Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWqVpXSPG5NdaAf-pFXkoqyAtvQ.roa
File: HWqVpXSPG5NdaAf-pFXkoqyAtvQ.roa (raw, json)
Hash identifier: 6+1p9M7Qu3XaJtn7DTZfmx6LdYLU1tvu/B4dfFGz5OM=
Subject key identifier: 1D:6A:95:A5:74:8F:1B:93:5D:68:07:FE:A4:55:E4:A2:AC:80:B6:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E3AA75AE36767C4A83620B5856E32A22
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWqVpXSPG5NdaAf-pFXkoqyAtvQ.roa
Signing time: Tue 24 Jan 2023 12:04:37 +0000
ROA not before: Tue 24 Jan 2023 12:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:e3aa:3dfc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:aa:75:ae:36:76:7c:4a:83:62:0b:58:56:e3:2a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 12:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d6a95a5748f1b935d6807fea455e4a2ac80b6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c7:49:16:c6:9f:08:aa:17:8a:09:7a:e2:1f:
75:d7:87:25:37:52:4e:09:cb:7c:81:f3:fb:7f:68:
03:d5:16:f2:26:74:1e:4b:9f:c5:6b:78:68:0f:44:
cb:42:f8:80:8c:d5:56:ee:08:fe:6f:cf:29:7a:8b:
0a:4e:32:2e:c5:0c:05:9f:02:5b:43:40:17:70:c9:
3f:4f:a5:dc:a3:fe:d4:0c:87:46:c8:be:0c:b1:9b:
49:f5:f8:d6:2a:83:71:5c:cf:08:b5:b6:9c:e5:22:
a6:f7:8f:e3:4e:12:3b:9f:7d:53:d3:ee:be:0e:b3:
f2:c8:e4:b5:aa:df:fd:ce:8e:c3:46:ac:14:23:02:
59:77:9b:b5:be:3f:3d:3c:1e:8b:77:16:7e:2e:b0:
47:c0:39:9a:bf:5c:0c:a0:7c:7e:4b:97:f9:3b:1b:
e8:d1:9f:ff:0a:c6:27:fd:b1:81:5a:6f:d8:eb:22:
57:41:7c:2f:4f:0d:f7:92:ce:f1:25:a9:c4:06:0a:
02:33:ee:13:bc:75:03:13:e0:ba:c6:0a:bf:03:eb:
2f:40:03:33:27:8b:48:ab:3f:fe:e1:93:97:f1:7d:
75:96:77:f8:2c:09:27:36:7f:11:1a:ed:9e:40:53:
d6:85:40:69:57:9c:19:0e:9c:d6:f5:98:a2:49:b8:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:95:A5:74:8F:1B:93:5D:68:07:FE:A4:55:E4:A2:AC:80:B6:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HWqVpXSPG5NdaAf-pFXkoqyAtvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:20:55:30:41:97:5f:80:cc:7e:a5:e3:bb:7d:08:9e:02:d3:
ec:8b:1d:a6:44:bf:e3:c2:93:59:c2:07:d0:f4:ac:20:0a:67:
e5:a2:ec:af:bd:a7:bb:fa:95:96:36:0a:71:c3:ef:90:98:05:
f9:49:37:dd:18:51:df:99:41:e7:d5:a4:86:72:4d:b7:d8:a1:
02:4e:62:dc:8e:26:09:f5:90:8c:3e:5f:b8:20:c7:6e:cd:30:
d4:8a:20:86:78:a5:39:e3:52:4a:1e:8a:f9:5a:9f:49:34:b6:
90:af:e2:6c:5b:00:23:a1:47:11:c7:55:03:2c:d2:a0:52:37:
8c:1d:5d:1d:24:8e:6c:14:1c:5b:e8:ec:ba:1c:34:85:84:e7:
bb:6c:68:74:ce:e8:85:67:20:21:ec:22:d2:95:8d:f5:3d:f5:
d7:57:1a:7b:b2:05:53:c0:b9:b2:2d:3a:c8:6a:44:8d:a3:55:
f6:52:a5:f8:84:91:3c:20:f0:07:a2:65:71:29:a9:24:1a:39:
2c:45:3d:2a:48:f5:b9:1c:3d:da:69:cb:3d:be:f0:61:c5:38:
ca:60:49:5e:ce:f8:5f:fc:7a:6d:e7:46:85:5a:0c:94:db:20:
5d:34:d5:e0:c1:08:64:e9:68:d8:95:ae:86:ee:43:b0:2d:30:
8a:37:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:29 2025 by rpki-client