Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyhYNP1eCGyVoNIXs4oMrvam_gs.roa
File: hyhYNP1eCGyVoNIXs4oMrvam_gs.roa (raw, json)
Hash identifier: kHOVkdAJMC93AtsOmlse0vXzUli72VWJSGZY0NCgqHk=
Subject key identifier: 87:28:58:34:FD:5E:08:6C:95:A0:D2:17:B3:8A:0C:AE:F6:A6:FE:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856BEEF6C7284B4AA103E1AF86703FF9A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyhYNP1eCGyVoNIXs4oMrvam_gs.roa
Signing time: Sun 01 Jan 2023 06:05:00 +0000
ROA not before: Sun 01 Jan 2023 06:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6bee:b79c/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:f6:c7:28:4b:4a:a1:03:e1:af:86:70:3f:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 06:05:00 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87285834fd5e086c95a0d217b38a0caef6a6fe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:6e:be:3b:75:ee:ec:82:b9:e5:b0:12:64:
23:78:e8:f3:b9:86:83:06:7a:60:c4:95:78:18:78:
01:40:39:31:8a:86:a3:de:0e:26:69:aa:37:78:43:
6f:ec:1f:bb:35:f9:50:f5:ac:5e:18:5d:5a:7a:49:
53:62:b9:6f:ec:46:25:d9:95:92:34:d0:aa:28:f5:
e8:56:20:2a:fd:08:86:cc:12:c5:c1:29:43:91:de:
56:23:82:ca:59:01:9e:54:1a:82:86:95:15:1e:9c:
a2:ca:cc:e8:7f:87:c6:67:88:2c:29:07:23:a5:50:
53:83:5a:b6:92:85:1b:49:44:47:47:6a:09:03:58:
44:c6:7e:67:a0:5a:f5:86:46:b3:d7:f3:5e:ab:8a:
56:fb:92:df:c2:c4:25:cd:be:69:39:bb:de:d9:0f:
db:63:fa:8e:f4:b4:eb:1e:85:8b:89:9b:a4:20:33:
80:0f:f9:60:eb:59:5f:e0:8b:84:6e:43:1c:ff:be:
3c:0b:71:9b:4f:25:d6:eb:29:b3:6f:61:a0:d7:ab:
9b:ba:03:4a:00:b2:d5:09:54:d0:8c:d3:e0:d4:fc:
e1:29:21:49:be:ff:8f:e8:d9:6b:19:fc:e2:93:4c:
90:4d:14:74:bb:4c:b4:a6:ae:35:2b:90:72:8b:b9:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:58:34:FD:5E:08:6C:95:A0:D2:17:B3:8A:0C:AE:F6:A6:FE:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hyhYNP1eCGyVoNIXs4oMrvam_gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:82:83:0e:2f:d3:05:10:5e:99:df:43:60:10:48:72:f7:a7:
c2:d6:9a:ae:3c:0d:fe:85:dd:cc:8b:64:2c:0d:33:6d:f4:90:
4c:9d:97:8c:1b:4f:51:b3:d0:19:29:ac:08:30:16:44:e7:95:
0c:e2:90:97:01:a7:0c:c1:ca:2a:c6:de:3c:23:98:99:d9:9f:
ce:14:d2:29:1e:d0:18:13:80:66:80:78:a7:26:72:33:26:af:
c6:4e:73:bc:cd:17:3f:1f:6b:d3:3b:4f:e3:07:61:89:b1:36:
d1:05:1f:b3:29:60:82:de:9c:be:d3:76:d3:f3:0a:ea:89:f8:
f5:34:96:13:a6:0e:d9:ea:63:a0:67:9e:46:10:05:0a:5c:1d:
f4:4c:12:7a:62:c3:f2:26:0c:98:2e:c9:6e:b0:1a:a8:c0:d0:
51:a3:dd:90:af:a7:6c:ab:f2:33:70:b0:29:b1:ea:ce:67:bb:
a8:1f:47:98:df:2a:26:82:a7:cd:e6:05:e8:e5:29:50:3e:bc:
ef:42:0b:31:b5:89:92:d9:9b:32:c4:30:14:c8:f3:0e:3c:10:
db:7c:fd:44:f7:fe:77:3c:d3:29:c7:89:34:ea:6b:d6:7c:7a:
8f:dc:1d:73:08:39:fa:d2:75:bc:89:7f:d1:df:bd:03:8b:60:
7f:d2:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:02:45 2025 by rpki-client