Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCAKn93viDb45TO-qRZ5kf4Dz7c.roa
File: HCAKn93viDb45TO-qRZ5kf4Dz7c.roa (raw, json)
Hash identifier: Isv+IdwqkZNv2BzUQX35giT4vzBQDQ8B7KmumlLbOpk=
Subject key identifier: 1C:20:0A:9F:DD:EF:88:36:F8:E5:33:BE:A9:16:79:91:FE:03:CF:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831C9840A189A1C4CD104F0465AAAE8D29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCAKn93viDb45TO-qRZ5kf4Dz7c.roa
Signing time: Thu 08 Sep 2022 10:14:43 +0000
ROA not before: Thu 08 Sep 2022 10:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:98:40:a1:89:a1:c4:cd:10:4f:04:65:aa:ae:8d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 8 10:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c200a9fddef8836f8e533bea9167991fe03cfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:9d:0e:2b:93:8c:33:f5:1c:bd:43:eb:83:
9a:45:82:06:3e:0e:35:77:57:30:39:8c:75:cc:c5:
a8:a9:96:48:ea:1b:4f:d7:dc:95:32:53:43:df:f2:
0d:65:19:66:3d:6c:cc:70:63:3b:c1:dc:19:0a:6a:
3f:35:f5:ad:2f:ae:a6:bf:cf:5e:2e:2a:93:e2:a4:
c1:f8:a3:9a:d1:8a:36:3c:2b:82:92:c8:b1:3d:30:
ca:aa:22:05:a9:41:09:6b:6a:ef:5a:0a:5b:18:07:
84:2a:21:4c:5e:54:d5:b9:02:1a:e2:97:a2:63:60:
04:ce:07:96:3d:f9:a4:83:d3:9e:c9:db:cd:08:ab:
87:7f:21:06:73:dc:fe:2a:0c:b1:f6:2a:94:ff:1f:
d8:ce:fb:80:7e:10:35:84:f0:e4:6f:42:36:aa:04:
8e:b1:b1:0f:bb:ac:32:5b:ad:d6:10:ab:30:3b:e5:
ed:dd:77:3f:a2:0d:e4:26:88:a4:2b:f8:01:6f:5c:
bd:b0:54:95:d7:55:0e:67:6b:2e:3b:a2:28:f9:f6:
b2:ad:14:aa:52:b3:9e:73:bf:69:fc:c7:92:f3:45:
d4:44:7e:61:7d:6c:4e:f7:6e:bc:07:ed:9c:7d:34:
3b:b3:bd:71:b8:fe:49:3b:f1:a1:0f:8c:1e:0d:44:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:0A:9F:DD:EF:88:36:F8:E5:33:BE:A9:16:79:91:FE:03:CF:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCAKn93viDb45TO-qRZ5kf4Dz7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:2a:cd:6f:0b:ed:53:7e:cb:40:01:15:09:d2:bc:5b:07:39:
cd:99:5e:82:87:82:c3:08:31:7b:b3:31:3d:05:7b:5d:e9:97:
57:20:ea:cd:47:19:19:05:7d:e5:91:e1:d1:b0:ea:51:dc:f5:
2a:eb:d1:98:cf:5a:7f:41:88:e1:bf:e9:6f:fa:88:f9:5e:a8:
6c:26:e5:ed:4b:f4:04:e5:aa:1c:91:65:c6:99:76:56:12:f2:
74:9f:c1:00:13:2c:59:c6:7b:c9:bf:38:e4:ae:06:5c:29:af:
be:fe:fc:91:8c:26:70:8c:6e:5b:59:22:f8:b3:4d:1c:1f:dd:
9f:95:2f:37:fc:5a:6c:cd:bd:e0:1d:7a:34:83:9b:cd:41:2b:
4a:54:b8:9f:5e:1c:d1:8f:fc:6f:cd:0d:a8:c1:cf:6b:d3:01:
0d:34:f3:0e:d7:2d:c9:ab:4b:31:c5:0c:eb:99:d8:1f:aa:91:
98:b2:c5:79:5b:c9:9a:29:1c:99:63:bd:cb:69:cc:92:52:ce:
a6:48:47:37:9b:26:a1:e5:f2:ba:a0:93:f4:eb:e4:30:83:68:
89:51:32:ad:fb:29:b6:81:7d:15:f8:ce:25:17:f7:0e:42:d1:
da:58:98:90:09:fe:cb:25:95:c1:51:e1:5a:49:7d:15:af:40:
ab:40:12:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMcmEChiaHEzRBPBGWqro0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA4MTAxNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzIwMGE5ZmRkZWY4ODM2ZjhlNTMzYmVhOTE2Nzk5MWZlMDNjZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqmdDiuTjDP1HL1D64OaRYIGPg41
d1cwOYx1zMWoqZZI6htP19yVMlND3/INZRlmPWzMcGM7wdwZCmo/NfWtL66mv89e
LiqT4qTB+KOa0Yo2PCuCksixPTDKqiIFqUEJa2rvWgpbGAeEKiFMXlTVuQIa4pei
Y2AEzgeWPfmkg9OeydvNCKuHfyEGc9z+Kgyx9iqU/x/YzvuAfhA1hPDkb0I2qgSO
sbEPu6wyW63WEKswO+Xt3Xc/og3kJoikK/gBb1y9sFSV11UOZ2suO6Io+fayrRSq
UrOec79p/MeS80XURH5hfWxO9268B+2cfTQ7s71xuP5JO/GhD4weDUQPQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBwgCp/d74g2+OUzvqkWeZH+A8+3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSENBS245M3ZpRGI0NVRPLXFSWjVrZjREejdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACkqzW8L7VN+y0ABFQnS
vFsHOc2ZXoKHgsMIMXuzMT0Fe13pl1cg6s1HGRkFfeWR4dGw6lHc9Srr0ZjPWn9B
iOG/6W/6iPleqGwm5e1L9ATlqhyRZcaZdlYS8nSfwQATLFnGe8m/OOSuBlwpr77+
/JGMJnCMbltZIvizTRwf3Z+VLzf8WmzNveAdejSDm81BK0pUuJ9eHNGP/G/NDajB
z2vTAQ008w7XLcmrSzHFDOuZ2B+qkZiyxXlbyZopHJljvctpzJJSzqZIRzebJqHl
8rqgk/Tr5DCDaIlRMq37KbaBfRX4ziUX9w5C0dpYmJAJ/ssllcFR4VpJfRWvQKtA
EvQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:36 2025 by rpki-client