Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa
File: hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa (raw, json)
Hash identifier: FNaJK95p4ThEhrqXNs79fP58no6U6augfp+hCSCKpJo=
Subject key identifier: 86:14:46:CE:BD:CD:83:94:EA:D1:27:6D:22:5C:82:37:A3:62:1F:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72510A20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa
Signing time: Mon 14 Mar 2022 00:09:17 +0000
ROA not before: Mon 14 Mar 2022 00:09:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1917913632 (0x72510a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 00:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861446cebdcd8394ead1276d225c8237a3621f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:84:b6:4a:41:82:28:9c:f9:ae:93:46:35:
d5:84:ae:d9:46:18:03:43:04:74:fc:a2:4e:40:d2:
40:74:e4:11:94:2e:fe:52:62:e0:a0:5c:54:09:d0:
07:dd:5c:c9:d2:f9:fd:16:e1:55:e9:9b:b6:10:0f:
92:c7:30:79:e3:41:61:17:35:b0:81:07:69:54:2b:
cf:89:01:12:28:71:d6:14:9e:e8:13:e7:b4:cb:a9:
6e:b5:81:15:52:36:27:c6:c4:d1:44:c7:fb:ab:9e:
e3:af:75:4b:0d:e8:a8:e4:7e:75:f1:9f:b8:31:a1:
05:eb:4e:b1:6f:3a:92:ff:cf:6d:3b:1e:02:a9:2c:
c3:4d:4d:c8:44:32:0f:1a:da:97:f3:05:a7:af:15:
57:7d:b4:aa:c0:19:cb:db:d2:6d:ae:ca:89:44:1b:
24:61:2b:b3:8f:6b:52:47:a4:f2:66:7b:17:e4:5a:
75:2a:46:e9:27:29:dd:2f:10:60:81:99:f2:d9:5f:
9d:6b:77:50:76:42:47:f1:e4:1b:66:90:43:82:a4:
e4:8a:9d:15:64:73:8c:5b:19:bd:d8:6f:4f:2d:40:
fd:cb:67:25:cf:bd:8d:b8:66:c4:17:83:22:0b:66:
b8:64:95:0a:ae:c4:42:3d:d6:9c:ee:f4:cc:02:7d:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:14:46:CE:BD:CD:83:94:EA:D1:27:6D:22:5C:82:37:A3:62:1F:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:ae:96:e3:1a:e4:02:aa:14:2c:3e:eb:89:10:ce:02:84:0d:
20:f1:82:b2:99:95:7d:ac:e0:23:37:17:06:0f:ff:83:64:d1:
8f:90:5e:bd:bd:e2:9a:f2:2a:16:6b:75:6c:e0:55:86:da:53:
ba:8a:f3:31:38:e7:53:1f:76:e4:45:8e:9c:3c:a0:bb:6b:e5:
ee:c9:48:6d:a1:4c:9c:48:63:72:06:35:6a:90:19:09:dd:1e:
d1:c6:56:52:56:68:a3:05:b5:cc:3b:23:33:03:20:5c:ff:cd:
be:ec:ee:11:f2:8d:ab:56:5a:fb:a6:f4:00:5e:0e:4a:67:15:
ce:34:1d:df:77:5f:d6:57:d1:29:49:3d:b1:62:37:49:e0:a7:
7d:7f:7b:63:32:aa:ea:c5:b6:6e:bd:e6:8f:25:19:dc:c4:a6:
2c:53:45:c4:04:1c:56:5e:da:9c:4a:54:43:83:51:36:e7:c7:
bc:c5:99:49:f8:c6:5b:78:74:79:a2:e3:c4:b5:38:8e:e6:c7:
34:a8:11:eb:93:ef:62:1d:05:c2:f9:cb:54:d7:ef:c6:f6:a7:
5f:de:eb:37:09:5c:a3:7b:07:5f:3f:4e:af:2b:88:5f:b6:db:
2f:3e:25:2f:ca:d7:96:6b:09:f1:31:72:d8:a1:e8:66:12:34:
6c:2d:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:32:19 2025 by rpki-client