Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUMP4_PTy94D7RQbGyI1-KQtFGw.roa
File: HUMP4_PTy94D7RQbGyI1-KQtFGw.roa (raw, json)
Hash identifier: Zh2KAc6UX0NoA144ObZk6DeAKC66PG+Z/KH5viJgSaI=
Subject key identifier: 1D:43:0F:E3:F3:D3:CB:DE:03:ED:14:1B:1B:22:35:F8:A4:2D:14:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82DEDDF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUMP4_PTy94D7RQbGyI1-KQtFGw.roa
Signing time: Tue 10 May 2022 18:15:03 +0000
ROA not before: Tue 10 May 2022 18:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195643889 (0x82deddf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 18:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d430fe3f3d3cbde03ed141b1b2235f8a42d146c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:99:9f:6f:52:36:8a:c8:80:e9:ca:8c:c6:
23:c1:47:45:62:d2:32:17:82:cc:f1:f9:a0:d0:d4:
4a:c0:0f:05:c2:a0:f4:3c:0b:1f:a5:3e:c1:79:e3:
2a:ca:ba:f7:f9:91:c2:46:f3:1c:04:14:0a:fe:be:
58:7e:fc:10:5e:46:0b:73:a3:71:39:0c:0e:b0:84:
78:39:f9:1b:2d:58:f0:31:8d:f1:7f:c5:83:8e:28:
81:81:c3:3b:37:70:1a:76:80:4f:56:41:e5:5c:87:
07:ab:34:17:58:9d:90:3f:64:91:d4:f6:09:4c:14:
53:62:76:6a:e3:34:0b:ad:78:b9:3e:10:62:95:92:
fc:a0:d3:5c:78:a8:d0:fc:4e:86:9f:74:0b:de:f6:
47:93:ac:25:27:ec:a6:c6:de:3f:54:c5:a7:67:e5:
65:ce:45:5a:37:99:8a:d9:71:85:fc:64:76:c3:9d:
2a:b9:08:ac:b0:86:04:17:11:ec:f6:2d:e1:98:a3:
ff:22:07:22:e6:75:c6:79:91:c5:17:fc:aa:d5:27:
26:fc:23:7f:aa:e9:26:a4:55:2c:2c:78:78:28:cc:
46:18:d8:36:16:4b:7f:1d:05:0f:29:50:2f:15:21:
12:58:a2:ab:58:6b:36:de:c6:5e:01:f4:c8:ae:04:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:0F:E3:F3:D3:CB:DE:03:ED:14:1B:1B:22:35:F8:A4:2D:14:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HUMP4_PTy94D7RQbGyI1-KQtFGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:3c:e7:f4:bf:4a:6b:1a:ec:08:f5:b0:f9:4d:6d:bc:bb:72:
0a:42:83:82:86:03:f3:d2:88:89:2e:2b:43:2d:e5:93:b1:40:
16:c1:99:bb:3a:42:a6:9c:c9:71:98:6f:fc:fc:03:01:a0:15:
8a:21:fb:c1:ca:5f:9e:9b:85:31:03:13:59:05:e5:06:1e:f3:
0a:e2:b5:90:57:2c:15:39:ad:2a:cd:04:ea:f9:2f:cc:86:55:
36:45:7b:1a:c6:b0:79:43:9c:4e:c0:82:7c:dd:48:f6:72:fa:
8e:6e:a4:87:97:da:6d:25:38:41:eb:e1:36:ce:e1:85:de:3e:
46:24:49:72:84:97:77:31:fe:0d:58:74:da:e3:3d:6a:76:89:
e9:a5:c9:82:04:0f:28:c1:24:a0:48:30:6a:8e:e4:82:4e:45:
20:fd:e4:11:01:fe:b9:0a:35:d9:d6:42:04:0d:7a:7d:be:e0:
4d:41:87:b4:b5:d6:d8:08:bc:7b:47:ab:1b:7a:15:48:7b:b0:
46:52:f5:3d:1b:e5:c2:a3:2e:1d:22:76:d3:eb:33:5d:70:4a:
d0:51:4e:51:f2:1e:31:e1:0b:4c:70:24:7b:1e:77:23:f5:08:
58:00:6a:85:ad:6f:f4:f7:1c:21:f8:5f:c8:4a:29:b6:c3:ee:
3e:79:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:46:21 2025 by rpki-client