Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4QLmv45vgZTrTWWafjvshDj-Zg.roa
File: H4QLmv45vgZTrTWWafjvshDj-Zg.roa (raw, json)
Hash identifier: upUxbhuk9spDijvWfjMcnmNBegt/16nuSfDAk2aP6cw=
Subject key identifier: 1F:84:0B:9A:FE:39:BE:06:53:AD:35:96:69:F8:EF:B2:10:E3:F9:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BA83CE6581B8AB399B0C282605CC52AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4QLmv45vgZTrTWWafjvshDj-Zg.roa
Signing time: Sun 27 Nov 2022 19:15:10 +0000
ROA not before: Sun 27 Nov 2022 19:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ba:83:ce:65:81:b8:ab:39:9b:0c:28:26:05:cc:52:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 19:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f840b9afe39be0653ad359669f8efb210e3f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1e:a1:5d:ce:10:6e:9f:83:e7:74:1e:27:33:
12:16:fe:89:19:6c:4d:fb:e8:36:0d:6f:04:f6:11:
da:ba:ad:4a:d1:ce:ca:af:c2:7f:ca:f8:9b:12:a7:
d2:49:1a:88:3f:41:b2:73:02:17:ac:b9:bd:00:f2:
8f:da:49:55:7e:7b:1c:e1:0b:88:cd:d9:21:73:f3:
2d:8a:10:38:98:94:20:7d:db:d0:1d:ab:33:9e:cf:
a7:49:9a:cb:e9:c1:ee:44:ac:f8:7a:92:d7:1b:4e:
59:13:d7:8b:9c:23:bb:40:26:c8:6a:79:e2:7c:c2:
bc:e4:32:e3:37:a5:3d:b3:38:97:b4:e4:05:46:37:
fd:f0:ee:3c:4a:0a:8a:e6:38:81:f6:f0:ba:a7:32:
b3:de:b2:d3:8a:48:20:70:de:4a:b0:20:78:3b:67:
a9:4c:cd:e1:41:ef:77:b2:f2:3f:24:de:50:f0:b3:
f1:11:c3:7a:d2:66:e0:ec:3d:0d:0f:ee:c3:d9:04:
d3:b5:6f:c5:f7:3d:ec:9c:3c:ac:33:ab:22:6f:a5:
c4:d2:db:f2:80:13:a9:19:29:ef:87:20:9f:a9:b2:
96:f1:56:57:b7:0a:ab:ad:f8:dc:a4:e7:d2:7d:68:
21:c8:48:24:15:e0:4a:32:d2:1c:3c:72:7d:84:07:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:0B:9A:FE:39:BE:06:53:AD:35:96:69:F8:EF:B2:10:E3:F9:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H4QLmv45vgZTrTWWafjvshDj-Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:55:70:d4:8b:7a:ab:cf:29:0c:ca:d5:33:2e:b6:3f:f1:34:
9d:6d:cb:57:a7:5b:fe:0e:4d:1c:0e:fe:6d:15:b9:a9:3e:ec:
16:ed:30:02:d5:d7:1c:06:c7:70:b4:2f:cc:8d:6f:41:59:22:
bb:17:fa:a3:2b:13:7f:ea:88:9c:cf:08:c2:01:60:0e:4f:14:
17:cc:6b:71:25:7f:a6:27:43:87:d8:0e:46:ab:4f:95:3a:a5:
58:39:db:44:d8:76:3f:44:ff:73:85:3c:dd:3a:15:b8:6d:09:
e9:65:ae:e7:50:f8:bc:77:43:0e:c0:78:3b:05:a1:27:9d:1c:
13:c6:79:39:11:6b:74:5e:55:2a:ee:e3:a4:d1:8c:ae:3c:0b:
7e:1f:83:c8:84:37:a3:03:ee:df:91:dd:b3:61:7f:4c:2f:bb:
2a:cb:f5:97:a8:7c:72:9c:a1:2e:f0:95:ef:8e:d9:7f:36:d4:
24:3d:0b:bb:5a:ae:f4:65:b7:6a:49:f1:fa:94:9c:1a:6b:6f:
47:06:b0:66:82:08:c6:8d:2e:21:19:48:a9:cd:ae:6f:e0:43:
a2:59:14:f7:2a:f7:0c:04:09:f3:1c:d4:b9:ce:90:ee:bb:42:
f4:7f:a3:42:22:c2:2b:c2:79:5f:6c:64:fd:74:03:ed:8a:a4:
40:fb:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:56 2025 by rpki-client