Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hto56Qo0eUC6m-SOLRdpWThIEOw.roa
File: hto56Qo0eUC6m-SOLRdpWThIEOw.roa (raw, json)
Hash identifier: U15AFeDGUtFMyNnWZlspDnd/HeExauY/X8rrGZDEaLs=
Subject key identifier: 86:DA:39:E9:0A:34:79:40:BA:9B:E4:8E:2D:17:69:59:38:48:10:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66329198
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hto56Qo0eUC6m-SOLRdpWThIEOw.roa
Signing time: Sat 29 Jan 2022 22:10:23 +0000
ROA not before: Sat 29 Jan 2022 22:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714590104 (0x66329198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 22:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86da39e90a347940ba9be48e2d176959384810ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:67:db:b6:29:7b:3b:b5:33:b0:9f:8b:19:
18:5b:28:82:bb:15:c3:09:29:30:75:09:d6:eb:3c:
a2:9b:4e:c4:3e:1c:35:95:92:ff:14:f1:f0:91:ad:
47:61:0e:11:6e:93:79:eb:3b:4e:e2:c6:2e:c9:ac:
b0:eb:04:06:f7:9b:c3:91:83:4e:f3:ff:af:58:f1:
00:18:cd:21:95:db:86:cb:43:e6:3c:27:1d:61:e5:
f0:1d:a1:f6:88:b3:af:4e:d1:58:a3:95:fe:b9:65:
08:83:77:7f:22:e0:0a:5f:aa:23:de:b7:11:4b:1c:
a5:2c:82:92:ae:4c:38:30:18:ae:ed:50:55:c8:28:
16:00:19:8c:30:72:af:22:81:a7:ab:d0:b9:af:3d:
6a:f6:bb:7e:f4:c0:27:bd:ba:fd:44:fd:01:38:2b:
0c:88:e5:9b:ba:78:9e:72:52:b0:72:f4:b4:37:05:
0f:e0:57:51:6e:6e:08:08:33:6b:df:7b:e6:51:f4:
89:f4:45:90:97:ee:d6:85:bc:1d:ca:b3:68:0d:75:
f8:63:48:51:40:f4:b3:90:df:b9:cb:2e:1c:0e:d2:
81:32:c2:e6:6e:b6:30:7a:31:0a:1a:e7:d7:af:5a:
0f:a0:83:4f:82:ac:6c:a4:1f:cc:4f:d6:15:5c:6c:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DA:39:E9:0A:34:79:40:BA:9B:E4:8E:2D:17:69:59:38:48:10:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hto56Qo0eUC6m-SOLRdpWThIEOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:c5:f1:0c:45:61:3c:16:29:51:aa:43:1b:b8:e6:74:33:0d:
03:a2:0d:57:05:94:e0:4f:be:49:a8:8c:d9:19:26:45:7a:38:
6d:ac:05:b1:d8:88:5a:27:fc:74:10:ff:a6:a4:1d:20:01:ef:
e2:92:f3:98:17:f8:bc:13:9b:8b:06:04:20:ff:31:d4:f5:95:
2d:0d:2f:05:dd:6a:ff:4f:66:90:a9:e3:00:c7:e1:67:e8:30:
7b:78:3f:96:35:bf:0f:08:25:1f:3d:0f:ae:dd:20:8a:ce:2b:
45:4b:4a:77:0d:85:56:1c:1b:a4:1e:08:94:27:02:7e:c4:72:
cd:74:c6:0a:da:f0:fa:d4:62:33:54:16:84:eb:17:50:0b:98:
1d:ff:d1:a9:16:7f:7d:ba:60:e1:de:ae:f1:a1:74:8a:e9:9e:
bb:af:71:46:3f:ae:c0:7d:b9:ff:2c:08:6a:27:03:d6:2c:41:
5c:b0:70:48:9f:cf:22:26:86:04:37:0e:21:49:ad:a9:d3:3a:
91:af:98:cb:50:7c:8c:1e:a6:1a:bc:6c:4d:eb:d9:3d:38:5e:
46:73:a9:cc:79:93:53:82:0d:f5:ee:2f:6f:41:e3:3f:24:30:
d2:dc:4a:a1:78:7d:9c:a7:cf:b2:fb:e5:44:af:f9:ad:3f:b6:
74:28:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:53:11 2025 by rpki-client