Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyA-ceYKOvD-tF5WrM32pZPa4HE.roa
File: hyA-ceYKOvD-tF5WrM32pZPa4HE.roa (raw, json)
Hash identifier: RlACUzLqtdipGgFJ/zkEOHDH7cBS5YCAgRsfTEsvB4c=
Subject key identifier: 87:20:3E:71:E6:0A:3A:F0:FE:B4:5E:56:AC:CD:F6:A5:93:DA:E0:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D1357EC0E4B13EA985169027F734FD19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyA-ceYKOvD-tF5WrM32pZPa4HE.roa
Signing time: Mon 19 Jun 2023 01:12:03 +0000
ROA not before: Mon 19 Jun 2023 01:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d1:35:7e:c0:e4:b1:3e:a9:85:16:90:27:f7:34:fd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 01:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87203e71e60a3af0feb45e56accdf6a593dae071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:e5:ac:eb:5c:ec:9e:b3:70:06:26:1a:fe:
fe:b3:ba:67:72:a5:ec:be:0d:cc:0e:72:8a:03:4f:
35:bd:17:1d:bd:6b:b2:c3:dd:81:dc:15:15:fd:37:
ad:d5:2e:95:35:c5:7c:4b:bb:20:ed:6e:a4:6c:a5:
1b:22:54:fd:ff:5c:f0:bc:69:57:6d:65:c1:80:11:
69:3b:df:0e:b4:48:f6:ab:d1:41:f1:b1:6a:6f:de:
9e:b5:c3:18:73:c3:b2:55:f6:e2:e8:18:ba:fa:13:
4b:ca:63:15:84:8b:8b:3f:55:a4:bb:d1:12:4c:1c:
f9:0c:82:34:a3:96:fb:fb:8f:7f:bf:41:26:55:76:
ca:b2:c1:2b:f9:62:d2:64:d3:a6:ca:c1:cd:2f:3e:
8b:45:eb:f0:dc:79:0f:74:8e:0f:c3:57:05:4c:37:
f4:c9:e0:77:6b:6f:79:71:93:f9:22:c5:0b:8f:ab:
3e:38:f2:af:a5:36:a6:ae:86:28:5d:f7:38:06:1e:
64:2e:bf:c5:a4:bb:96:5d:42:3d:f5:0d:2b:8d:b0:
66:ed:40:b4:92:73:1d:a3:82:d3:2c:ae:5a:06:93:
85:7f:fc:5a:d0:dc:59:54:ca:fd:46:cf:87:b5:ce:
90:d0:0e:67:77:ac:4b:7f:7b:a1:18:7a:52:d7:1c:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:3E:71:E6:0A:3A:F0:FE:B4:5E:56:AC:CD:F6:A5:93:DA:E0:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyA-ceYKOvD-tF5WrM32pZPa4HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:a9:1e:25:90:05:c7:28:2e:50:85:0c:61:ee:08:4a:2e:7d:
ed:09:62:3e:79:7c:fc:91:b7:a3:68:aa:15:fd:74:49:9a:f7:
30:c6:b6:08:9d:fb:bc:91:5e:ad:e0:84:e8:86:bb:70:41:6b:
0f:88:20:2c:11:81:0a:20:b4:ca:ea:7d:05:08:7c:25:0e:8c:
d4:40:d0:70:58:25:64:73:ad:31:e5:12:9c:c8:d2:cf:5e:15:
3d:c8:35:90:a3:64:5c:18:50:ec:5d:86:42:e6:e2:a1:a2:45:
ef:7f:f3:b0:47:ca:12:8e:b3:c6:14:5e:7d:56:54:6a:cc:ce:
e9:62:d9:3b:3f:36:18:1a:ab:eb:a2:1a:04:49:b5:2f:50:a5:
0e:ad:e2:5d:ad:77:cd:75:8b:3e:9e:7b:d5:ac:3f:49:67:8d:
0e:2d:3a:7e:26:a5:67:10:47:05:55:b8:0d:78:35:2e:1d:c5:
9f:5e:36:4f:06:83:42:ac:67:75:63:bf:07:3f:df:29:91:f8:
6d:13:e2:f9:61:56:ec:30:ce:85:da:f6:10:35:8a:8f:fc:c7:
aa:0a:f0:78:05:b0:cb:c9:1c:48:2b:81:f0:d8:93:46:c3:e6:
ce:17:ca:c3:be:3a:75:48:ba:62:16:89:3e:68:2d:48:59:ca:
2d:fb:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:45:21 2025 by rpki-client