Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ht6aMqMieO8outIPhtC00yCTmC8.roa
File: ht6aMqMieO8outIPhtC00yCTmC8.roa (raw, json)
Hash identifier: oWvIvHpPZ8Btikt6mQJlM6Z+3jU54yQKNuZH+6fq24M=
Subject key identifier: 86:DE:9A:32:A3:22:78:EF:28:BA:D2:0F:86:D0:B4:D3:20:93:98:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 886C1C78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ht6aMqMieO8outIPhtC00yCTmC8.roa
Signing time: Mon 30 May 2022 09:11:13 +0000
ROA not before: Mon 30 May 2022 09:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288786552 (0x886c1c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 09:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86de9a32a32278ef28bad20f86d0b4d32093982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:9a:14:32:ea:9f:5d:f6:30:84:5e:3c:0c:
27:d9:e4:aa:a8:ba:89:0d:b2:9a:20:27:c5:e2:85:
b9:ec:3c:33:f9:69:4c:01:e7:a3:62:20:ac:cc:ef:
a5:28:ac:39:ca:09:13:dc:d4:9d:3c:68:43:95:81:
42:72:b4:9e:e1:cc:ca:f3:e5:79:8e:c6:ed:06:ea:
72:c4:bd:b2:e4:92:4a:b4:73:4c:e5:81:5f:f4:3c:
31:cc:36:64:7a:d0:3a:8a:c1:51:89:a6:31:e3:28:
03:ee:8b:b3:52:a4:bc:75:a3:ab:d9:44:9e:a2:46:
08:6f:12:f1:5d:62:d3:22:ac:30:ea:11:5e:c9:4e:
d3:7c:0d:36:e6:a8:68:27:2b:98:61:5b:90:b8:06:
fa:23:1d:66:26:66:6d:c3:ea:e7:87:43:ff:9b:35:
63:0f:61:d2:5d:87:87:df:81:71:e0:36:b6:b8:a2:
79:8c:f8:3a:e9:e6:d3:f0:2e:48:e8:6b:5f:55:69:
8f:43:7e:71:be:8d:10:f8:d3:2a:41:03:75:6a:75:
fa:59:47:f6:26:74:11:23:cc:a6:5b:40:79:80:76:
18:21:bf:95:ad:73:c9:0b:28:37:43:d2:06:13:b8:
45:55:a5:aa:7f:19:d0:88:93:66:6e:63:28:9e:3e:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:9A:32:A3:22:78:EF:28:BA:D2:0F:86:D0:B4:D3:20:93:98:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ht6aMqMieO8outIPhtC00yCTmC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:68:e4:11:a3:85:8e:77:6a:20:66:14:97:d8:08:eb:33:da:
db:49:f4:ce:15:40:ca:47:25:59:12:29:2c:35:0d:47:da:bb:
f3:2b:66:d3:e3:8a:44:56:01:ad:76:03:c3:f6:87:5b:b6:19:
cc:46:32:90:eb:59:9b:fa:53:9a:1f:0f:ad:87:f7:57:b5:4e:
5a:67:28:60:25:03:df:c1:7a:34:3e:b8:62:3b:5d:3f:96:b2:
a0:db:89:62:b5:b4:06:e2:7d:91:8f:fa:1d:b7:ed:26:7f:88:
f0:38:e3:b6:5a:6d:84:f8:1c:ff:ca:a3:47:c7:f3:9e:38:7f:
ad:c7:85:22:69:a2:ad:d3:4c:70:9c:33:bd:f9:36:79:a9:fd:
c0:d8:cd:b3:61:e0:e6:b7:af:92:fb:d1:37:0c:98:b1:cd:d2:
cc:62:fa:d5:7d:6c:66:b4:b9:ba:db:23:f6:18:df:b9:c1:e0:
b4:98:62:d6:c8:14:ad:05:8a:a7:1c:6e:70:45:d1:f0:4b:18:
ba:8e:43:60:41:01:3d:f1:22:6a:89:91:c0:e0:d1:2f:a5:59:
5b:81:f2:62:ab:21:1a:2b:ed:24:cc:ca:e4:b5:46:74:bb:02:
f1:c4:e4:3e:71:23:37:0f:cb:5d:3a:59:5d:2d:de:1b:f6:30:
a2:bf:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:59:41 2025 by rpki-client