Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiILN6XPiJIGzUAgURnAjk8jiFU.roa
File: HiILN6XPiJIGzUAgURnAjk8jiFU.roa (raw, json)
Hash identifier: RLHocgCYNeultDZvBQSox3mTBElr6tOuQA82/4cDNdc=
Subject key identifier: 1E:22:0B:37:A5:CF:88:92:06:CD:40:20:51:19:C0:8E:4F:23:88:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018212BC5AAFA822172C7209AB6AD9E8C158
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiILN6XPiJIGzUAgURnAjk8jiFU.roa
Signing time: Mon 18 Jul 2022 19:15:10 +0000
ROA not before: Mon 18 Jul 2022 19:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:bc:5a:af:a8:22:17:2c:72:09:ab:6a:d9:e8:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 19:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e220b37a5cf889206cd40205119c08e4f238855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:49:0a:18:9e:27:a9:08:e6:06:57:7c:29:
66:3c:77:d6:bf:e8:0b:81:dc:51:10:19:e9:1b:46:
14:4f:5d:35:c5:63:8c:a7:39:19:66:f3:cb:5b:70:
54:54:1b:b0:db:66:73:99:ad:12:bb:f7:e1:c7:94:
df:32:75:d4:2d:b4:3c:12:5a:cc:88:fb:23:86:c3:
6e:f1:d8:3f:3f:d2:bc:45:58:8b:4b:68:95:d4:97:
4a:6f:2b:a8:c5:b5:e0:72:ac:e7:b3:9f:06:85:ec:
ea:ab:96:07:43:ae:f3:f5:76:fd:e5:e9:f1:ab:33:
f3:0c:93:87:0b:a5:21:93:11:c8:87:51:8d:78:2f:
de:bb:a0:79:b5:97:43:84:39:59:23:ae:ec:f6:97:
43:14:ee:02:09:d5:1c:9a:01:1f:16:19:d2:44:b4:
16:b6:4c:2d:f0:a6:28:19:93:81:19:f3:c4:1b:40:
30:0d:8b:53:5a:94:f7:da:e9:21:71:38:f7:c8:c8:
b9:13:ac:8b:5f:df:3f:df:96:a6:7d:03:48:e8:b4:
60:13:7e:0f:38:cc:84:e3:32:3f:2b:fd:ce:53:30:
94:98:2f:22:cc:f2:f1:92:91:e0:79:f2:5c:ab:e0:
44:56:66:66:fb:4d:68:a0:09:65:92:aa:1b:d6:4c:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:22:0B:37:A5:CF:88:92:06:CD:40:20:51:19:C0:8E:4F:23:88:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HiILN6XPiJIGzUAgURnAjk8jiFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:e0:d1:84:41:75:9f:d8:4e:9c:33:00:72:a1:d2:33:d9:c9:
d1:25:42:23:2e:1b:6f:e2:1b:91:76:3a:ca:5f:e3:59:d6:30:
49:d4:a0:80:38:e3:62:f8:e9:ed:f7:f5:e9:52:1c:76:65:c9:
a6:d4:e9:70:d2:c4:a2:ff:1d:36:bf:85:35:ce:c4:67:30:74:
9c:25:ac:56:29:da:08:32:1d:17:af:7d:86:f2:e3:21:5d:71:
52:43:7a:74:6e:c7:cc:cf:95:68:06:ed:a9:42:00:63:86:db:
06:8e:4a:cb:90:ea:1d:fb:e0:a3:ee:54:37:9d:a8:e5:f7:11:
44:09:3a:b8:c3:1f:7d:cc:d8:51:d2:09:a3:64:2a:b9:62:68:
2c:9f:ac:34:e1:16:31:d9:86:58:73:aa:36:cc:71:ce:b9:4a:
41:f7:db:e2:d3:13:25:6f:04:6d:4b:92:23:57:c0:66:b1:22:
b6:7c:a7:21:15:33:18:f0:8e:a2:1d:c2:42:4b:8d:6b:ff:18:
0d:da:f5:7d:b0:1b:5f:b8:52:55:47:88:4f:00:e0:17:a2:0d:
28:33:8a:ec:7d:3c:b6:26:69:f8:6e:61:44:6c:a4:45:fe:1a:
51:06:85:ae:cf:66:0b:d9:44:3a:20:02:49:80:03:0e:52:ad:
15:b2:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:02 2025 by rpki-client