Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwSuprA0YxsWvWo6DNQSB5gRkOo.roa
File: hwSuprA0YxsWvWo6DNQSB5gRkOo.roa (raw, json)
Hash identifier: CEe4uBZqZGqB0JhcUD9UBfJaQdrM6S8EW1Tuly+uffM=
Subject key identifier: 87:04:AE:A6:B0:34:63:1B:16:BD:6A:3A:0C:D4:12:07:98:11:90:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FBEE799B2126CAED8A166C509CBE87D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwSuprA0YxsWvWo6DNQSB5gRkOo.roa
Signing time: Sun 29 Jan 2023 05:09:48 +0000
ROA not before: Sun 29 Jan 2023 05:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fb:ee:79:9b:21:26:ca:ed:8a:16:6c:50:9c:be:87:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 05:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8704aea6b034631b16bd6a3a0cd41207981190ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:1f:36:2a:5e:10:4d:44:12:65:56:47:7d:
f8:f6:a8:d7:7c:a7:3f:5b:e9:69:82:d6:9f:4c:ef:
03:67:c4:dc:9f:34:2f:7a:15:13:b4:41:9e:bc:78:
50:52:ea:5c:7a:93:84:5a:ed:87:ac:28:90:c2:37:
cf:d5:2a:af:ea:67:63:5f:da:09:20:17:e4:21:b5:
0f:04:4d:8a:97:33:7d:5b:5a:96:0d:ff:d7:a8:0a:
6a:28:21:94:64:3a:bf:8c:ac:19:f6:98:75:ca:fb:
97:7d:05:50:73:d0:78:1c:24:0c:f0:cf:0e:51:99:
35:ab:49:7c:60:ae:8e:d3:e3:af:4a:f4:06:a5:9b:
2b:83:1a:72:fd:dd:b0:28:5c:d8:40:7d:16:de:f6:
86:19:ff:10:63:b0:70:8e:44:53:5f:91:79:32:0a:
1e:d5:f4:a8:70:b5:a5:21:54:28:b1:4a:12:5b:79:
9b:14:4b:79:f3:a7:9b:24:6b:84:61:ba:5a:7a:a6:
d2:11:fe:1d:12:45:ac:af:b3:b9:8a:e5:18:db:62:
c2:58:a6:f3:ce:b9:18:01:d1:3f:66:52:44:ee:2e:
99:23:7c:3c:8a:44:b7:ad:2b:d7:ae:a1:e0:c3:49:
06:f3:7d:68:47:d6:6e:06:01:ab:f3:03:fd:92:8d:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:AE:A6:B0:34:63:1B:16:BD:6A:3A:0C:D4:12:07:98:11:90:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwSuprA0YxsWvWo6DNQSB5gRkOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:a8:69:be:a2:c7:ee:e9:6a:89:32:3f:be:36:15:f0:d8:4e:
0b:be:cf:c8:9c:a7:6d:a5:fd:37:5c:74:7c:2b:9d:07:1c:6a:
90:82:ab:89:4f:74:8e:0b:75:75:56:e5:e6:16:31:a1:95:29:
3b:9c:6a:32:f2:cc:ee:7e:2a:a9:90:df:60:f8:87:a9:78:3a:
2b:58:60:08:6c:e4:c9:38:26:ad:9e:84:28:d3:d2:63:a6:c5:
9a:42:2a:79:cf:a6:a3:9d:5e:50:24:57:2e:12:4f:8e:dd:45:
68:3f:a0:96:39:9a:2e:0c:40:20:26:df:5a:cc:22:3a:53:f3:
fb:4f:2b:56:53:ce:6f:99:30:0f:9e:38:58:93:f9:66:0a:cf:
b4:d1:35:f1:7b:92:87:00:e4:f0:f8:d9:5a:57:ec:8d:e5:23:
fc:60:9e:ec:ac:72:79:aa:d2:ac:6c:09:6e:a5:f8:5e:7b:c7:
d2:be:28:15:bb:f3:64:76:c4:53:6b:d4:e3:d1:23:ef:8f:96:
e0:d6:7e:52:a6:b7:51:e1:77:b7:f1:5e:be:1c:5a:0d:4a:d6:
12:32:a0:6a:2a:75:ae:ec:53:91:90:f1:38:22:c0:f1:b2:42:
f1:2d:92:67:68:72:d1:66:c0:ad:a6:4a:fd:be:66:b1:13:e9:
7c:cc:9b:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX77nmbISbK7YoWbFCcvofWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI5MDUwOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzA0YWVhNmIwMzQ2MzFiMTZiZDZhM2EwY2Q0MTIwNzk4MTE5MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdYfNipeEE1EEmVWR3349qjXfKc/
W+lpgtafTO8DZ8TcnzQvehUTtEGevHhQUupcepOEWu2HrCiQwjfP1Sqv6mdjX9oJ
IBfkIbUPBE2KlzN9W1qWDf/XqApqKCGUZDq/jKwZ9ph1yvuXfQVQc9B4HCQM8M8O
UZk1q0l8YK6O0+OvSvQGpZsrgxpy/d2wKFzYQH0W3vaGGf8QY7BwjkRTX5F5Mgoe
1fSocLWlIVQosUoSW3mbFEt586ebJGuEYbpaeqbSEf4dEkWsr7O5iuUY22LCWKbz
zrkYAdE/ZlJE7i6ZI3w8ikS3rSvXrqHgw0kG831oR9ZuBgGr8wP9ko21tQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIcErqawNGMbFr1qOgzUEgeYEZDqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaHdTdXByQTBZeHNXdldvNkROUVNCNWdSa09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIWoab6ix+7paokyP742
FfDYTgu+z8icp22l/TdcdHwrnQccapCCq4lPdI4LdXVW5eYWMaGVKTucajLyzO5+
KqmQ32D4h6l4OitYYAhs5Mk4Jq2ehCjT0mOmxZpCKnnPpqOdXlAkVy4ST47dRWg/
oJY5mi4MQCAm31rMIjpT8/tPK1ZTzm+ZMA+eOFiT+WYKz7TRNfF7kocA5PD42VpX
7I3lI/xgnuyscnmq0qxsCW6l+F57x9K+KBW782R2xFNr1OPRI++PluDWflKmt1Hh
d7fxXr4cWg1K1hIyoGoqda7sU5GQ8TgiwPGyQvEtkmdoctFmwK2mSv2+ZrET6XzM
m00=
-----END CERTIFICATE-----
Generated at Thu May 1 08:13:09 2025 by rpki-client