Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzxwdevM-oiH_AUrlaaM-GGm-Bw.roa
File: hzxwdevM-oiH_AUrlaaM-GGm-Bw.roa (raw, json)
Hash identifier: D8L8hjm82BCpYQFIWsf/MUi+hftZCnk5UJuKet2lb/M=
Subject key identifier: 87:3C:70:75:EB:CC:FA:88:87:FC:05:2B:95:A6:8C:F8:61:A6:F8:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185578FD4A1AB7E7A8E44F395D7279CD077
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzxwdevM-oiH_AUrlaaM-GGm-Bw.roa
Signing time: Wed 28 Dec 2022 07:08:41 +0000
ROA not before: Wed 28 Dec 2022 07:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:8f:d4:a1:ab:7e:7a:8e:44:f3:95:d7:27:9c:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 07:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=873c7075ebccfa8887fc052b95a68cf861a6f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:5a:62:1d:67:41:98:37:a3:f0:fc:6a:6d:
8c:c3:dc:f9:10:34:f0:a4:a8:85:b6:e0:85:6b:62:
5d:54:43:af:8f:76:d8:95:6b:31:a6:c7:c0:ea:74:
68:17:a0:31:4d:b6:27:7f:9e:a1:b8:95:61:0a:60:
62:40:e8:8a:ea:db:a3:ae:e1:28:27:c2:3c:52:7a:
44:75:3d:65:e2:5f:16:1f:11:64:82:d8:25:8e:f2:
50:97:35:64:5b:da:d1:d9:03:e1:74:ee:e6:31:1a:
b9:4a:87:1d:7c:88:8b:a9:96:90:dd:e4:2e:b7:20:
b1:d1:6c:98:51:3a:f3:90:d5:2c:e1:8a:06:07:5c:
7b:fe:fe:12:43:ea:88:de:cc:b9:65:bf:ed:9a:28:
eb:91:44:3a:56:eb:c6:8c:f6:4a:5e:fb:6f:c2:0f:
c5:bd:d5:e8:b3:55:df:ce:4c:e2:ac:43:08:3d:37:
ce:54:8f:2d:67:5f:f3:6a:c3:89:54:db:3b:c5:2e:
11:96:b1:de:04:62:db:be:bc:aa:c5:56:e9:be:66:
a5:55:23:b3:d2:2a:46:c5:e2:a6:e6:9d:b6:68:9d:
c4:18:01:47:05:8a:0f:72:c6:5b:31:c7:76:21:11:
98:b1:69:32:62:7b:6e:20:9a:0c:0f:f7:08:84:89:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:70:75:EB:CC:FA:88:87:FC:05:2B:95:A6:8C:F8:61:A6:F8:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hzxwdevM-oiH_AUrlaaM-GGm-Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:a9:6d:2e:48:73:49:fd:73:39:02:65:df:55:fe:e7:12:53:
92:2a:0b:ff:11:22:63:e3:80:03:63:59:f2:5e:85:f0:45:a5:
1e:25:dd:08:0e:5d:a8:7d:2d:fd:8d:b2:ee:8c:cd:5f:6c:fe:
cd:ab:f0:24:92:25:ae:2d:4c:a9:6c:0b:23:02:32:b4:26:d3:
a5:7f:fa:11:79:46:22:08:7c:03:4c:a8:25:87:08:68:75:89:
9d:ef:83:0e:92:91:f9:55:4d:d7:c9:1c:ea:3a:c8:6c:1a:1c:
fc:fe:84:cb:87:fc:3c:4c:84:ca:43:b9:07:b1:6c:1e:65:6b:
04:e0:f0:6c:73:6c:fc:fd:a8:ef:ae:9d:65:78:49:cc:ac:11:
c6:da:d1:0a:70:84:c8:6c:63:56:24:c4:b6:5d:d4:bf:78:f6:
2c:97:e0:b3:08:12:43:b9:45:5d:46:91:84:6b:fc:c8:d8:6c:
32:74:cb:a2:2a:4e:5e:f3:6d:de:a4:4c:7f:40:32:cd:70:a6:
60:24:c2:39:05:d4:c7:b9:fc:b6:c6:34:76:b5:64:24:7c:0b:
70:cb:dc:9f:5a:e7:46:ac:33:1c:00:80:58:a7:d3:a6:8b:31:
0b:ce:da:99:a5:23:90:fb:f3:bc:6f:95:56:0c:98:4b:5e:02:
84:41:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:06:44 2025 by rpki-client