Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hvJqv3S_rHj2GN1MP8oEy5tujzE.roa
File: hvJqv3S_rHj2GN1MP8oEy5tujzE.roa (raw, json)
Hash identifier: JyhCK1XWr/UmEyRgiEL29qPCXBeVoVHaO1yvVef0oQI=
Subject key identifier: 86:F2:6A:BF:74:BF:AC:78:F6:18:DD:4C:3F:CA:04:CB:9B:6E:8F:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899141A97E68B939D7046F4AEA0597272F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hvJqv3S_rHj2GN1MP8oEy5tujzE.roa
Signing time: Wed 26 Jul 2023 08:12:26 +0000
ROA not before: Wed 26 Jul 2023 08:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:41:a9:7e:68:b9:39:d7:04:6f:4a:ea:05:97:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 08:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86f26abf74bfac78f618dd4c3fca04cb9b6e8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8c:ea:75:ae:59:d6:74:d8:0a:bf:6c:37:c5:
10:de:43:63:c6:ea:27:a8:9e:80:f6:d0:95:d6:98:
b1:86:29:3d:bd:67:55:37:eb:b6:cb:09:24:7e:90:
59:6c:5a:93:13:50:04:e9:49:5f:2c:95:2e:f7:ee:
6e:6f:a2:65:38:ba:95:e7:77:29:17:46:1b:70:e7:
11:e5:19:a6:f2:cf:55:1c:63:e4:84:10:f4:e6:03:
7c:20:12:c9:1e:4d:db:98:9b:aa:e6:30:90:4d:3b:
95:52:3d:41:30:bc:e3:79:db:7e:bd:84:49:e2:bc:
64:19:00:44:d6:a7:51:44:d9:4d:5f:d5:87:ff:ec:
71:fd:9b:61:8d:59:56:11:25:c3:f0:a1:5b:77:6c:
e0:2d:f0:4b:32:f9:28:fb:9a:bf:09:17:87:76:c8:
4c:30:16:78:80:75:28:3c:32:a2:cf:a7:78:03:44:
e9:4e:dd:13:93:16:0f:c2:04:b8:7d:89:7c:fc:b9:
1a:d2:da:ef:a8:cf:bf:18:6a:81:fd:68:f3:5b:03:
a6:fb:54:76:d2:1d:39:af:3a:83:da:1f:33:69:a5:
46:5d:5f:ff:75:4e:fb:a4:47:5b:ee:8e:3e:7a:45:
9c:72:17:9c:64:c8:5e:8f:9a:8d:43:66:ac:94:23:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:6A:BF:74:BF:AC:78:F6:18:DD:4C:3F:CA:04:CB:9B:6E:8F:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hvJqv3S_rHj2GN1MP8oEy5tujzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:f4:37:fd:6a:5a:b8:1e:33:e9:0a:74:07:55:92:75:a1:72:
a5:8c:4b:7d:c7:61:bd:42:e1:76:55:58:13:bb:d4:43:02:b3:
e6:2b:5f:dc:bf:5a:cc:b4:87:a4:8c:75:e4:fc:19:46:33:84:
00:e0:dc:4e:ab:63:7c:22:41:1a:cb:bc:cf:7e:ec:60:15:eb:
25:86:f2:ae:44:6b:3e:f8:c6:c6:ce:2b:9b:d5:c2:de:e8:a9:
11:c0:d8:b6:d3:b7:cb:d9:a9:13:8b:7e:43:9e:92:5b:e9:63:
d8:8e:94:0f:a8:96:6a:00:65:61:08:43:76:a5:0e:f9:85:09:
13:f1:5b:b5:5f:31:9d:b0:cc:e6:68:87:ab:87:94:0f:f7:86:
80:1a:c4:cb:1e:96:ac:40:0c:37:16:2f:87:21:ad:58:6a:0c:
6d:e0:a4:ef:d8:3f:6e:20:7c:95:a3:24:c8:a8:a0:3b:95:ed:
bf:17:af:05:cf:35:ef:df:0d:a6:c0:39:e3:a8:a5:62:f3:4b:
00:6f:11:05:d0:b8:62:34:d1:69:28:42:ac:c4:e9:03:99:1a:
a4:0e:cc:fb:7a:41:7a:79:d5:c9:6d:80:e7:b6:44:05:89:4f:
8b:ea:2c:0f:a4:d0:ce:02:50:aa:79:c2:88:12:20:bb:02:82:
cd:28:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:21 2025 by rpki-client