Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5d-Fz9x2xI6I1AGfbVoXrI2vbk.roa
File: H5d-Fz9x2xI6I1AGfbVoXrI2vbk.roa (raw, json)
Hash identifier: jm1qlLZMheU6gUwMHJxYSGEKCFSNrj8moqHMbb91bvY=
Subject key identifier: 1F:97:7E:17:3F:71:DB:12:3A:23:50:06:7D:B5:68:5E:B2:36:BD:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 816A7EC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5d-Fz9x2xI6I1AGfbVoXrI2vbk.roa
Signing time: Thu 05 May 2022 16:09:44 +0000
ROA not before: Thu 05 May 2022 16:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171240135 (0x816a7ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 16:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f977e173f71db123a2350067db5685eb236bdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:49:34:aa:79:d9:7b:6c:9f:d2:60:5d:29:
d0:c4:6f:70:dc:3d:e7:23:d5:9f:a3:eb:ef:d5:ce:
7d:59:24:d0:84:41:78:cd:19:4b:6c:54:8b:bf:10:
63:25:9e:c9:db:2f:f8:f2:5f:95:fa:12:c4:26:16:
e2:be:96:d9:53:01:e3:99:9c:9c:96:c5:60:30:57:
24:7e:71:69:32:4a:98:cf:ef:8c:70:15:ae:21:44:
79:7a:ed:3e:13:4a:6d:8c:6e:86:0d:df:2d:9e:84:
bb:3c:0d:35:ea:03:4e:23:ef:06:77:c0:8c:78:dc:
6d:cd:6e:0b:be:94:ff:af:d9:d7:5a:f3:12:24:98:
6e:d0:f9:75:65:85:67:ed:3f:1b:7f:3e:24:c2:22:
d6:98:f5:a1:f4:f9:fb:98:03:5d:d4:5f:3e:4e:23:
e1:30:1d:1c:b9:51:4b:b3:9c:ce:23:b5:7c:fd:b4:
1d:49:f0:77:ec:a4:2d:24:3a:e5:ba:f8:2d:1a:30:
5d:34:17:f6:b3:6c:da:0a:1d:95:69:d5:e5:21:f6:
16:e6:f5:38:83:61:ec:13:e0:bc:d5:76:ee:96:72:
04:1b:ff:d6:54:9c:a2:5b:e0:84:d6:a5:15:74:48:
3c:fa:89:91:6a:81:14:ab:bf:62:f8:9c:e4:13:b4:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:97:7E:17:3F:71:DB:12:3A:23:50:06:7D:B5:68:5E:B2:36:BD:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5d-Fz9x2xI6I1AGfbVoXrI2vbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:b4:1a:ea:8c:14:90:d1:b1:8e:f4:31:9d:44:2f:9e:04:58:
87:74:1b:e3:74:99:c0:8f:75:07:54:f7:43:80:00:f9:05:7b:
82:44:b8:67:d7:81:25:f7:39:df:18:e6:26:97:56:36:00:c9:
90:fe:56:aa:7f:13:96:1a:12:2b:15:58:1c:c7:a8:8d:15:15:
aa:09:8c:f2:a8:35:4c:7b:a5:b5:be:ff:62:fb:8b:c9:b3:6d:
f0:ab:79:40:47:1f:cc:93:58:1c:b0:32:0f:b8:fc:6c:7f:08:
d9:70:22:e1:bf:2b:7a:a3:c5:b3:40:3a:58:21:7e:ee:42:6c:
24:12:15:55:f9:78:e8:4c:99:e0:bf:1b:8e:38:c6:27:4d:2a:
d4:76:de:5d:e5:5b:71:8c:36:cc:bf:c5:8a:f0:17:fb:89:1a:
50:79:d1:32:58:3a:84:f8:d6:dd:3e:e4:47:10:f4:31:76:e0:
10:e7:86:c0:20:4b:4f:30:02:a8:37:a5:7e:d3:7f:2e:fd:3b:
79:2e:51:5f:d0:a5:95:a7:06:2a:51:3f:7d:2b:05:d4:88:e6:
80:2d:ae:4f:db:d2:e4:d6:a9:df:a5:20:8e:ca:1d:ef:c4:ae:
e9:de:a9:54:ec:01:e7:6b:1f:4b:63:25:b9:70:c1:8c:57:ec:
cf:9d:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:13:57 2025 by rpki-client