Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hnCtDxVwsE0ByavD4T265VUfY8o.roa
File: hnCtDxVwsE0ByavD4T265VUfY8o.roa (raw, json)
Hash identifier: yLJrNfMhuxZ0bF+sgOZGtJ5ckQgxjZaKMeB/gXHIkJI=
Subject key identifier: 86:70:AD:0F:15:70:B0:4D:01:C9:AB:C3:E1:3D:BA:E5:55:1F:63:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183294139373674A372A3A3F4C106D8150B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hnCtDxVwsE0ByavD4T265VUfY8o.roa
Signing time: Sat 10 Sep 2022 21:14:43 +0000
ROA not before: Sat 10 Sep 2022 21:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:29:41:39:37:36:74:a3:72:a3:a3:f4:c1:06:d8:15:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 10 21:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8670ad0f1570b04d01c9abc3e13dbae5551f63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:52:48:33:9c:09:32:ce:2a:be:3e:3f:5a:
ea:ae:e6:6d:04:33:8c:9f:d9:fc:40:7f:5f:1f:26:
6d:53:41:30:93:f6:56:2b:d2:13:e0:52:8a:40:f5:
81:8b:99:58:f2:94:92:b1:e6:5b:87:80:62:73:4c:
a8:ce:a9:3c:a9:6a:58:43:94:13:6e:51:26:ca:f0:
f0:93:8f:af:95:4c:e5:8f:3f:f3:0d:dc:c4:9b:24:
9d:56:4e:4e:cc:fa:b4:fc:77:42:5d:51:20:48:90:
c9:a3:56:32:93:02:2c:1d:28:19:9a:17:bf:8b:15:
45:61:f5:ef:11:f6:23:5e:4c:19:21:4f:d1:0d:8a:
d2:e0:bc:04:ab:45:5f:fa:2d:c0:3e:26:f3:62:42:
f2:a3:59:41:7a:76:10:a9:d1:cc:7c:98:e8:69:02:
c0:ab:92:17:fa:12:d8:dc:4f:1d:43:da:cd:75:79:
48:61:a7:51:ec:7e:c1:7c:5a:35:aa:a3:7f:26:f8:
6f:ca:70:d3:ed:19:7e:f6:8c:4a:7f:2a:73:ae:c7:
90:33:88:90:75:f4:c5:f6:19:1d:6d:89:fa:a4:0a:
a5:29:82:44:db:59:b8:ba:f7:84:07:7a:c5:91:1f:
f4:26:85:39:d0:d0:18:0f:86:8d:99:b4:07:0a:73:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:AD:0F:15:70:B0:4D:01:C9:AB:C3:E1:3D:BA:E5:55:1F:63:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hnCtDxVwsE0ByavD4T265VUfY8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:d9:f2:4e:d8:7e:e3:ac:51:e5:d7:46:a9:75:f6:21:a4:53:
8a:87:c0:11:23:03:fb:53:54:55:13:17:3f:a2:3f:9c:a9:43:
bf:48:cd:1a:db:f6:9c:fe:90:e3:49:a0:40:2f:25:7a:69:c4:
e3:53:1f:5e:8c:26:45:6e:a5:36:12:40:78:ac:88:3a:e9:5a:
ae:77:92:07:c4:f8:64:3f:90:d0:21:02:6d:b7:9a:4b:07:9c:
fa:a5:50:6f:fb:e1:b2:d6:3a:1f:c3:88:29:ff:66:8e:2b:5e:
b6:c5:1f:d0:58:69:ea:8c:3f:fe:9a:d7:b8:fd:09:53:c1:93:
f2:a6:db:49:54:12:0c:d0:7e:ea:62:5f:76:83:46:9d:2e:78:
e2:1d:9b:45:64:2e:11:2c:0c:11:42:40:6d:99:58:ed:3d:7a:
ee:a6:b8:78:06:d7:2e:28:e4:c6:5e:0b:f4:bc:a1:75:b1:86:
ff:b4:b7:88:f8:ef:2f:55:4f:00:d1:36:d4:b8:34:aa:25:4a:
91:a0:fb:19:69:ed:0b:78:a9:ff:16:38:2f:e4:c1:01:de:de:
80:c8:6e:df:7b:e6:1a:0e:36:1f:44:e6:50:e5:f4:8e:15:6b:
ed:4f:c3:46:35:71:bc:a2:9d:0f:c3:b4:c3:20:00:7b:41:16:
3d:a5:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:08:05 2025 by rpki-client