Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HiXKX8D88KWHIVMQ9XAJDHtpIc.roa
File: 2HiXKX8D88KWHIVMQ9XAJDHtpIc.roa (raw, json)
Hash identifier: N1cNgCY0FC+Kjc5TpYHRiBunw40gbg0/iwAf3/d15J0=
Subject key identifier: D8:78:97:29:7F:03:F3:C2:96:1C:85:4C:43:D5:C0:24:31:ED:A4:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81EB7993
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HiXKX8D88KWHIVMQ9XAJDHtpIc.roa
Signing time: Sat 07 May 2022 11:08:34 +0000
ROA not before: Sat 07 May 2022 11:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2179692947 (0x81eb7993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 11:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d87897297f03f3c2961c854c43d5c02431eda487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:6f:3c:40:9c:a4:62:dd:6a:58:03:b9:1b:
21:d6:c3:38:05:6f:00:a1:83:1e:a2:65:d3:ef:18:
22:fa:0a:21:2d:b3:04:52:3c:4a:7d:aa:e6:fa:39:
7a:7b:1f:8b:26:d7:d4:56:e4:91:76:08:9e:67:0b:
c0:69:0d:8d:27:1b:d5:3a:61:a8:d3:9a:f2:35:e9:
1b:b8:7c:43:48:42:96:df:e0:a7:7f:c8:55:0c:bd:
a1:20:4d:2a:e3:ba:3d:28:9c:8f:52:a4:4d:2b:d6:
93:08:d0:4d:f1:59:7e:08:3e:e1:47:d3:15:c0:34:
b8:41:92:e2:21:2f:49:f1:7a:9c:9e:65:ce:8b:99:
c0:59:23:9a:96:07:17:f0:24:bb:82:14:5a:a0:7f:
fc:0d:ab:67:a4:9a:5c:b1:7f:fd:9b:d6:d8:f2:d3:
94:a6:c0:2f:48:0f:99:d7:8d:ff:c2:b9:ad:62:1b:
48:c1:71:f8:af:88:c5:f2:47:20:dc:31:b6:1d:74:
78:07:c6:eb:3b:cb:24:1b:20:c4:ea:67:19:a8:3a:
47:41:34:f9:c5:05:6c:f1:72:a4:07:67:4f:15:7f:
6f:d1:51:f8:fe:5e:9e:17:95:7b:26:a1:01:af:a5:
22:f6:fa:b5:79:87:aa:9d:28:5f:e5:c5:f4:fb:ec:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:97:29:7F:03:F3:C2:96:1C:85:4C:43:D5:C0:24:31:ED:A4:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2HiXKX8D88KWHIVMQ9XAJDHtpIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c2:2e:fc:c4:8e:4d:5c:26:74:97:f9:67:d5:95:96:2b:e6:
a5:b8:18:d0:9a:d9:5f:f3:24:c1:06:2c:35:29:6a:61:e0:2c:
67:39:b1:66:d4:7a:57:5f:b0:ab:2a:86:5b:fb:1e:96:ea:83:
5d:fa:5f:a6:c3:b9:e2:05:1a:4a:90:0b:d2:c8:17:2f:aa:25:
f6:40:5f:d9:9b:d5:81:52:de:f2:32:37:5e:94:38:ef:b6:27:
15:53:ff:e8:36:af:3c:9b:18:70:3c:1d:cb:a9:0a:a9:31:8f:
e8:58:fc:d5:27:d4:56:8a:f6:19:33:a3:40:81:65:1b:f6:12:
81:3a:22:5a:78:c8:b2:b6:53:af:7e:f0:71:2e:51:e3:95:e3:
66:1c:3e:87:9b:9c:49:d6:fb:b2:3c:60:f8:ee:75:62:b7:b4:
61:36:8c:8a:94:2b:0e:ad:b7:ee:20:4d:ec:58:0b:9d:c9:db:
07:ef:d4:c3:33:5f:65:26:09:84:b9:83:9d:8c:5f:8a:d8:c8:
18:17:d1:cb:9e:3f:05:4f:49:a3:d2:3c:c9:3b:b1:2a:ff:a0:
8c:2b:bf:dc:3f:00:8a:c9:3f:b7:9d:98:c3:75:1e:65:4d:d2:
11:e1:0e:bd:de:bb:b2:d7:8b:ed:c1:85:30:1a:89:07:1a:2e:
47:3d:f3:46
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIHreZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDcxMTA4MzRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGQ4Nzg5NzI5N2Yw
M2YzYzI5NjFjODU0YzQzZDVjMDI0MzFlZGE0ODcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDahG88QJykYt1qWAO5GyHWwzgFbwChgx6iZdPvGCL6CiEt
swRSPEp9qub6OXp7H4sm19RW5JF2CJ5nC8BpDY0nG9U6YajTmvI16Ru4fENIQpbf
4Kd/yFUMvaEgTSrjuj0onI9SpE0r1pMI0E3xWX4IPuFH0xXANLhBkuIhL0nxepye
Zc6LmcBZI5qWBxfwJLuCFFqgf/wNq2ekmlyxf/2b1tjy05SmwC9ID5nXjf/Cua1i
G0jBcfiviMXyRyDcMbYddHgHxus7yyQbIMTqZxmoOkdBNPnFBWzxcqQHZ08Vf2/R
Ufj+Xp4XlXsmoQGvpSL2+rV5h6qdKF/lxfT77IQjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU2HiXKX8D88KWHIVMQ9XAJDHtpIcwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8ySGlYS1g4RDg4S1dISVZNUTlYQUpESHRwSWMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEACsIu/MSOTVwmdJf5Z9WVlivmpbgY0JrZX/Mk
wQYsNSlqYeAsZzmxZtR6V1+wqyqGW/seluqDXfpfpsO54gUaSpAL0sgXL6ol9kBf
2ZvVgVLe8jI3XpQ477YnFVP/6DavPJsYcDwdy6kKqTGP6Fj81SfUVor2GTOjQIFl
G/YSgToiWnjIsrZTr37wcS5R45XjZhw+h5ucSdb7sjxg+O51Yre0YTaMipQrDq23
7iBN7FgLncnbB+/UwzNfZSYJhLmDnYxfitjIGBfRy54/BU9Jo9I8yTuxKv+gjCu/
3D8Aisk/t52Yw3UeZU3SEeEOvd67steL7cGFMBqJBxouRz3zRg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:43 2025 by rpki-client