Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hQ-rf13KnDZz712QJpNl7k-9GWk.roa
File: hQ-rf13KnDZz712QJpNl7k-9GWk.roa (raw, json)
Hash identifier: TmbnscUi7DRYKZ6XIYvOC4P87azTvONGCwaHljNZkfg=
Subject key identifier: 85:0F:AB:7F:5D:CA:9C:36:73:EF:5D:90:26:93:65:EE:4F:BD:19:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F9910CD94D1419E6AD07859A9069B5BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hQ-rf13KnDZz712QJpNl7k-9GWk.roa
Signing time: Mon 08 May 2023 04:14:05 +0000
ROA not before: Mon 08 May 2023 04:14:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f9:91:0c:d9:4d:14:19:e6:ad:07:85:9a:90:69:b5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 04:14:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=850fab7f5dca9c3673ef5d90269365ee4fbd1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:e2:54:0a:50:aa:13:df:85:d4:af:77:b1:
e0:15:60:73:4a:3c:a6:77:2b:ab:c7:b7:a0:44:33:
7e:d6:04:06:9e:6d:78:43:fd:24:e0:c1:a5:4d:31:
04:6b:be:57:6f:5a:a0:25:f2:1d:7b:76:4e:e6:fd:
95:c2:57:ab:4e:8b:4b:f7:65:de:05:73:ee:b5:1c:
ab:67:51:89:ca:6c:25:d3:bc:44:bd:b7:69:54:a8:
53:b0:16:6e:bf:4b:31:f8:8d:77:bf:b4:34:47:a2:
ca:ab:28:16:c3:36:f7:17:d9:30:5b:3a:78:e5:a9:
f4:82:8d:d1:f6:f6:d6:05:fc:c9:79:7b:58:55:13:
16:ca:73:59:45:58:32:de:75:66:5f:6e:37:87:4d:
d1:f5:7a:e3:ce:7f:0b:42:fd:a2:a6:68:37:49:0a:
0f:ad:6d:d6:22:22:20:56:06:23:64:b9:70:3b:b4:
76:98:84:a8:3d:3b:44:fb:04:be:13:61:06:db:29:
70:66:2e:77:5e:df:b5:f5:d5:c8:c1:23:2b:4a:54:
77:8c:44:d8:85:35:5a:4f:65:34:2c:8b:5c:9a:70:
8e:91:f9:6d:0d:7e:f9:98:e7:e1:8f:db:65:e9:21:
ce:37:6c:8b:88:44:84:9c:04:7a:8f:d8:23:d5:a0:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0F:AB:7F:5D:CA:9C:36:73:EF:5D:90:26:93:65:EE:4F:BD:19:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hQ-rf13KnDZz712QJpNl7k-9GWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:ef:19:12:b0:ec:d2:d3:38:81:46:60:60:c8:35:d8:3e:e6:
aa:92:d9:73:b4:fd:94:ce:34:54:29:de:d9:ee:5d:5f:c0:2f:
97:ae:83:1b:e9:9e:96:01:4c:8d:f6:1a:72:b8:5c:04:4f:69:
10:eb:f1:c6:a7:6b:eb:7e:f3:01:42:33:eb:01:95:19:dd:55:
0c:7c:ca:28:5b:a3:83:66:50:78:db:93:e5:da:a8:a3:d4:14:
d7:1a:40:60:d9:8b:9f:54:18:80:40:93:90:fb:60:76:65:b9:
9c:f4:95:ad:34:b0:72:d1:01:0e:ec:93:40:53:2d:85:a5:9d:
f6:d2:0b:7a:9e:4c:ff:3e:71:a9:5e:cc:cc:b0:1a:8b:f2:aa:
3a:ba:d5:80:9d:0d:c1:b9:90:08:26:85:4e:96:ac:64:bb:9d:
ac:10:28:f9:f8:16:42:08:35:ab:3a:bd:79:48:00:84:c3:57:
0c:7f:44:82:00:5a:c8:58:b1:9f:59:82:c3:74:80:17:b0:b3:
28:cf:29:bc:d5:32:ea:28:c2:c2:f5:37:d8:fc:8e:cf:99:30:
8d:9b:4e:2e:ef:cc:07:7d:54:b3:bf:35:98:f9:2b:54:71:53:
a3:d2:cc:15:04:4c:c9:8f:f8:e6:f6:c0:1b:ce:c9:bc:e3:e4:
21:20:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:35:42 2025 by rpki-client