Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H2WkGpVJ2kboasd8kABrFK8MODs.roa
File: H2WkGpVJ2kboasd8kABrFK8MODs.roa (raw, json)
Hash identifier: 0CRNhZVViV8KVu/nQMH/fjd2/+L3a7ZvXblg69L29nI=
Subject key identifier: 1F:65:A4:1A:95:49:DA:46:E8:6A:C7:7C:90:00:6B:14:AF:0C:38:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893EA8FF89EA3CB6207FE6A04B1C1536DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H2WkGpVJ2kboasd8kABrFK8MODs.roa
Signing time: Mon 10 Jul 2023 07:16:50 +0000
ROA not before: Mon 10 Jul 2023 07:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:a8:ff:89:ea:3c:b6:20:7f:e6:a0:4b:1c:15:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 07:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f65a41a9549da46e86ac77c90006b14af0c383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b1:17:1b:7f:93:30:3f:27:6c:e7:32:5a:df:
d1:85:40:e8:0c:6d:13:0a:8d:da:5e:bf:8f:99:7b:
5d:e1:d6:0e:68:b1:6f:7b:67:8e:2d:5d:4e:24:a3:
3e:1c:c4:0d:a3:fd:77:a5:7b:1d:d5:83:f8:3c:28:
b4:6d:d7:b8:81:e1:57:79:5d:13:8c:f1:08:0e:8e:
fe:7a:f0:57:6f:3a:55:78:8e:e5:d4:7d:48:ce:33:
20:4a:3d:82:24:c8:d3:b3:29:a6:61:88:e3:61:58:
b1:fc:62:57:04:4f:94:65:d7:6a:c2:55:bd:1c:6e:
e6:7b:b4:a6:99:70:75:be:dd:91:88:dc:7a:0d:80:
2b:51:b1:64:35:12:31:f8:89:da:1d:e9:1d:92:2c:
3b:c4:42:fd:31:e9:c9:f6:60:66:d9:a4:7f:0e:9b:
d0:1e:40:9a:d7:0d:7c:1b:8a:21:d6:53:71:75:24:
82:d7:e8:9e:cd:f0:76:5b:82:2d:ef:75:1b:5a:2e:
09:66:4a:8b:29:17:fc:50:dd:2d:bd:7f:c9:08:84:
04:e6:14:35:a8:46:a7:b3:09:6f:df:f9:38:52:f4:
28:82:8a:ea:5b:69:08:55:8d:e4:52:73:a4:51:a5:
b4:20:59:0f:a1:64:64:e7:8e:5a:a9:f1:2f:75:0c:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:A4:1A:95:49:DA:46:E8:6A:C7:7C:90:00:6B:14:AF:0C:38:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H2WkGpVJ2kboasd8kABrFK8MODs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:e8:5f:ac:22:db:fd:3a:1d:6f:11:1d:1e:78:1d:a7:4e:44:
2a:af:81:49:ba:7c:15:8b:52:03:09:1e:46:61:3c:15:fd:c1:
3c:54:ee:cd:2b:9e:99:92:f9:53:82:c3:a1:7f:e5:32:c8:c7:
03:de:47:08:6b:5f:2e:49:c2:97:df:97:8e:c0:1e:3d:a9:ae:
c4:e4:c5:87:50:e8:b6:01:78:03:cc:70:22:6a:9a:cd:72:02:
d7:7c:d5:05:c1:3c:36:a9:88:d3:0e:a8:3b:bc:ff:cc:30:1c:
9f:4e:f9:19:45:a6:ca:45:fd:c5:36:aa:18:e1:19:3c:ae:12:
7a:67:3d:b7:a2:5d:15:c0:7e:15:c8:bc:9d:70:76:87:8c:a6:
a0:a9:65:c4:67:21:31:2b:12:aa:2f:01:ac:0b:cc:3a:2b:59:
d9:ba:2f:dd:ea:c7:2b:aa:f0:9e:1c:e9:ca:95:35:65:2b:b4:
83:b4:be:49:5c:85:38:de:76:4b:7d:fc:79:b0:24:d8:49:cb:
7a:ba:74:c1:1e:13:8f:11:63:b6:43:b6:af:5a:27:c1:7b:aa:
46:44:17:0a:6d:98:83:58:4e:39:8a:70:02:92:fa:61:b3:2c:
20:13:40:ad:15:32:24:5f:78:90:7b:48:97:91:b5:22:e7:1a:
01:09:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:54:19 2025 by rpki-client