Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnzsIOsDYuzXvC_ItvCAgvrJBI8.roa
File: HnzsIOsDYuzXvC_ItvCAgvrJBI8.roa (raw, json)
Hash identifier: DlR0KC3qNH3p+iXj+dMrdXs2LcgaYnbhIurGb3szD6g=
Subject key identifier: 1E:7C:EC:20:EB:03:62:EC:D7:BC:2F:C8:B6:F0:80:82:FA:C9:04:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881EE4795A13D95E939A6BE166F63F065F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnzsIOsDYuzXvC_ItvCAgvrJBI8.roa
Signing time: Mon 15 May 2023 10:11:09 +0000
ROA not before: Mon 15 May 2023 10:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:e4:79:5a:13:d9:5e:93:9a:6b:e1:66:f6:3f:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 10:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e7cec20eb0362ecd7bc2fc8b6f08082fac9048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a0:7d:1f:82:60:e3:b3:0e:dd:40:58:71:7a:
24:18:ae:52:4c:5a:2f:78:47:69:31:8c:11:5c:09:
88:34:74:b1:96:26:4a:bf:99:eb:0f:52:91:0b:91:
98:8a:61:e5:3a:ee:72:cf:13:51:d8:16:47:f2:c4:
87:99:ce:fc:40:ac:b4:2b:6e:9e:4e:bc:00:dc:ee:
b3:2e:2a:6d:7e:24:61:95:e0:c1:0c:d1:32:df:70:
76:46:99:45:10:45:88:32:2a:fc:26:3c:dd:8a:ca:
01:d5:7a:0b:a7:06:d6:f2:49:14:e6:62:d0:0a:1b:
69:aa:bd:f7:c8:0a:57:87:aa:1c:a5:c8:ed:b0:4a:
96:94:31:1a:c0:79:c0:c9:c5:41:61:9f:09:9c:4f:
a9:62:b4:35:91:e4:d2:6b:80:b2:c8:d7:55:ab:15:
00:47:3e:c4:d6:af:e0:03:93:63:2e:92:9d:f8:6e:
75:05:ba:38:64:b9:df:ca:d0:a4:2a:84:7d:fe:4f:
9b:2e:89:64:9a:fc:59:5b:82:c5:9e:18:e5:c4:13:
3e:9a:be:72:c0:66:4b:84:98:8f:72:80:b4:de:03:
b5:4c:fb:00:9a:1f:63:7d:49:ad:d0:92:18:0a:4a:
13:f8:1d:29:32:be:5b:fe:1f:7f:08:91:fc:75:2d:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:EC:20:EB:03:62:EC:D7:BC:2F:C8:B6:F0:80:82:FA:C9:04:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HnzsIOsDYuzXvC_ItvCAgvrJBI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:6d:f2:87:fb:de:e7:97:5f:18:25:c0:4d:1a:d1:e8:44:e9:
96:15:73:96:dd:56:94:26:2c:6a:bc:15:e8:5d:3c:5e:c1:44:
93:f5:84:d5:b1:33:91:9c:5c:ff:bd:73:e2:71:1f:b6:a3:e8:
ba:1f:d1:96:73:7b:01:9e:f1:06:6c:0e:44:dd:91:e9:71:04:
47:78:4d:f9:56:d7:16:b4:f5:ab:52:76:a6:1e:54:47:fc:70:
8a:39:b8:e1:98:30:ec:f0:0a:19:f2:9d:21:c1:6d:1c:03:66:
11:9a:46:ce:c8:a0:de:c3:cb:5c:d3:16:a4:19:ed:6d:59:0b:
d3:2a:8a:64:4e:87:e7:83:35:f7:8b:55:3f:c2:33:46:2d:f1:
4c:d9:f7:33:95:e9:fa:b6:a5:f5:05:bc:7e:f5:05:40:e7:3f:
65:d3:7a:e4:b4:3e:53:99:e5:9f:22:8b:e4:08:8d:b5:ef:fa:
9e:a4:f3:23:d7:e9:76:7c:ba:af:96:21:2a:3f:5c:c2:e4:f2:
01:c7:b3:d9:06:a6:94:83:a8:43:ba:1c:c8:4d:b9:77:06:ab:
ca:c8:d7:7f:11:b9:34:1c:36:7d:30:25:a9:b9:91:85:df:fd:
6e:ab:14:77:bb:26:9b:e8:53:cb:e3:05:4d:5c:de:6c:14:12:
d4:29:b4:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYge5HlaE9lek5pr4Wb2PwZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE1MTAxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTdjZWMyMGViMDM2MmVjZDdiYzJmYzhiNmYwODA4MmZhYzkwNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqB9H4Jg47MO3UBYcXokGK5STFov
eEdpMYwRXAmINHSxliZKv5nrD1KRC5GYimHlOu5yzxNR2BZH8sSHmc78QKy0K26e
TrwA3O6zLiptfiRhleDBDNEy33B2RplFEEWIMir8JjzdisoB1XoLpwbW8kkU5mLQ
Chtpqr33yApXh6ocpcjtsEqWlDEawHnAycVBYZ8JnE+pYrQ1keTSa4CyyNdVqxUA
Rz7E1q/gA5NjLpKd+G51Bbo4ZLnfytCkKoR9/k+bLolkmvxZW4LFnhjlxBM+mr5y
wGZLhJiPcoC03gO1TPsAmh9jfUmt0JIYCkoT+B0pMr5b/h9/CJH8dS3LlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB587CDrA2Ls17wvyLbwgIL6yQSPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSG56c0lPc0RZdXpYdkNfSXR2Q0FndnJKQkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZt8of73ueXXxglwE0a
0ehE6ZYVc5bdVpQmLGq8FehdPF7BRJP1hNWxM5GcXP+9c+JxH7aj6Lof0ZZzewGe
8QZsDkTdkelxBEd4TflW1xa09atSdqYeVEf8cIo5uOGYMOzwChnynSHBbRwDZhGa
Rs7IoN7Dy1zTFqQZ7W1ZC9MqimROh+eDNfeLVT/CM0Yt8UzZ9zOV6fq2pfUFvH71
BUDnP2XTeuS0PlOZ5Z8ii+QIjbXv+p6k8yPX6XZ8uq+WISo/XMLk8gHHs9kGppSD
qEO6HMhNuXcGq8rI138RuTQcNn0wJam5kYXf/W6rFHe7JpvoU8vjBU1c3mwUEtQp
tCE=
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:49:41 2025 by rpki-client