Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzijH3d5TDFkSJIek-Abjok0b1I.roa
File: hzijH3d5TDFkSJIek-Abjok0b1I.roa (raw, json)
Hash identifier: m/vuVKb32CBhng9tYIHjeIZPvq3y/EaQrK+SxzjkPEg=
Subject key identifier: 87:38:A3:1F:77:79:4C:31:64:48:92:1E:93:E0:1B:8E:89:34:6F:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018296433659033C549E86B44D52E6C52198
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzijH3d5TDFkSJIek-Abjok0b1I.roa
Signing time: Sat 13 Aug 2022 08:12:43 +0000
ROA not before: Sat 13 Aug 2022 08:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:96:43:36:59:03:3c:54:9e:86:b4:4d:52:e6:c5:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 08:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8738a31f77794c316448921e93e01b8e89346f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:19:f2:00:fb:a4:95:46:fa:cb:9f:6a:4a:
1f:98:5b:aa:76:20:18:2d:7e:1f:b3:e2:c7:b8:7d:
af:49:bf:2d:e1:74:f9:6d:e9:cd:bb:f0:19:16:62:
7c:a7:4a:5f:4c:ce:a1:be:8c:fd:b5:29:c5:89:8b:
1e:8b:19:28:f1:5d:2a:35:42:af:8e:60:c6:1d:b4:
46:62:d9:68:cc:65:e7:1f:d5:85:03:63:80:bf:ee:
ba:87:5e:06:b1:bd:a1:1d:b6:38:cb:d0:d1:22:74:
96:b0:c9:6e:a3:a2:09:83:cc:a0:1e:12:e8:30:e0:
f0:f9:4d:a8:fe:e1:8c:39:b4:3e:1c:ca:0c:77:c6:
14:a0:6d:17:38:08:34:74:e6:87:a5:41:2b:c8:f0:
b3:52:1f:39:e4:f3:db:bf:3b:6f:2b:22:ff:4e:7a:
36:f0:f9:95:a0:98:4e:a8:97:8c:c1:38:eb:c3:fb:
d7:e6:b8:45:7b:2c:fe:37:36:4d:58:d1:06:da:3a:
b4:a6:30:a7:16:ef:9e:5d:d4:90:3f:1b:af:f9:d1:
e1:68:3b:f7:e1:0f:9c:ec:7c:eb:95:45:1f:f4:84:
93:77:e8:6e:33:ea:27:ba:b7:f5:7b:a8:30:99:4d:
e8:a5:ea:9c:f7:02:bf:b8:9a:65:7f:88:ac:00:c6:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:A3:1F:77:79:4C:31:64:48:92:1E:93:E0:1B:8E:89:34:6F:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzijH3d5TDFkSJIek-Abjok0b1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:63:48:b4:f0:a9:25:61:e9:61:bc:91:d1:19:0e:2b:2f:89:
8e:81:4d:2b:7c:3d:45:62:af:e5:f1:52:dc:41:c1:5d:86:42:
3a:82:99:66:72:87:80:48:88:5f:8c:28:05:af:55:76:03:5f:
06:27:c5:50:4f:ec:fc:6d:ca:e4:b8:f4:74:f1:88:fd:07:9a:
30:cf:1d:39:71:17:db:12:a9:85:88:e9:fc:e4:c3:f2:7e:22:
b7:9c:1b:4b:27:d3:17:f1:e5:ed:e5:8a:54:85:f6:82:ed:4c:
16:ea:12:fd:9a:46:19:0b:ec:b0:5f:0b:07:67:b5:de:cc:cc:
42:3d:57:53:d8:0f:29:e8:cf:7f:5f:ef:17:52:ef:1c:47:9e:
fc:4e:b2:79:be:50:03:0a:19:19:32:f3:62:0a:25:29:fc:e2:
9a:59:22:3e:96:fb:64:6e:de:14:d1:d9:31:10:5a:c7:0c:9b:
8f:01:11:e9:d2:a5:43:7b:b1:37:47:8e:46:87:11:65:3c:72:
b9:63:68:c9:36:6c:88:e6:94:d8:cf:a0:40:aa:07:f3:e6:b6:
59:c5:eb:5d:86:1c:30:2b:89:7f:2a:c1:ec:ef:57:01:43:b6:
83:c8:2f:ac:3d:93:c2:b9:42:c5:ca:0d:26:b2:9f:f3:e5:bd:
a6:d1:48:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKWQzZZAzxUnoa0TVLmxSGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEzMDgxMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzM4YTMxZjc3Nzk0YzMxNjQ0ODkyMWU5M2UwMWI4ZTg5MzQ2ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbEZ8gD7pJVG+sufakofmFuqdiAY
LX4fs+LHuH2vSb8t4XT5benNu/AZFmJ8p0pfTM6hvoz9tSnFiYseixko8V0qNUKv
jmDGHbRGYtlozGXnH9WFA2OAv+66h14Gsb2hHbY4y9DRInSWsMluo6IJg8ygHhLo
MODw+U2o/uGMObQ+HMoMd8YUoG0XOAg0dOaHpUEryPCzUh855PPbvztvKyL/Tno2
8PmVoJhOqJeMwTjrw/vX5rhFeyz+NzZNWNEG2jq0pjCnFu+eXdSQPxuv+dHhaDv3
4Q+c7HzrlUUf9ISTd+huM+onurf1e6gwmU3opeqc9wK/uJplf4isAMaxAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIc4ox93eUwxZEiSHpPgG46JNG9SMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaHppakgzZDVUREZrU0pJZWstQWJqb2swYjFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABZjSLTwqSVh6WG8kdEZ
DisviY6BTSt8PUVir+XxUtxBwV2GQjqCmWZyh4BIiF+MKAWvVXYDXwYnxVBP7Pxt
yuS49HTxiP0HmjDPHTlxF9sSqYWI6fzkw/J+IrecG0sn0xfx5e3lilSF9oLtTBbq
Ev2aRhkL7LBfCwdntd7MzEI9V1PYDynoz39f7xdS7xxHnvxOsnm+UAMKGRky82IK
JSn84ppZIj6W+2Ru3hTR2TEQWscMm48BEenSpUN7sTdHjkaHEWU8crljaMk2bIjm
lNjPoECqB/PmtlnF612GHDAriX8qwezvVwFDtoPIL6w9k8K5QsXKDSayn/PlvabR
SLg=
-----END CERTIFICATE-----
Generated at Fri May 2 09:05:03 2025 by rpki-client