Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBuwBFtmu0yAkFsvuuLfeVCepSY.roa
File: hBuwBFtmu0yAkFsvuuLfeVCepSY.roa (raw, json)
Hash identifier: 5CF4ifppwA+vrz6E0gnnhL0rsSuapVgko0yArrzhAyU=
Subject key identifier: 84:1B:B0:04:5B:66:BB:4C:80:90:5B:2F:BA:E2:DF:79:50:9E:A5:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875E32877E4046056D1CF220AB100DAFBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBuwBFtmu0yAkFsvuuLfeVCepSY.roa
Signing time: Sat 08 Apr 2023 00:09:42 +0000
ROA not before: Sat 08 Apr 2023 00:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5e:32:87:7e:40:46:05:6d:1c:f2:20:ab:10:0d:af:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 00:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=841bb0045b66bb4c80905b2fbae2df79509ea526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:e0:75:03:da:e7:61:a1:bb:02:2f:24:a6:
c9:6a:c9:20:22:ab:a8:1b:4b:c8:5c:12:ed:8b:cd:
7b:49:b9:a7:03:f9:76:7c:d8:1e:d2:82:c0:11:7a:
fd:f6:71:b9:71:76:18:9b:44:a1:35:28:7e:b7:ae:
9f:c2:38:7c:0c:42:fc:01:49:34:7a:4b:37:ec:ae:
3b:98:55:3a:bd:7d:d7:9c:fd:de:24:c5:aa:05:8f:
9c:e6:8b:3c:5d:a9:6b:8a:1f:3a:f9:47:a6:b4:c2:
81:5a:74:43:d1:b6:fc:9e:95:50:1e:64:f4:e1:4f:
65:9f:d7:37:b1:93:2e:49:cc:c2:c0:8b:94:52:f0:
ab:78:60:60:55:6e:bd:6b:13:31:ec:94:3e:28:26:
df:1d:4f:85:fa:3d:42:ea:d5:4d:5c:48:12:2a:d9:
01:25:b8:11:ee:40:9b:6e:cb:c2:67:9a:24:a9:8c:
ee:7b:16:c4:7c:a7:b6:66:70:98:1e:54:18:8e:5c:
5f:d2:ed:e7:aa:a5:fd:68:e6:33:ad:51:ec:5c:0e:
ed:51:b9:d8:3b:8d:b0:3f:0a:08:e7:60:94:89:aa:
4e:e8:08:b2:eb:57:8a:06:a4:71:78:35:84:d4:3d:
cc:59:bf:09:ca:27:ca:b4:6c:41:15:81:41:d7:5c:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1B:B0:04:5B:66:BB:4C:80:90:5B:2F:BA:E2:DF:79:50:9E:A5:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hBuwBFtmu0yAkFsvuuLfeVCepSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:38:2e:58:94:54:c0:96:ea:e4:b9:45:62:26:be:19:51:8e:
b6:69:3b:0a:fd:21:02:d3:de:6a:b3:c3:cc:be:60:6b:54:cc:
aa:19:c9:13:9b:44:4f:0a:38:b9:98:af:39:f4:1f:8d:83:19:
6f:3e:51:d9:5b:ab:db:ce:1d:08:f9:6b:73:41:3c:a0:e1:0e:
e7:19:d2:6e:8e:79:8b:12:78:fd:f7:e0:da:cc:0b:9c:a2:d0:
12:4b:1c:d3:6b:95:e1:72:fc:42:3b:51:5c:78:4c:41:93:1e:
9d:c1:48:3d:a7:71:ce:72:c1:6c:e1:82:a9:80:5d:94:fc:88:
64:db:54:c5:98:bd:d4:a6:9e:c3:0a:54:1e:9f:08:a5:54:bd:
d7:e2:22:51:45:1a:a3:c3:c3:59:d9:bb:b3:0f:67:8c:71:b4:
1f:48:a1:3f:e9:1e:1b:91:fa:f5:9e:97:56:05:80:3d:83:5e:
8d:91:e4:83:6d:ba:7d:a5:84:25:42:0d:46:3e:ee:ef:71:74:
a7:c5:10:da:04:83:2a:e2:83:02:99:e5:71:ba:52:92:71:69:
4a:d2:02:2f:07:49:89:1b:af:f6:1b:c8:af:ad:2c:8a:60:66:
9c:4d:db:a3:10:44:e1:74:bc:a3:9e:4f:74:1f:15:5e:40:04:
69:11:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:50:59 2025 by rpki-client