Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNQFtIVzGjW93PhAoURfdzYtQoE.roa
File: hNQFtIVzGjW93PhAoURfdzYtQoE.roa (raw, json)
Hash identifier: TbMYrmI8orezPvoXk3G8KIWkEUlBILkzNcOigwuR1t8=
Subject key identifier: 84:D4:05:B4:85:73:1A:35:BD:DC:F8:40:A1:44:5F:77:36:2D:42:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B7510A349142D6E693404099A4FD8A95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNQFtIVzGjW93PhAoURfdzYtQoE.roa
Signing time: Fri 19 Aug 2022 18:15:17 +0000
ROA not before: Fri 19 Aug 2022 18:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:51:0a:34:91:42:d6:e6:93:40:40:99:a4:fd:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 18:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84d405b485731a35bddcf840a1445f77362d4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:d2:e4:19:90:1c:5a:ca:aa:13:ac:ee:67:
a2:51:ee:da:10:2e:2e:53:a4:42:96:99:a4:7f:14:
57:a9:68:94:40:0f:a2:b0:1c:3e:8d:4b:35:95:84:
1d:f0:5f:a1:14:a4:6a:f5:18:5a:d1:3d:45:da:f4:
19:5c:15:a8:65:a4:12:e6:d2:59:b7:f3:dc:0f:95:
98:13:ce:4c:19:09:7f:51:02:8a:07:32:eb:5f:f7:
56:a6:73:8e:42:f2:4c:a2:83:b4:27:91:be:81:50:
62:0b:6f:2c:39:60:e3:87:eb:dd:4d:0e:97:b5:73:
28:a3:bb:2e:80:12:f8:ba:fa:ab:45:e1:00:ca:40:
de:d2:5a:73:02:99:81:0e:a6:6d:96:ca:9b:da:cc:
d1:a5:7a:39:8d:2f:b5:03:68:3f:d0:cc:1a:3c:63:
eb:1d:fd:41:b4:a9:b3:6f:95:a5:8a:eb:7a:b6:0f:
38:42:82:65:3e:b8:c6:11:17:46:df:06:a0:45:fb:
42:47:42:8f:83:1e:9f:c7:60:92:a7:49:75:f6:09:
e4:55:41:85:ab:2c:18:36:bf:f7:a9:e4:2a:bd:89:
1b:40:44:18:54:4e:12:b8:54:48:13:b1:3e:37:28:
80:49:a4:4a:fb:fe:49:61:2f:97:cf:1a:b0:e1:34:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D4:05:B4:85:73:1A:35:BD:DC:F8:40:A1:44:5F:77:36:2D:42:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNQFtIVzGjW93PhAoURfdzYtQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:7b:da:84:5f:44:fb:e8:57:5e:19:30:68:fc:aa:d7:b4:71:
a3:82:24:d8:ef:25:23:fb:f9:78:79:ea:61:a9:00:5d:ce:a6:
b6:09:91:3c:b0:48:4e:e9:47:e6:55:c2:f7:90:88:56:63:a3:
df:92:2d:72:b3:58:5a:2e:8e:ec:5d:a8:20:80:bc:e0:17:9d:
01:49:1b:3b:09:c4:36:61:e9:b5:fd:01:43:dd:c7:53:14:6e:
2b:f6:d4:78:ae:0c:e6:60:7d:26:4b:fd:50:16:62:28:80:4c:
66:52:bc:0a:50:58:34:c1:cc:1e:ac:da:11:20:a9:36:a0:6b:
6c:9e:22:92:0f:f6:1b:0b:8f:20:15:9a:35:54:71:ca:8b:95:
75:4f:2e:b7:22:1b:75:28:e3:16:2c:d3:1c:b4:c7:a9:4a:2e:
e4:73:be:db:35:d8:2b:9e:6b:b5:c3:8f:30:45:3e:c6:68:07:
5d:8a:4d:04:12:cf:25:34:6c:07:4e:39:d0:18:0f:57:4d:56:
8b:b6:bb:19:f6:23:6e:af:40:8e:b8:16:00:c9:39:48:07:e3:
96:86:a8:bc:79:91:e4:6b:37:c1:e9:84:2b:91:1a:02:3a:23:
b3:d4:ee:09:2b:8a:ad:33:f1:81:8d:62:f8:ae:dd:60:29:67:
4b:b3:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:45:45 2025 by rpki-client