Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04ommBEVhGAchmV5ojMSHDst_C0.roa
File: 04ommBEVhGAchmV5ojMSHDst_C0.roa (raw, json)
Hash identifier: pXHKLo1sA5gSh255hu2S7QRm8SGzR72B7rm9IQ5qda0=
Subject key identifier: D3:8A:26:98:11:15:84:60:1C:86:65:79:A2:33:12:1C:3B:2D:FC:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73091DFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04ommBEVhGAchmV5ojMSHDst_C0.roa
Signing time: Wed 16 Mar 2022 14:09:23 +0000
ROA not before: Wed 16 Mar 2022 14:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929977338 (0x73091dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 14:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d38a2698111584601c866579a233121c3b2dfc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d8:60:df:fb:da:41:13:fe:20:a6:b3:72:33:
44:a5:58:a0:b7:9c:a0:d8:d0:f4:f4:17:26:e6:17:
8a:46:ff:7f:7c:2c:df:6e:e3:a5:90:df:28:5a:16:
80:43:e4:50:14:e5:fd:f4:ac:ff:7b:d9:c7:fd:98:
1d:27:3c:03:04:33:5b:5e:69:a6:76:95:90:fd:bb:
b9:7c:13:e7:59:d8:e7:58:e5:cb:8c:eb:e1:01:5d:
db:43:ee:5a:fa:b8:2a:e0:86:69:30:e9:1b:51:24:
27:58:ca:7d:15:f0:6c:c6:ca:83:be:8e:37:3f:c3:
42:e0:63:28:12:74:14:10:85:94:ac:3a:bd:ae:b4:
9d:7f:b6:e6:86:7e:ae:d3:b5:41:5f:78:a1:d3:75:
05:d9:fa:66:16:2b:5a:13:0d:5d:05:74:9e:23:de:
a3:cc:dc:42:a8:36:72:3b:90:21:81:88:3a:e2:14:
da:bd:ab:a0:c7:ae:d4:ce:07:e6:52:0e:a2:00:2c:
b2:1b:c2:3e:1b:57:9a:79:64:72:ec:12:32:f9:36:
02:3f:56:0d:03:06:9d:65:36:64:f3:54:f5:df:89:
fb:90:5e:5a:5a:b1:f9:0d:83:d0:7d:cf:6f:11:fb:
74:da:01:02:09:3a:31:c6:87:d0:37:fe:64:65:ee:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:26:98:11:15:84:60:1C:86:65:79:A2:33:12:1C:3B:2D:FC:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/04ommBEVhGAchmV5ojMSHDst_C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:4a:5e:6d:7d:18:de:d6:1b:19:14:a2:8c:66:25:c6:5e:6c:
29:8e:41:bf:a0:c1:74:2b:3b:20:d5:40:fc:7f:8f:06:a1:75:
ba:1c:ad:cb:4f:89:ca:d5:8e:3a:e2:33:ee:6b:90:6b:c3:95:
9d:c2:db:48:a6:9d:60:24:51:40:65:8a:5f:68:76:c7:c0:a1:
48:7e:f6:b7:75:f8:f4:4e:60:15:73:e5:fe:b5:16:33:6a:19:
e1:87:d6:56:38:85:36:8e:0a:0a:77:4d:78:ee:f9:d4:41:fd:
61:85:23:5a:16:29:db:72:fb:30:97:13:1c:b1:48:2a:7f:4e:
6a:c9:e5:1d:47:e5:0d:5c:38:32:8f:8a:60:e3:81:29:e7:0d:
03:29:e0:b0:d3:55:8d:43:e5:e6:f0:7d:3e:37:0c:1b:a9:ea:
39:5b:aa:cc:ca:19:15:20:fa:bd:3c:10:7d:1a:e1:70:f4:8f:
b9:89:25:20:f4:73:c6:19:e8:3d:20:fc:71:0a:a5:4f:e7:37:
f7:0f:42:30:e7:c2:c9:25:6e:13:e4:46:f2:46:8f:d4:62:d6:
78:12:bd:f3:58:1a:e3:1e:d3:78:2d:57:63:d4:b7:b9:ea:e7:
fb:27:87:62:c8:30:de:76:74:3d:e9:63:bb:27:9d:b6:7b:9e:
20:2e:6c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:28 2025 by rpki-client