Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwHzx-n6PsCGuTcmRR0H_wCX2SM.roa
File: hwHzx-n6PsCGuTcmRR0H_wCX2SM.roa (raw, json)
Hash identifier: 825S43h/4DotEf7kLPEdQlH+AHMmCB/qy131vpJ2U3E=
Subject key identifier: 87:01:F3:C7:E9:FA:3E:C0:86:B9:37:26:45:1D:07:FF:00:97:D9:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874AB0835286FDE60C271D4D801D0952EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwHzx-n6PsCGuTcmRR0H_wCX2SM.roa
Signing time: Tue 04 Apr 2023 05:14:54 +0000
ROA not before: Tue 04 Apr 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:b0:83:52:86:fd:e6:0c:27:1d:4d:80:1d:09:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8701f3c7e9fa3ec086b93726451d07ff0097d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:25:fa:cb:79:17:5e:46:95:38:d9:cb:28:
9c:d1:4a:45:0a:2f:09:94:37:60:64:13:22:e1:40:
28:73:41:85:f3:9c:b8:3f:21:d4:c5:56:b5:60:1a:
84:07:eb:80:80:f5:cd:71:e4:ae:0d:3c:35:c0:58:
5a:3b:d5:f6:39:50:10:f0:3b:c0:55:e1:65:ba:80:
b0:99:14:2c:5b:1e:0c:de:69:28:a2:37:32:3c:39:
25:a2:cd:a9:7f:11:0d:a9:88:df:4e:17:dd:fe:c5:
67:27:b9:e3:86:da:74:e3:3c:75:00:d9:f9:83:a2:
1a:7c:4b:ec:dd:ef:e8:6b:27:cd:08:b6:82:cf:d7:
15:1c:31:ba:47:7c:44:6c:64:58:fb:7c:1f:14:dd:
4c:61:98:ad:7a:9e:51:5b:a6:8f:2d:9f:04:c7:2b:
34:86:5d:95:ef:dd:c0:df:21:a6:e2:05:5e:61:f7:
05:42:7c:b7:9e:6f:d3:c0:83:7b:21:0f:0f:39:69:
63:ce:ab:b9:4c:85:f2:05:68:9e:6e:de:58:e9:f2:
56:e2:2c:00:3e:57:00:d1:b4:75:87:46:fe:5b:95:
9e:a8:c5:4f:bc:f6:85:46:93:66:2b:ea:5b:76:37:
05:16:9b:35:cb:7c:3b:65:1f:03:0a:a9:98:9b:fa:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:F3:C7:E9:FA:3E:C0:86:B9:37:26:45:1D:07:FF:00:97:D9:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwHzx-n6PsCGuTcmRR0H_wCX2SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ba:c4:fc:d6:a4:83:f6:20:45:4b:58:1f:cd:ec:a1:6d:3d:
28:09:68:01:e0:34:16:8e:8f:28:c1:c3:cd:ae:a3:79:58:35:
81:9d:50:f7:29:4e:fd:67:fc:89:7a:95:38:9c:26:0e:c9:d8:
15:76:b0:3f:f6:dc:53:75:af:aa:27:89:dd:1f:48:14:f7:93:
87:a1:b7:4b:ce:ff:95:62:c6:08:4d:03:b1:8b:a2:a6:4e:50:
ed:6d:a7:27:6d:e2:fb:2c:25:68:f6:0b:7f:4f:df:20:0f:b6:
c2:4f:e1:61:18:3c:4b:2b:29:57:72:5e:15:c7:b6:d5:39:98:
13:b2:8c:27:d6:0d:4b:ff:0a:76:4e:2c:43:b0:8a:19:9a:be:
f1:06:78:3b:88:94:5f:37:8c:8f:b7:51:e2:cd:3d:f1:fe:a2:
ea:e1:56:61:5d:84:8e:70:bc:1f:58:57:01:08:ae:f9:98:4d:
78:ae:b3:5a:bb:eb:42:b8:6b:92:a1:67:d7:59:b7:17:44:6a:
cf:2f:19:2a:7b:fa:b2:ec:fe:d2:38:75:fb:1c:5e:39:39:0b:
60:cd:07:24:2b:3c:ed:cf:10:45:5e:dc:7c:23:83:64:dc:31:
34:b8:e5:0d:d2:08:92:d7:b1:38:a0:de:37:bd:78:ed:cb:ef:
33:e5:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:51 2025 by rpki-client