Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_HW47FZX9PRgUNDQTkS9Pnx8fo.roa
File: k_HW47FZX9PRgUNDQTkS9Pnx8fo.roa (raw, json)
Hash identifier: ppH6+IlbATmT7k6n+6IFU9Mb3owCBbJJouix24qDtI0=
Subject key identifier: 93:F1:D6:E3:B1:59:5F:D3:D1:81:43:43:41:39:12:F4:F9:F1:F1:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AB0A8CF7F2CDC5747F3887C0EEB02B44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_HW47FZX9PRgUNDQTkS9Pnx8fo.roa
Signing time: Sat 04 Mar 2023 05:14:00 +0000
ROA not before: Sat 04 Mar 2023 05:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:0a:8c:f7:f2:cd:c5:74:7f:38:87:c0:ee:b0:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 05:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f1d6e3b1595fd3d1814343413912f4f9f1f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:17:be:ff:4f:8d:a7:81:1a:16:72:f3:a3:
ec:68:48:e1:f3:dd:0d:35:43:f0:af:d6:eb:e6:b7:
f4:5f:24:87:bb:9a:60:f1:dd:26:9c:0b:fb:74:08:
75:98:34:01:4c:ee:bf:22:99:f2:9c:0c:33:b5:32:
4f:0f:54:8c:05:00:72:e0:65:99:67:fd:3d:0b:23:
21:eb:9c:b0:f4:bb:b0:e7:05:ff:75:26:44:a9:6b:
d3:bc:46:75:a4:fc:99:71:14:2a:70:d4:9d:b4:27:
54:03:c6:c3:a0:f6:f7:88:0b:f6:cb:dd:8c:12:68:
91:bb:78:0a:fc:37:8d:93:dc:fa:4f:7d:60:54:72:
6f:66:e1:c3:95:e5:da:a8:60:ba:17:5d:c2:81:11:
29:28:40:18:0b:b9:ff:ee:e6:41:fa:8b:3a:26:d3:
e9:df:5c:9d:6c:37:1e:cd:6f:52:81:6c:fb:19:3a:
27:22:d5:1c:19:be:30:68:b3:15:f6:6e:ed:58:57:
7b:85:9e:23:ba:0f:f7:d8:18:42:99:51:b9:31:30:
5e:c2:56:83:3c:57:b9:67:6b:d2:f7:0b:a3:e5:4b:
8b:ac:ca:79:f4:28:84:18:a1:c0:eb:15:fd:0e:69:
76:01:9c:35:bf:7c:f5:4a:50:00:3f:e4:0b:49:7d:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F1:D6:E3:B1:59:5F:D3:D1:81:43:43:41:39:12:F4:F9:F1:F1:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_HW47FZX9PRgUNDQTkS9Pnx8fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:ae:6c:a2:18:c8:33:27:06:51:7e:3d:71:9e:cb:b6:cc:4e:
a1:f3:c4:61:59:1a:4f:e2:fb:02:1c:6e:29:18:4e:f2:18:58:
9f:de:27:6b:1a:60:eb:46:65:02:e4:28:36:e2:f5:61:e0:f0:
28:07:0e:b7:fa:2d:0c:20:46:dc:93:3c:9f:dc:f4:b3:ec:c6:
2a:7d:75:53:97:ee:68:ad:74:05:e4:75:cb:95:8a:29:13:31:
30:e1:39:8a:07:33:8c:4f:f8:7b:e1:b3:1d:82:be:6f:71:81:
eb:e4:40:b1:81:09:56:4b:83:7b:70:e9:41:d2:64:b2:77:65:
ac:a2:26:a7:08:28:7b:e5:9d:8e:20:45:38:27:74:1d:a4:42:
db:8c:14:73:b6:59:e6:ec:64:0a:fa:5d:79:21:0f:43:50:06:
23:36:c3:a8:88:dc:c6:ef:14:ff:ab:57:e0:06:65:fc:30:37:
fb:ae:f4:ed:55:c2:6f:3f:a7:07:29:44:b1:99:64:40:74:44:
8b:f9:9f:24:63:ed:7d:06:4c:06:f1:f4:2b:3c:7f:50:4d:79:
cc:1e:1e:ae:db:92:56:db:58:ef:cb:38:25:55:bd:bb:d4:98:
ac:63:80:4b:d7:79:69:05:2f:9b:8e:d0:c3:77:21:b2:1f:91:
d0:79:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:17:31 2025 by rpki-client