Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hs2T8LdZ6oG0jDvI_ReuiI9Olns.roa
File: hs2T8LdZ6oG0jDvI_ReuiI9Olns.roa (raw, json)
Hash identifier: PaSGCyzKRwg2lznb4gcRK6TUDeJ0ZXKt2uizAH9uHaw=
Subject key identifier: 86:CD:93:F0:B7:59:EA:81:B4:8C:3B:C8:FD:17:AE:88:8F:4E:96:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821C62A61CDF6900814CD4FBCD1488A544
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hs2T8LdZ6oG0jDvI_ReuiI9Olns.roa
Signing time: Wed 20 Jul 2022 16:13:23 +0000
ROA not before: Wed 20 Jul 2022 16:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:62:a6:1c:df:69:00:81:4c:d4:fb:cd:14:88:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 16:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86cd93f0b759ea81b48c3bc8fd17ae888f4e967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:d1:3d:fe:25:4a:a3:ac:9b:7f:77:76:8d:
c4:05:4b:1d:75:a5:fd:b6:8e:13:1f:4e:5b:a3:43:
62:ec:bb:af:21:22:6a:15:2d:b7:71:5f:35:55:f2:
33:d7:22:ff:a1:e1:bd:b3:0c:1b:15:b0:56:4b:a1:
a0:55:07:a1:e0:e0:ae:c9:59:68:ce:75:25:85:5a:
14:d2:35:93:24:a3:63:8a:bf:97:92:7a:05:e3:ca:
ac:6c:68:81:00:30:43:bb:72:6b:2b:d2:ec:e0:68:
1d:f1:ec:10:cd:6e:f4:d7:e9:af:c2:fd:ce:6c:0d:
40:35:b4:31:dd:97:35:cf:27:ce:00:8b:e4:52:5c:
4b:4f:c8:c3:85:16:b1:d0:e8:10:05:36:86:6d:0e:
cc:92:5c:64:c3:c0:95:55:a6:22:09:08:17:49:46:
95:6b:d9:e5:26:f8:6b:4f:1d:dc:67:52:e3:69:77:
fa:31:37:cb:48:fe:9b:4a:36:4d:c6:c5:3e:13:a3:
03:95:52:75:b3:54:87:0b:38:0b:b7:f3:9b:71:47:
e0:e4:7c:7a:84:1f:6b:3b:fb:bb:1b:77:64:b2:48:
08:02:0c:7f:0e:c3:55:df:b5:48:fd:1f:fa:ac:77:
a3:41:95:f0:b7:52:99:7c:47:ea:48:4b:e1:aa:cf:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:93:F0:B7:59:EA:81:B4:8C:3B:C8:FD:17:AE:88:8F:4E:96:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hs2T8LdZ6oG0jDvI_ReuiI9Olns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:82:24:20:b6:b3:b0:39:eb:c2:ee:84:82:a6:da:ad:87:ab:
45:06:15:76:97:a3:bb:5f:09:a5:9b:23:58:d2:89:a3:a5:40:
34:01:b6:c2:23:d3:83:35:fb:d5:fc:84:f1:ff:33:94:70:96:
88:53:c7:36:17:0c:56:48:bf:d5:ee:62:3c:c3:d8:90:e3:e9:
bb:04:33:12:33:43:ea:d8:5e:5b:9f:d8:c1:54:28:48:a9:54:
5f:25:b1:e9:16:b4:dd:58:b3:37:cb:4f:90:3e:76:0b:f7:13:
8f:eb:57:a0:76:99:31:8d:c0:7f:9f:8b:a0:3f:b0:41:f0:dc:
10:7f:45:6c:d9:df:04:a3:02:af:1c:0c:22:e8:cb:0c:a4:30:
80:31:d0:22:4e:07:0b:7a:9a:4c:7e:59:1d:04:72:80:e1:fa:
6b:32:81:41:ef:40:3d:a9:aa:eb:fd:b0:79:ef:ec:61:5c:e5:
73:52:41:9d:9c:56:fc:91:d1:ab:0c:34:41:cd:43:74:a3:2e:
ff:3d:f5:e7:7f:0f:28:79:c0:4e:ac:f9:f4:8b:48:ca:ae:7c:
ff:83:ec:46:e3:6f:31:ac:a4:f7:61:bd:7a:ee:2a:46:0a:da:
a3:5c:29:87:28:6d:19:57:4a:38:bb:dc:e7:66:e4:4c:4c:94:
d3:30:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:21 2025 by rpki-client