Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hrfKur2HEH6ZLhlxKph7PLmg9s0.roa
File: hrfKur2HEH6ZLhlxKph7PLmg9s0.roa (raw, json)
Hash identifier: Ld0RYob35OnE/7hOJaO4Tnik0N0Z+Tdl8ogwMIzv988=
Subject key identifier: 86:B7:CA:BA:BD:87:10:7E:99:2E:19:71:2A:98:7B:3C:B9:A0:F6:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E805ED9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hrfKur2HEH6ZLhlxKph7PLmg9s0.roa
Signing time: Mon 28 Feb 2022 16:08:34 +0000
ROA not before: Mon 28 Feb 2022 16:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853906649 (0x6e805ed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 16:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86b7cababd87107e992e19712a987b3cb9a0f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:f6:16:79:e0:eb:4b:e4:a0:0c:30:22:4b:
0c:31:36:a2:4f:8f:29:d8:36:db:39:9f:41:4a:f2:
4a:05:73:b4:08:19:69:77:97:7f:bc:ae:7b:fd:f2:
15:43:9c:62:6b:ce:c5:8f:7e:12:e6:ad:aa:34:75:
85:61:81:ee:6e:f9:fa:e0:54:12:56:7a:f3:a6:d6:
9f:e7:ef:aa:c1:64:9a:6e:89:ef:4f:94:65:1f:a5:
b2:3f:c5:f9:a9:02:80:14:4f:fd:a5:47:f9:36:54:
ce:e0:88:e4:90:30:bd:70:70:96:64:89:c6:ee:7e:
7d:6a:a9:c0:d9:42:e5:fb:3d:8d:71:70:1a:1f:f8:
26:b3:da:50:55:e3:21:ae:37:73:64:da:cf:78:c5:
f3:d3:15:2a:8b:c5:fc:d1:65:4e:2f:5b:68:43:d9:
10:c2:6f:32:2a:66:7d:1c:bc:3e:8c:94:56:d6:bb:
0a:7d:40:82:92:3c:9c:c4:5a:d9:15:14:b0:d6:dd:
4c:91:d4:1d:f2:3f:cf:02:82:cb:f8:b2:d9:8f:e7:
f5:e7:65:d0:2a:94:b2:d9:44:de:7c:d2:62:4f:a0:
ff:37:04:50:53:a6:0c:f7:26:a7:cc:69:bd:6f:b6:
9e:9d:bf:b5:1c:66:4b:c7:a5:af:da:2b:b2:e5:ec:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:CA:BA:BD:87:10:7E:99:2E:19:71:2A:98:7B:3C:B9:A0:F6:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hrfKur2HEH6ZLhlxKph7PLmg9s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:50:95:8c:19:13:2a:5e:8c:66:02:19:af:6a:c9:1c:23:c6:
4d:93:ce:ca:46:fb:04:20:fa:c6:99:3f:87:00:60:ef:f8:82:
86:f5:c2:51:a3:b0:0f:24:70:1a:1a:a9:7e:99:3b:f2:b0:e5:
ed:65:79:19:09:1f:83:73:85:f8:f7:06:0d:11:51:30:b2:bc:
92:c3:93:64:94:f4:41:8a:33:60:63:3d:11:e5:3b:f8:5f:31:
c7:4c:08:5e:63:5c:b4:a4:c4:a4:fe:60:94:8d:b1:f2:37:df:
d4:0b:0c:4f:62:74:28:a8:0c:f3:8d:d7:e6:7e:0d:5a:23:5c:
41:d5:e1:b7:25:23:64:7b:0a:f1:b4:1c:df:73:f3:09:31:f8:
87:03:03:37:64:2b:da:d0:88:32:db:b7:10:3c:1b:75:f0:16:
18:10:03:0d:9c:0d:81:47:59:2e:52:0f:e0:3b:b1:b8:2f:9d:
4f:c9:86:9e:14:b4:e1:71:ad:3b:89:f0:a3:bc:26:06:e9:bd:
88:e2:6b:a5:91:df:b4:f5:8c:eb:60:26:18:a8:57:3e:7c:42:
e7:d4:3b:63:9e:ee:fd:ea:ab:ec:99:a4:e1:9a:19:34:f3:f7:
23:1a:69:8e:5d:c9:a9:c5:5b:67:5c:1b:98:28:68:07:11:96:
4c:f7:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:28 2025 by rpki-client