Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsWQTZklrfZ5-RUHU1450EpntwQ.roa
File: hsWQTZklrfZ5-RUHU1450EpntwQ.roa (raw, json)
Hash identifier: h2dpNFOvdyXf2Mhhs5EU8LP/Lg7coBtQ5FjIVeszCxA=
Subject key identifier: 86:C5:90:4D:99:25:AD:F6:79:F9:15:07:53:5E:39:D0:4A:67:B7:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B51D5D0EF157F38A8ED35ADD6E50A07F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsWQTZklrfZ5-RUHU1450EpntwQ.roa
Signing time: Sat 26 Nov 2022 18:05:11 +0000
ROA not before: Sat 26 Nov 2022 18:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:b51c:b622/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:1d:5d:0e:f1:57:f3:8a:8e:d3:5a:dd:6e:50:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 18:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86c5904d9925adf679f91507535e39d04a67b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:45:f0:3a:03:f2:96:92:d6:03:5c:1b:44:
68:7e:07:19:eb:56:14:88:1f:69:ed:fd:c3:18:c4:
45:d7:11:6b:b9:58:bf:5f:40:bd:94:46:4d:33:4b:
39:86:f6:2f:1b:c0:8c:e6:e2:32:8e:04:f0:c6:65:
6c:a3:cc:9d:84:52:99:49:f8:08:fd:1b:8e:1d:70:
41:24:c5:58:1b:d8:0b:45:75:2b:37:f4:e0:eb:3f:
54:f8:24:54:cc:dc:28:5e:ba:59:bc:a9:c7:75:46:
1f:8d:aa:b5:c8:bc:ca:a8:8e:73:30:68:8f:6b:1e:
5f:2b:8e:cc:6e:86:1b:39:0a:ec:71:3e:ce:ce:af:
f2:a4:5b:5e:18:74:00:76:12:04:4e:d9:4b:cd:41:
2c:4a:50:f5:58:6e:cf:21:5a:0a:9e:84:35:24:8e:
bc:ad:69:83:ef:d9:35:6e:90:d7:6d:d6:19:d9:e6:
f2:f6:78:2b:57:4a:ec:bc:11:92:a4:76:d9:bf:27:
0f:44:07:9b:4a:3f:fd:a0:2f:ab:70:22:5d:23:36:
29:52:28:8f:c6:e2:cf:76:60:62:2c:b9:5a:3b:07:
b3:09:fd:4c:e9:44:12:56:cb:0e:23:17:cd:84:e2:
69:b3:9c:8e:e0:9c:b8:60:4c:3c:bf:8d:fb:7e:95:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:90:4D:99:25:AD:F6:79:F9:15:07:53:5E:39:D0:4A:67:B7:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsWQTZklrfZ5-RUHU1450EpntwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:e8:f8:2f:7e:77:17:5d:9f:14:17:c8:04:3a:70:b0:52:78:
3a:bb:83:85:04:a6:02:61:0b:e7:71:7f:9f:13:86:44:ad:41:
ad:c9:5b:9b:26:03:90:07:89:3f:ed:9e:0b:7d:f0:63:a8:9a:
96:eb:a3:46:02:e9:b6:60:f0:79:c1:cc:5b:08:d0:f7:00:ed:
be:41:89:3e:bd:ea:7b:e3:47:02:16:c3:5e:e7:8b:ee:0a:c1:
40:10:11:59:6a:e7:6c:77:a7:25:e0:92:1d:01:49:9d:aa:05:
ef:1e:0a:88:ba:97:61:df:b3:3e:d9:bb:8d:7a:3a:df:f5:9b:
1f:5f:ca:e3:12:69:16:cf:ab:46:8f:45:0f:8f:61:b2:d0:8c:
55:7d:03:92:e9:05:aa:1b:54:60:39:f5:b1:8a:95:92:60:67:
90:ed:e4:f1:e1:41:44:50:38:0c:20:9e:64:5c:3d:86:e5:d8:
62:79:0a:56:03:13:c8:97:c5:92:30:6b:16:f3:49:57:b6:a9:
36:57:1d:15:98:66:03:c9:06:b7:30:48:0b:89:12:03:0d:c0:
8a:bc:43:0d:9f:9a:7b:16:f7:1c:2e:09:33:25:58:68:e9:01:
8e:2c:77:41:47:2b:0b:e4:f0:31:dd:b8:a9:f2:2a:1f:2b:bc:
b9:3e:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:01 2025 by rpki-client