Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa
File: HpdFpTJUxiCpU1PkTsq88C_pgBA.roa (raw, json)
Hash identifier: 9acIj4nikK7A//ZK+4qovjZVNRgDiRKarNFCf7cwbvw=
Subject key identifier: 1E:97:45:A5:32:54:C6:20:A9:53:53:E4:4E:CA:BC:F0:2F:E9:80:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88014F9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa
Signing time: Sat 28 May 2022 21:10:13 +0000
ROA not before: Sat 28 May 2022 21:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281787292 (0x88014f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 21:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e9745a53254c620a95353e44ecabcf02fe98010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:cd:7b:ff:85:23:bd:de:d1:0c:16:17:22:
61:bc:f4:1c:e3:1b:80:06:20:7e:97:93:6d:36:b0:
52:66:5e:ec:74:a7:aa:78:4d:59:bd:ea:54:7c:eb:
18:ce:59:39:11:9a:a3:61:0c:7c:08:cc:cf:dc:b1:
a9:df:82:ad:6f:70:f3:d9:34:32:d4:a6:ba:1a:05:
4a:bf:ab:f9:1a:fa:4b:d2:97:89:af:a2:86:52:76:
ad:d7:8c:aa:e5:07:3e:3d:33:40:04:38:e8:92:63:
2f:29:20:c9:65:c1:70:55:2e:3d:e5:8b:28:7e:ba:
c0:b2:00:4b:4f:d8:1a:f7:10:99:50:11:ce:cb:1f:
1b:26:b0:45:89:ec:10:4e:11:9c:df:26:4b:95:d1:
7e:e6:47:1b:f0:47:45:6a:2f:48:47:a7:a4:6f:d6:
52:68:57:90:bc:99:18:1f:4f:d4:dc:fb:b4:9b:41:
06:de:c5:c2:31:aa:fe:cd:12:52:98:7f:37:f3:c1:
f7:04:fc:49:5c:cc:18:d7:df:9c:85:9f:2e:c7:e3:
a6:b4:a8:19:62:63:fd:3c:74:74:31:02:e4:5d:f9:
83:12:21:8b:b1:b3:50:87:68:e3:91:72:bb:6a:54:
1d:77:d6:0b:02:48:5c:08:d4:0f:c3:57:5e:04:75:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:97:45:A5:32:54:C6:20:A9:53:53:E4:4E:CA:BC:F0:2F:E9:80:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:eb:3e:dd:84:aa:97:f8:97:29:fe:14:b6:5e:4c:67:99:85:
8f:a7:db:c7:85:1d:e1:5e:00:3a:b7:95:cc:d2:cc:40:8c:20:
54:51:26:ac:ca:28:bb:35:1a:e8:2c:9a:d0:e3:8a:77:4d:69:
1b:5f:44:cb:c5:8f:e4:94:95:7d:b2:0f:03:d4:a5:29:ad:c9:
29:79:9a:af:03:5b:ef:8e:a7:dd:22:77:a3:e5:dc:df:31:89:
fc:f8:98:8e:b1:b2:db:6f:2f:06:3d:d6:70:ad:10:28:ef:f9:
c5:77:51:6b:61:8a:ba:c4:99:e7:e7:e3:f5:66:0d:16:fc:39:
51:12:33:43:06:63:3b:2b:09:36:8b:b3:bf:90:81:9a:65:d8:
93:32:39:58:26:4d:92:48:2b:e6:07:a4:dd:8f:ef:4c:3d:ad:
58:96:00:e8:88:a5:bb:65:e7:2b:34:48:a4:54:66:f0:86:65:
dd:d8:a8:f2:e9:1c:ea:ba:2f:5b:7a:98:f6:8c:fb:55:ac:da:
68:35:90:71:a0:88:a4:10:eb:b8:3b:6f:b3:52:a6:0d:4c:60:
2b:b0:81:d9:16:a9:2a:14:65:f0:e3:8f:df:cf:01:a6:30:a3:
22:70:3d:e2:4a:e6:b2:e5:dd:fa:d5:f2:ef:45:61:26:6c:7d:
d8:74:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:03:45 2025 by rpki-client