Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hxs3yyu_sl7ctv-lvpcdqtig8Xo.roa
File: hxs3yyu_sl7ctv-lvpcdqtig8Xo.roa (raw, json)
Hash identifier: soiqVYNDyjvNJVPwLB5rKoZ9nlZZvX0vPdRW852JInk=
Subject key identifier: 87:1B:37:CB:2B:BF:B2:5E:DC:B6:FF:A5:BE:97:1D:AA:D8:A0:F1:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8222E07D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hxs3yyu_sl7ctv-lvpcdqtig8Xo.roa
Signing time: Sun 08 May 2022 07:04:52 +0000
ROA not before: Sun 08 May 2022 07:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:a27c:3985/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183323773 (0x8222e07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 07:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=871b37cb2bbfb25edcb6ffa5be971daad8a0f17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:d8:90:7d:35:24:40:7a:0a:45:7c:31:76:
f2:0a:d3:2e:77:b3:24:f4:81:52:f4:1b:96:95:6d:
38:61:ab:e7:25:a5:12:43:e7:56:bb:5f:38:98:af:
cc:ef:ed:3c:9a:5e:ca:93:10:13:51:c4:35:bd:80:
2f:fc:48:e8:a8:7c:52:2c:5a:4a:7e:58:29:a8:91:
22:1e:f4:33:18:f7:5e:e4:f8:d2:7e:81:c7:fd:65:
a1:a7:b9:3f:18:95:a8:9b:12:c1:3e:71:6f:d0:80:
89:2b:98:7c:f9:fb:31:11:4d:f8:2c:8c:67:57:b1:
db:ee:7f:70:68:a3:e2:f3:f5:5a:25:29:a9:4b:b6:
cf:ee:1f:b6:c1:ef:66:76:f2:7a:84:17:98:fd:4d:
6d:b1:97:ae:bd:be:b1:77:bb:09:c5:27:6b:bd:72:
2a:b7:7b:ad:2c:a1:f7:26:b3:89:8e:b7:c0:d7:99:
dd:31:96:43:54:49:96:7c:14:25:e7:2d:40:43:29:
48:6a:79:cb:56:bf:04:cf:60:ea:9e:c9:95:3c:f0:
00:c9:68:87:37:6e:3c:b3:d6:ee:2f:b3:67:ff:3c:
9e:1e:25:f2:a4:71:33:1f:35:12:e2:fb:98:16:47:
25:06:58:17:89:8b:8e:83:df:6a:ba:3b:c5:22:ba:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1B:37:CB:2B:BF:B2:5E:DC:B6:FF:A5:BE:97:1D:AA:D8:A0:F1:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hxs3yyu_sl7ctv-lvpcdqtig8Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:f0:1e:00:ed:25:0e:7f:68:0f:17:4e:c0:dc:54:21:d3:00:
ce:7d:da:df:45:37:0d:24:42:0d:9f:d7:81:e3:a6:81:c9:da:
13:ce:2b:9d:5d:a6:d8:10:b8:83:4b:1b:5a:78:d0:e7:00:d3:
c1:b1:01:88:39:43:a8:06:80:f6:6c:c9:6f:ee:4b:1a:b4:27:
cf:c0:0d:20:a5:50:f9:8a:6e:fa:08:04:78:77:e2:ab:01:bf:
a8:1c:95:09:03:c6:d3:51:e2:e7:a4:37:81:01:34:e3:29:09:
ca:64:70:3e:79:12:3a:f1:b5:4e:09:17:01:9b:16:74:62:27:
09:46:97:ba:b3:56:56:64:6f:a4:8b:78:08:cc:e2:07:b5:73:
d1:44:eb:08:d8:7f:7d:ef:31:c9:34:00:2c:2c:57:d6:ff:36:
fc:e1:4a:3e:ea:63:50:e2:b4:ea:4e:b6:8e:0d:8d:1c:47:dd:
5a:a3:8a:c8:cc:2e:4e:84:54:5c:0b:77:cb:55:9d:38:7d:bb:
aa:7f:e5:f2:31:34:c1:ae:54:b3:d2:03:cd:a4:b8:6c:6f:68:
e5:bd:5b:9b:1f:39:a3:a3:e8:cb:75:fe:db:bf:49:88:fa:91:
85:de:87:3d:17:ff:42:be:33:97:cd:4b:40:c5:80:3c:17:a1:
14:5e:08:d1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIIi4H0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDgwNzA0NTJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDg3MWIzN2NiMmJi
ZmIyNWVkY2I2ZmZhNWJlOTcxZGFhZDhhMGYxN2EwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuAtiQfTUkQHoKRXwxdvIK0y53syT0gVL0G5aVbThhq+cl
pRJD51a7XziYr8zv7TyaXsqTEBNRxDW9gC/8SOiofFIsWkp+WCmokSIe9DMY917k
+NJ+gcf9ZaGnuT8YlaibEsE+cW/QgIkrmHz5+zERTfgsjGdXsdvuf3Boo+Lz9Vol
KalLts/uH7bB72Z28nqEF5j9TW2xl669vrF3uwnFJ2u9ciq3e60sofcms4mOt8DX
md0xlkNUSZZ8FCXnLUBDKUhqectWvwTPYOqeyZU88ADJaIc3bjyz1u4vs2f/PJ4e
JfKkcTMfNRLi+5gWRyUGWBeJi46D32q6O8UiutytAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUhxs3yyu/sl7ctv+lvpcdqtig8XowHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9oeHMzeXl1X3NsN2N0di1sdnBjZHF0aWc4WG8ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAgvAeAO0lDn9oDxdOwNxUIdMAzn3a30U3DSRC
DZ/XgeOmgcnaE84rnV2m2BC4g0sbWnjQ5wDTwbEBiDlDqAaA9mzJb+5LGrQnz8AN
IKVQ+Ypu+ggEeHfiqwG/qByVCQPG01Hi56Q3gQE04ykJymRwPnkSOvG1TgkXAZsW
dGInCUaXurNWVmRvpIt4CMziB7Vz0UTrCNh/fe8xyTQALCxX1v82/OFKPupjUOK0
6k62jg2NHEfdWqOKyMwuToRUXAt3y1WdOH27qn/l8jE0wa5Us9IDzaS4bG9o5b1b
mx85o6Poy3X+279JiPqRhd6HPRf/Qr4zl81LQMWAPBehFF4I0Q==
-----END CERTIFICATE-----
Generated at Thu May 1 07:55:33 2025 by rpki-client