Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCrkpSgBnxgXhL1cUvcYR5htf4Q.roa
File: HCrkpSgBnxgXhL1cUvcYR5htf4Q.roa (raw, json)
Hash identifier: W1tgOLjWr6guxXqlygGNDWyAetxnIrcaH5paq0ITEWg=
Subject key identifier: 1C:2A:E4:A5:28:01:9F:18:17:84:BD:5C:52:F7:18:47:98:6D:7F:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A494ABFB3DCC242B2F2DF95EE2D5D8BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCrkpSgBnxgXhL1cUvcYR5htf4Q.roa
Signing time: Thu 12 Jan 2023 06:04:44 +0000
ROA not before: Thu 12 Jan 2023 06:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:a494:9dce/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:94:ab:fb:3d:cc:24:2b:2f:2d:f9:5e:e2:d5:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 06:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c2ae4a528019f181784bd5c52f71847986d7f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:b0:e0:50:27:ff:d4:94:17:33:c1:4f:ab:
96:2f:8c:67:46:63:ea:68:a7:7f:92:9a:28:67:ed:
d5:9f:38:1f:ae:87:ef:90:34:8e:d5:c3:05:43:6f:
20:37:b1:14:3a:8c:c2:3c:da:2c:9a:74:de:c7:aa:
56:3b:6a:f1:e1:d5:6d:37:4e:53:ee:15:80:99:ab:
5d:6d:7b:9b:af:dd:e9:2c:9a:af:fc:37:12:d2:d9:
ca:8f:bd:af:b9:f3:67:85:80:70:28:fb:15:3f:14:
35:9e:91:22:9e:74:70:d6:cc:1f:b2:ad:36:30:9e:
4d:9a:70:56:80:e9:10:fa:66:fa:5d:22:3f:c0:1f:
7e:11:d8:40:69:ea:38:56:28:bd:cf:db:ef:b2:05:
18:31:21:e0:1d:be:f9:ba:de:c3:59:da:de:b6:7d:
dd:de:5a:55:ea:f7:89:e5:6a:0f:bf:e6:bb:c0:10:
4b:e9:8f:ad:6c:86:47:cd:a7:dc:54:c0:d3:e2:db:
b9:da:39:fe:c3:b6:fb:cf:29:b7:f5:c6:df:94:9c:
1f:18:73:dc:d0:70:97:83:8a:e9:cf:cf:19:e9:fe:
52:68:0a:3d:74:ce:5e:30:6b:cc:e0:c5:f2:76:be:
20:55:b6:bb:eb:fb:25:51:d4:0a:1f:89:5f:8f:e2:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:E4:A5:28:01:9F:18:17:84:BD:5C:52:F7:18:47:98:6D:7F:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HCrkpSgBnxgXhL1cUvcYR5htf4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:6a:5d:19:e0:f2:c4:26:01:65:8d:4c:65:e9:57:fb:14:f6:
b5:3e:02:3b:17:10:6b:e8:ff:7f:54:ac:3e:01:cb:69:d9:46:
db:a2:dc:f9:c1:2b:cc:d6:1f:3d:c1:45:e6:a1:77:68:a4:b0:
d6:c4:9e:c7:cc:ec:60:33:84:84:6c:ae:ae:f7:68:e4:02:9e:
f3:3c:9f:fd:a4:5b:97:24:0c:60:a2:db:be:8c:75:e9:0e:eb:
79:1b:79:32:1f:3e:8e:0e:93:fe:03:ef:b1:82:ff:da:f2:55:
7a:21:f3:42:a0:97:fb:bc:e1:0a:10:1a:9e:97:8d:75:f5:14:
53:5a:86:42:43:5a:f4:68:a5:de:1c:3f:75:81:af:80:e5:21:
2c:34:33:6f:0d:6a:c3:ec:a6:00:bf:7c:32:c3:5a:77:2c:02:
d7:69:31:93:05:9e:d4:dd:5a:a4:8b:e6:32:b3:c1:ba:3e:19:
4f:58:02:7c:a1:57:32:29:97:d3:a1:ca:06:e5:c3:b0:78:bb:
ac:d1:b4:5a:37:eb:02:7f:b1:7d:14:a3:8b:64:d6:42:38:9d:
67:76:31:1e:a2:de:23:c0:50:99:79:98:bf:0b:26:52:ff:df:
4a:1f:ea:5f:ae:0c:6e:9b:63:87:f3:51:dc:9c:c9:6c:b7:4d:
12:63:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:14:26 2025 by rpki-client