Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hmXGlaT07NBjTfhVfjwtqhZcLyg.roa
File: hmXGlaT07NBjTfhVfjwtqhZcLyg.roa (raw, json)
Hash identifier: +RscvAy6dIwTJ9/HgmQLbBZzKLSQPHsJDnoGYz9xhok=
Subject key identifier: 86:65:C6:95:A4:F4:EC:D0:63:4D:F8:55:7E:3C:2D:AA:16:5C:2F:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0EC8A468D1EBAA64A4641B1327CE8DC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hmXGlaT07NBjTfhVfjwtqhZcLyg.roa
Signing time: Sat 19 Aug 2023 17:12:24 +0000
ROA not before: Sat 19 Aug 2023 17:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:c8:a4:68:d1:eb:aa:64:a4:64:1b:13:27:ce:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 17:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8665c695a4f4ecd0634df8557e3c2daa165c2f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:ae:fe:ce:01:e8:ab:85:2d:62:45:b3:8b:
19:7d:51:42:e1:68:d6:e5:dd:6a:ea:d4:8b:8d:88:
cc:3c:17:16:cb:cc:7b:a7:a4:aa:c0:f0:1c:fe:b3:
37:cb:03:94:28:cc:a8:74:f8:fa:2d:fc:2b:45:08:
5d:64:bb:8c:5c:49:5b:16:b3:6c:ab:35:ae:f1:4e:
12:83:13:36:22:0c:2d:49:fc:fa:7a:77:f2:07:10:
2d:d0:27:45:48:cd:6b:87:96:84:3f:28:78:1f:4b:
37:55:b7:6e:c1:ac:66:51:71:10:9d:11:be:7b:97:
bd:1e:b9:c7:c4:49:5b:4b:f9:8a:38:cb:cb:e5:af:
c3:0f:e7:a7:50:72:95:14:1f:fa:af:b3:c4:f7:ad:
50:fe:17:f9:68:27:bf:b4:de:68:e5:dc:27:88:64:
4a:80:0c:f3:b2:b0:a3:b0:16:15:45:22:a2:e9:b6:
fd:8c:f4:a5:73:36:d8:71:ff:f1:ec:87:61:91:e8:
bc:4f:e9:70:b6:81:6f:9c:98:74:34:45:f1:9d:d8:
fd:aa:74:18:0d:71:46:9d:e3:5d:c3:10:45:f2:c3:
45:40:d2:f2:74:52:4c:b2:ea:bd:6e:28:50:ab:29:
a5:6e:81:e9:1a:c1:31:bd:44:5e:cc:6d:f2:b0:26:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:C6:95:A4:F4:EC:D0:63:4D:F8:55:7E:3C:2D:AA:16:5C:2F:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hmXGlaT07NBjTfhVfjwtqhZcLyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:a9:34:73:a0:59:fc:b8:e4:e1:85:f2:3f:23:df:ea:87:e5:
4a:b5:79:51:b2:07:e1:86:39:52:d7:7e:a6:55:e2:02:40:e9:
34:db:00:1d:60:d8:00:14:6b:9f:82:5c:87:b5:82:bc:82:fe:
39:ca:7c:e8:c7:f1:71:79:6a:ab:46:39:10:3b:e2:30:97:d4:
87:cc:81:2e:f5:50:a1:d0:eb:93:41:4e:bf:d1:68:9e:c5:3f:
4f:88:76:18:40:49:cc:b0:53:3c:7a:f5:38:cf:02:4f:61:61:
c9:d5:05:d3:cb:10:53:b9:70:ae:17:f5:82:34:08:11:76:4a:
c8:98:47:bb:59:3c:fe:1b:19:2d:4c:93:4b:95:ff:aa:24:3b:
3b:ba:93:77:cf:c6:6f:e6:bb:9a:8a:2f:1e:9d:59:76:0f:b1:
dd:5b:91:d7:bb:a9:2c:42:d1:8d:d2:80:0d:2b:a1:c9:15:6e:
55:23:7a:9a:30:fd:2e:66:c1:f8:e3:51:4e:d8:57:e9:1f:b7:
8c:b0:9e:81:64:d8:59:34:c6:2e:b8:e0:ac:36:70:6b:41:22:
aa:fa:16:93:ca:b5:d5:f1:5f:b5:33:ce:55:f5:48:4b:ca:4a:
3c:4a:98:cd:82:b6:d8:25:7f:1f:6d:77:8e:5d:96:8f:31:85:
c1:0f:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:36 2025 by rpki-client