Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hkYfuDEYs_XLddKpeEkITGw73cQ.roa
File: hkYfuDEYs_XLddKpeEkITGw73cQ.roa (raw, json)
Hash identifier: wGWBDjL1qkPzpZpHNwrZSc/kcPpm01CvmagcDMY2Upk=
Subject key identifier: 86:46:1F:B8:31:18:B3:F5:CB:75:D2:A9:78:49:08:4C:6C:3B:DD:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863FBF036CE27F1493B4DC754B55FECF2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hkYfuDEYs_XLddKpeEkITGw73cQ.roa
Signing time: Sat 11 Feb 2023 09:12:08 +0000
ROA not before: Sat 11 Feb 2023 09:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:bf:03:6c:e2:7f:14:93:b4:dc:75:4b:55:fe:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 09:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86461fb83118b3f5cb75d2a97849084c6c3bddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:22:1d:6a:8e:36:48:d3:ba:cf:ea:82:19:69:
b6:31:bb:37:78:e2:ba:f0:e5:89:6f:3d:98:a8:5d:
99:55:d7:3d:49:72:1b:9f:e8:9a:c9:99:d0:bc:61:
b0:55:59:ac:d4:a1:23:df:3b:7a:16:03:03:c2:16:
87:9c:dc:f8:71:58:f6:07:99:75:a8:00:07:12:85:
a8:83:30:a1:8a:5b:0a:ac:41:ef:12:f4:8f:23:ff:
01:70:ec:9b:73:a0:81:54:7f:03:80:58:64:90:d6:
e6:27:bf:d2:77:01:94:c7:ff:b3:b5:4d:80:9b:1d:
7d:6f:6d:d2:88:ab:c1:a1:ae:c9:62:3b:78:e8:b0:
32:8f:b0:a6:07:74:b5:dd:2b:b1:ad:50:de:77:4a:
db:e8:44:d3:c4:93:06:0f:d2:80:2f:f2:ab:14:d6:
cc:e5:56:34:94:d0:da:03:4e:38:dc:5b:7b:ff:48:
7d:b9:ef:85:21:cb:f4:6d:e2:53:84:45:62:5f:43:
62:41:ab:90:c8:8d:4c:b7:0a:4c:1c:35:f5:db:79:
8b:77:fc:ba:51:4b:14:f4:84:7c:35:23:48:24:c5:
63:3c:96:e7:a8:df:f4:3a:f8:77:ac:17:a0:83:85:
78:6b:16:1d:60:09:9f:39:83:9d:2e:d4:1b:cc:7d:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:1F:B8:31:18:B3:F5:CB:75:D2:A9:78:49:08:4C:6C:3B:DD:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hkYfuDEYs_XLddKpeEkITGw73cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:c3:a2:1b:77:4a:ad:39:17:d1:51:5c:20:05:75:94:ae:83:
09:37:44:76:2d:a8:36:cc:e8:75:36:2a:38:f5:37:ea:c1:34:
75:87:92:46:9c:07:de:6b:ff:5a:e2:be:37:2b:2c:4b:07:d9:
de:41:96:0f:34:17:37:7e:0f:8e:59:a0:1a:da:9e:db:3d:0d:
db:4a:95:5c:74:06:f5:24:c5:67:5d:df:fd:40:61:06:98:43:
16:1b:ce:d1:47:c7:41:0f:50:b7:d1:33:6c:13:ff:c5:15:69:
07:9a:d8:4b:aa:81:da:16:d1:7f:18:bf:1f:e5:b6:0d:98:ea:
76:1c:8a:56:00:39:ca:7e:5b:64:3f:2a:da:59:c0:61:da:90:
d6:f0:93:64:41:90:f2:d5:c9:3a:a7:31:6c:1c:c5:8d:28:b5:
d3:41:e3:30:44:c3:ab:2c:bb:68:34:da:17:9e:8a:50:fd:cc:
f8:e5:b3:65:22:11:bd:05:85:84:24:01:3f:29:0e:4f:a0:93:
b8:06:73:a5:da:c8:67:04:b8:ad:59:52:6f:3a:2a:de:dc:d0:
89:d9:17:70:0e:c0:9a:b5:2f:74:1f:f5:7c:81:95:53:62:02:
d4:58:4d:30:d6:9b:bb:41:04:95:63:9f:32:18:d0:ab:04:25:
6d:09:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:37:29 2025 by rpki-client