Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heygpjtQa88RPogR0QnNv_GUr88.roa
File: heygpjtQa88RPogR0QnNv_GUr88.roa (raw, json)
Hash identifier: vPhSqxUp3br9bORDwUYUjtQRdkoiKXsYg+3C+LjgqLw=
Subject key identifier: 85:EC:A0:A6:3B:50:6B:CF:11:3E:88:11:D1:09:CD:BF:F1:94:AF:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867DC60FFB62946A1F511D2F89D71A81AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heygpjtQa88RPogR0QnNv_GUr88.roa
Signing time: Thu 23 Feb 2023 10:16:17 +0000
ROA not before: Thu 23 Feb 2023 10:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:c6:0f:fb:62:94:6a:1f:51:1d:2f:89:d7:1a:81:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 10:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85eca0a63b506bcf113e8811d109cdbff194afcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:0c:f4:09:0b:5e:bf:7a:06:1b:f8:e1:10:
f3:4e:bb:92:b4:ec:0f:d4:ac:ca:37:d1:9b:e3:c4:
24:84:4f:de:da:d4:6a:1b:d1:42:e3:cc:b5:04:23:
56:ce:84:cc:81:08:ab:a8:5c:fe:53:e6:dd:da:cb:
d8:f5:18:62:f8:3e:e3:18:0f:7f:c0:cf:25:1e:1a:
16:6f:e7:b6:a3:aa:53:c9:8b:5a:30:35:57:32:0d:
70:95:b9:d7:6c:52:20:03:a6:b3:cf:e4:36:ff:2d:
7e:b3:2b:c1:f5:2c:e3:d3:ad:d6:8f:ee:86:c9:06:
0e:2f:18:97:11:c4:de:94:ef:9c:13:6d:9e:ad:00:
f7:f1:1f:a9:34:9b:9d:a5:b5:b7:c0:64:5e:ba:11:
52:dd:1b:48:7c:92:8a:77:d6:b8:e6:c6:a5:7b:8d:
84:da:a4:93:29:7d:ee:0e:04:f1:6d:45:46:48:93:
2e:8e:04:34:1b:a0:18:08:83:26:56:2c:df:c2:8a:
a2:9f:5a:9d:1f:5d:f8:f7:be:a8:a7:42:2e:d6:55:
4f:62:82:d5:8b:50:5c:13:a9:e9:0a:da:9b:f1:dc:
9f:bc:9b:92:d2:5d:ab:a8:1a:d4:b4:70:22:e0:9b:
07:b2:8c:0a:f0:7e:30:b4:ed:ac:4d:f8:c9:1d:37:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EC:A0:A6:3B:50:6B:CF:11:3E:88:11:D1:09:CD:BF:F1:94:AF:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/heygpjtQa88RPogR0QnNv_GUr88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:00:3e:55:96:a9:6d:5b:52:20:12:77:e8:d1:f5:7a:8f:19:
19:2c:1e:f2:1c:71:cf:1e:fb:bd:0c:54:26:07:7a:e7:12:ee:
cf:29:95:ff:b5:79:d8:48:75:c0:9c:3a:c6:36:6d:94:3d:c5:
ee:c2:f5:e3:8b:89:45:e6:ff:34:f1:9d:43:2b:b4:6e:34:fc:
fe:c9:a0:4e:10:0d:85:d6:56:13:b8:9a:0a:65:63:58:82:0d:
84:e8:45:c5:65:9e:f2:7e:ae:71:f9:94:78:9e:3c:5e:df:08:
63:65:40:6d:bf:87:0d:57:c3:a2:ba:98:3e:77:7f:49:0d:ee:
82:d3:5a:be:43:e4:37:e2:44:84:36:67:7b:08:85:57:0e:b8:
2e:12:40:1c:56:83:6a:5f:80:0f:ff:aa:d3:bc:be:11:49:e0:
84:7a:30:0e:99:15:e5:74:79:c8:f8:89:c6:e2:6a:55:ba:56:
84:96:42:dc:3a:2e:2e:bc:10:1f:ac:d9:64:0b:4e:47:ca:99:
ac:de:d4:38:3c:3e:37:1d:87:ee:cf:a0:8e:56:16:8a:9d:40:
ba:72:40:f0:9f:f8:3f:ac:88:9c:55:c7:53:14:27:03:bc:4d:
32:a6:40:0f:82:11:26:81:76:7f:b6:8e:e0:e3:65:8c:99:2d:
3e:b5:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:51:48 2025 by rpki-client