Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwQN-zCRqdfbIlkgUVPWJ_4jNnE.roa
File: hwQN-zCRqdfbIlkgUVPWJ_4jNnE.roa (raw, json)
Hash identifier: Rd8FxUS0M66jocG/baKUatX56fse7sS6uOWeyPjFJqg=
Subject key identifier: 87:04:0D:FB:30:91:A9:D7:DB:22:59:20:51:53:D6:27:FE:23:36:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A39ED7B0E66D56325DA11CEBF772D393C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwQN-zCRqdfbIlkgUVPWJ_4jNnE.roa
Signing time: Mon 28 Aug 2023 02:16:19 +0000
ROA not before: Mon 28 Aug 2023 02:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:ed:7b:0e:66:d5:63:25:da:11:ce:bf:77:2d:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 02:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87040dfb3091a9d7db2259205153d627fe233671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:39:ef:37:0a:f1:80:c1:7f:5a:9f:a6:57:
58:4a:9c:70:28:b0:46:a2:eb:ff:32:32:92:0a:8e:
67:f8:78:27:7e:5a:b1:70:99:17:56:88:9f:12:07:
a7:3c:5a:2a:ba:da:93:2f:1d:90:ea:96:b6:cf:db:
40:b8:f9:8d:d6:ad:76:f6:d5:d2:17:e8:10:98:5e:
50:78:af:ab:94:d7:48:76:40:f5:dc:f7:7a:5d:b8:
cc:bd:34:95:5f:26:f5:35:97:85:3a:3b:ec:66:a8:
fa:52:01:57:6c:fd:57:9b:21:6a:8b:05:97:cf:21:
0c:07:d6:20:20:41:59:71:1e:29:fd:84:1e:35:01:
c2:dc:5e:cb:55:0a:0a:d1:73:64:b2:af:55:5b:f0:
f3:2b:f8:cb:80:0b:0c:6e:b2:b2:10:db:22:18:6b:
5e:10:81:bd:a5:9c:fd:3d:fa:a2:85:d6:4c:5c:1c:
0d:54:4f:35:fc:1c:92:a7:b0:33:e3:aa:41:07:7c:
4a:75:42:cf:bc:28:87:8b:b3:84:2c:02:23:0a:2a:
fb:1c:3b:53:15:d5:40:d9:75:66:bc:44:ab:3b:4c:
00:8e:f3:36:41:24:b2:ae:7c:a0:de:86:9c:8c:93:
3f:88:9f:d0:59:8f:ef:2b:67:74:77:f5:bb:6a:fd:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:0D:FB:30:91:A9:D7:DB:22:59:20:51:53:D6:27:FE:23:36:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hwQN-zCRqdfbIlkgUVPWJ_4jNnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:0b:ec:6e:bb:9a:50:98:5d:fa:fd:d1:5b:d3:37:8d:a4:06:
e3:62:39:4b:87:0e:5b:57:fd:ad:b4:8a:5a:a8:1b:51:7e:3d:
93:27:3d:e1:cb:06:ed:70:0c:4f:70:4a:35:99:09:10:77:c7:
6e:6f:50:14:e0:5c:f8:11:94:c9:44:4d:dc:ef:6e:fe:12:b5:
57:13:7c:b3:32:7d:e8:cc:91:40:d4:ab:0d:7f:a5:c0:0b:00:
b0:5c:23:ab:34:58:03:48:70:66:e4:10:3a:f1:15:65:97:3c:
47:cf:8b:2a:72:f3:e5:a0:17:cf:5d:e8:dd:34:09:25:74:a8:
16:3c:31:77:11:c0:c0:c2:a4:6c:8c:bb:86:8c:eb:30:57:fd:
b6:64:6a:42:b8:9c:3e:0f:88:99:7d:c9:a3:16:26:ad:57:64:
b4:11:b5:ed:1f:e1:d4:1b:1c:98:da:ee:15:c7:63:4f:18:46:
b4:88:48:39:9e:1a:d0:61:d7:a4:af:4c:dd:87:70:ba:72:04:
d4:84:db:b2:63:56:80:4d:32:11:42:29:dd:aa:ae:d2:66:a9:
3d:5a:55:6d:e6:d8:8f:51:f9:27:00:bf:16:ae:15:31:de:7e:
a0:dc:0e:5f:2f:aa:ac:47:40:87:fc:a5:c4:61:94:1f:17:e5:
16:23:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:06 2025 by rpki-client