Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsc8G-I7dwf--Wuu9IrRkiGG7pA.roa
File: hsc8G-I7dwf--Wuu9IrRkiGG7pA.roa (raw, json)
Hash identifier: KzBj73Xz7LrmvOOaYCQn6sPO6aR/wA+0Q+f/Pza/mH4=
Subject key identifier: 86:C7:3C:1B:E2:3B:77:07:FE:F9:6B:AE:F4:8A:D1:92:21:86:EE:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183ABEEBECA4AA3F2D486035DB3C750CDD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsc8G-I7dwf--Wuu9IrRkiGG7pA.roa
Signing time: Thu 06 Oct 2022 06:14:53 +0000
ROA not before: Thu 06 Oct 2022 06:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:ee:be:ca:4a:a3:f2:d4:86:03:5d:b3:c7:50:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 06:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86c73c1be23b7707fef96baef48ad1922186ee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:73:5d:68:07:d2:6c:c9:0c:69:91:02:ee:
34:43:d7:3a:cc:c9:15:c4:ce:49:bb:09:b6:4a:4e:
28:d0:63:c0:cc:7d:ac:45:f3:8a:64:ef:0d:d1:65:
43:02:14:b3:07:c2:ae:34:d8:74:2c:6d:f7:34:d1:
9c:54:34:ac:ac:ee:b3:e5:89:96:8c:66:b8:52:74:
69:d6:1b:a3:3d:ad:f9:f0:e0:5c:39:38:bd:a2:e9:
0d:7f:08:0b:3e:12:b4:1e:cb:5c:9a:cf:b1:29:aa:
b4:37:03:2b:7f:10:83:09:ab:d3:2c:72:32:be:da:
22:6c:4b:89:8d:6a:87:b7:c7:6b:b0:92:d4:eb:d5:
f8:37:d4:ce:a7:f1:91:3e:04:e8:60:ea:d8:15:7c:
b5:6c:e4:73:b6:9d:ac:8b:48:9b:65:5b:87:fb:ba:
1c:9c:d3:91:48:09:fa:fe:11:e6:d3:5c:90:3a:dd:
71:a8:77:4c:45:05:81:bf:63:78:39:85:00:ca:9a:
cf:73:8d:2a:e0:9c:a4:85:be:d5:5a:3c:4b:42:6f:
28:8c:f6:84:52:07:91:93:14:a5:48:f2:9f:32:14:
61:9e:bd:6c:c7:89:85:a3:02:b3:68:af:8f:bd:66:
c8:eb:29:cb:2a:ba:16:4b:83:2f:d7:f6:0c:b3:9b:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C7:3C:1B:E2:3B:77:07:FE:F9:6B:AE:F4:8A:D1:92:21:86:EE:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hsc8G-I7dwf--Wuu9IrRkiGG7pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:cf:db:53:85:2c:bb:63:8e:81:b6:4c:ba:53:e1:06:d6:9d:
48:29:47:25:d7:e0:62:b2:dc:7c:9f:cd:36:69:5c:08:4b:09:
bb:68:5b:51:dd:2a:11:c9:99:1d:36:82:54:90:d9:e6:3a:4a:
9e:41:02:11:78:72:bc:3b:91:cb:92:bb:67:7b:fe:81:1a:cf:
15:d3:73:31:01:f9:7d:17:a1:06:fb:68:f3:b2:ac:d5:1e:29:
b9:8c:8d:9e:5f:2b:77:1b:f4:7a:3c:ec:58:01:bf:04:82:8f:
2f:03:ae:c4:89:8d:41:ae:1b:70:2e:82:07:90:45:03:47:b1:
5f:5b:d6:f3:7c:2e:70:1a:4e:a5:2e:eb:b9:0b:48:53:7b:95:
b9:82:75:0d:53:25:3b:ff:50:5a:75:43:c9:7e:ed:16:a7:a2:
2a:f3:d0:5c:68:d0:f2:6a:99:44:33:d3:09:fb:e3:3c:fd:a0:
b9:c4:88:15:de:d2:3d:f0:0a:4f:01:b4:0f:c1:a1:c6:eb:84:
6d:9e:46:e2:6c:67:ba:8a:5d:39:d7:ed:9e:83:04:fa:e9:1e:
a7:1b:a2:af:eb:0f:c2:a6:35:d2:3f:7d:10:9a:c6:cc:28:99:
0d:bd:ae:f7:16:b1:46:5c:7d:03:10:76:2f:ed:8f:1a:e1:da:
61:57:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:04:21 2025 by rpki-client