Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Hm86ecU1wiCXntyLuMrCkkC53mM.roa
File: Hm86ecU1wiCXntyLuMrCkkC53mM.roa (raw, json)
Hash identifier: xy2jts+d2MliHVIUs3PcwRSdXos49/kbmc+7LSnsX/I=
Subject key identifier: 1E:6F:3A:79:C5:35:C2:20:97:9E:DC:8B:B8:CA:C2:92:40:B9:DE:63
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A5D13F9919A8C451137E87E42C4D3BD07
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Hm86ecU1wiCXntyLuMrCkkC53mM.roa
Signing time: Sun 03 Sep 2023 22:05:04 +0000
ROA not before: Sun 03 Sep 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:5d13:35c1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5d:13:f9:91:9a:8c:45:11:37:e8:7e:42:c4:d3:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 3 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e6f3a79c535c220979edc8bb8cac29240b9de63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:68:76:cf:79:cb:3a:dd:8e:e6:b1:53:29:
0c:ad:75:bd:d7:9f:a3:dc:e7:f2:fb:59:aa:0a:20:
56:9c:92:fe:d0:a5:aa:60:d2:bf:7e:8f:d9:d2:37:
0d:c5:2c:2d:0b:57:1f:f9:6a:81:b2:dd:28:aa:19:
f9:c0:5f:b5:4c:cd:85:c0:7a:80:e2:0b:d7:77:a3:
9b:bf:9c:a6:29:c9:cb:48:89:6a:43:1d:4b:1f:df:
ae:a8:f2:bf:7d:86:36:fb:5d:78:b8:6c:8e:28:44:
d4:c7:7f:33:8d:35:0f:2b:6e:a7:44:3b:d7:2e:d5:
71:a3:b8:93:ed:82:78:5f:dc:c4:68:8d:51:c6:47:
80:d6:89:c0:cb:b9:b6:23:e4:c2:2c:32:b6:87:1d:
41:5d:30:57:22:3b:9b:ea:ec:29:c6:3c:28:c2:af:
e4:8e:51:81:45:79:87:f0:01:c1:69:d5:6b:c4:b0:
3f:ff:fd:ba:d9:4c:25:73:0e:13:3f:08:39:8a:ef:
00:da:da:31:3c:0f:b9:d6:cb:cc:2a:41:eb:bf:0f:
7b:03:0a:84:e9:5b:88:c1:0e:1c:b9:09:2d:90:ba:
3e:24:06:0d:e3:ae:3d:17:fd:14:b6:ed:bf:b1:8c:
4b:15:d0:2a:de:30:9c:35:17:e8:f0:5c:9a:a7:3d:
8c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:3A:79:C5:35:C2:20:97:9E:DC:8B:B8:CA:C2:92:40:B9:DE:63
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Hm86ecU1wiCXntyLuMrCkkC53mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:75:86:4e:b8:30:8b:d1:9e:a7:70:bd:04:96:90:3b:26:7d:
4f:6a:28:a9:d3:62:7c:cf:3c:b9:30:0c:09:2a:50:4c:b4:2e:
1c:af:8d:94:2f:40:44:27:8e:5c:ae:02:fd:b8:14:99:16:01:
60:2c:a5:8e:82:93:ec:21:ca:8b:fa:0a:4e:d2:d9:0c:ff:9c:
82:05:4c:f7:ea:5c:e0:88:f9:1e:e2:26:a3:5c:73:d7:c5:ed:
44:dc:c1:8b:ea:c3:3a:91:1f:3f:5d:8a:be:c0:a3:aa:e5:68:
e1:c8:5e:21:0e:66:48:08:e2:fb:0c:99:af:09:ab:63:8b:d2:
43:12:cf:67:50:02:ab:63:10:62:1a:ab:20:68:9a:37:71:98:
c6:35:83:0e:3e:5d:c2:46:61:f6:08:60:12:9f:bd:68:c1:7b:
4b:4c:a4:bc:6c:3a:40:61:4c:27:bd:d4:58:5d:71:22:32:e8:
c1:d0:25:e4:fe:9c:eb:90:97:0f:71:86:41:e7:28:c3:ce:45:
d4:0c:cc:e9:58:95:59:81:f9:1d:97:e2:bb:52:ad:f2:58:4f:
ec:61:64:85:1f:64:5c:66:7e:4a:bf:cf:e2:84:89:2b:23:15:
c1:25:ac:da:b1:1a:82:42:6f:2d:7e:7e:81:64:d4:bf:ef:4f:
a0:ee:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:36:46 2025 by rpki-client