Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYmfPIfAu6usBEgLDGJgmMp1jkc.roa
File: hYmfPIfAu6usBEgLDGJgmMp1jkc.roa (raw, json)
Hash identifier: INeER8XkfYf2/aMGBcOAPOrdAB72g5igi9Py7ldTPeo=
Subject key identifier: 85:89:9F:3C:87:C0:BB:AB:AC:04:48:0B:0C:62:60:98:CA:75:8E:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189842BC1BFDFB09C463674BB84D7A1883A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYmfPIfAu6usBEgLDGJgmMp1jkc.roa
Signing time: Sun 23 Jul 2023 19:13:27 +0000
ROA not before: Sun 23 Jul 2023 19:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:2b:c1:bf:df:b0:9c:46:36:74:bb:84:d7:a1:88:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 19:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85899f3c87c0bbabac04480b0c626098ca758e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:1d:ea:fc:53:54:e8:1f:17:a7:a0:50:05:
5f:eb:c5:84:27:44:5f:21:af:66:df:8c:ba:83:df:
95:0a:75:9a:90:b9:b6:23:88:8b:a8:6a:ee:de:30:
92:2b:54:5d:94:ba:34:cb:04:6f:2b:24:4e:5c:79:
6e:78:e0:cf:18:1c:a1:84:2f:bf:7d:e6:71:bb:5c:
f7:ef:86:59:4b:c7:08:a1:39:af:f9:12:ff:46:fc:
76:03:f5:15:14:13:9b:4f:9e:02:34:ae:95:ab:59:
a9:15:8d:e3:22:60:59:61:69:12:c9:6c:55:c8:b7:
06:6f:4f:74:17:ab:0a:fa:74:d5:05:3c:4a:81:13:
1e:fe:24:e2:a5:a7:bc:4f:77:9b:3d:d5:04:38:24:
8b:b5:d8:d4:a1:49:53:2e:b5:8d:99:19:0c:5c:43:
cb:ca:61:4c:b7:3f:b4:58:f2:67:ed:3e:89:13:74:
96:17:15:98:51:4d:8f:39:57:3f:df:21:66:45:d3:
15:42:63:be:e2:91:a4:94:d2:a5:46:87:00:e2:e2:
60:e6:a1:c8:e1:7c:0e:f9:90:01:a5:ee:c7:c5:29:
eb:ce:cf:85:7f:15:f4:b5:d9:ac:1c:25:bd:24:3c:
a6:be:f7:ad:cb:65:69:c6:12:b2:64:9c:5d:26:1d:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:89:9F:3C:87:C0:BB:AB:AC:04:48:0B:0C:62:60:98:CA:75:8E:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hYmfPIfAu6usBEgLDGJgmMp1jkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:c7:5e:d9:d8:c3:c2:25:d9:12:7d:15:25:a4:69:bf:2a:64:
8b:a6:80:b9:b5:03:42:af:0b:e6:a6:d8:1d:d9:c3:21:de:d0:
f0:79:12:46:08:a6:63:9a:31:bd:f9:3d:d2:3c:31:18:2b:cc:
93:3a:f8:6d:98:3d:66:47:da:3b:e2:3d:57:ce:35:98:11:f3:
12:26:5b:ac:87:d5:14:55:8d:e4:82:b9:16:e4:75:fe:93:17:
98:21:a3:92:39:e7:54:f8:e2:9b:f2:ad:01:07:0a:bd:af:96:
c2:27:3b:e6:ff:8a:2b:34:1a:9a:67:20:9b:95:23:2b:15:f2:
58:1c:ef:4d:cd:79:6d:ee:ca:a9:94:78:94:9f:c9:63:02:91:
2c:4d:bb:8e:16:a6:6b:ef:ca:3d:a8:61:de:c9:d6:ad:7a:ab:
41:da:95:7a:99:f3:da:c5:35:76:6b:92:01:f6:9b:be:53:2d:
7b:7d:f5:e1:4c:a2:2e:68:d3:91:d2:db:83:b7:89:da:51:04:
8d:a0:77:68:fe:05:bf:d1:23:78:9f:4b:96:9f:b7:76:37:ef:
84:90:af:f0:10:ec:22:17:89:5f:49:6d:24:f7:02:2e:d9:f1:
39:06:cd:3a:be:aa:62:4b:c7:2a:20:4f:e1:24:57:d8:fc:18:
3f:70:ae:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:07:24 2025 by rpki-client