eDMqMQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaG01di1iYXBiZnI2QWs4MFBRT0hkNE15b3hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEi4UsNKPKrDOqzY730q
vi5PBcXYptMVohGm65mKKTcWCyC+rB0aGopav0Wbpyyy9crdN8YzKbeSDex6aneO
k0BV25Z8ptxlXzKeWFc0UalwTzj7udEGpIB8/RtV1pzI+j4JBc+zaYOV61E9Nd3G
OCFGJsmDb+1YEbdXof64jumaLIKWCQeHWMXFCetBzeud9tYxdLZGyZjy1u9UIdEC
99sS2ZRS5tC7QrrrTQL7SuIEwJYwJl3CJmpl58gHSuAHe3vN7YBzhMcTa5jg2Ag7
H0vR+ltY32M3UsqYEO6fNvO0bacj/jxT/IjttEy3uoXkajL7rHH1sO5Hb0x10Dxx
lX8=
-----END CERTIFICATE-----
Generated at Thu May 1 01:58:24 2025 by rpki-client