Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OPv0n7vR8GI0ZMUNvpxFuPTmeo.roa
File: 0OPv0n7vR8GI0ZMUNvpxFuPTmeo.roa (raw, json)
Hash identifier: 9xGNRtKLZk3ZNlOaXPndQXG0kjRJ8oD/+FrYlq025TM=
Subject key identifier: D0:E3:EF:D2:7E:EF:47:C1:88:D1:93:14:36:FA:71:16:E3:D3:99:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872B5D05CFADA64CAD3F2283B5480AA16B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OPv0n7vR8GI0ZMUNvpxFuPTmeo.roa
Signing time: Wed 29 Mar 2023 03:15:29 +0000
ROA not before: Wed 29 Mar 2023 03:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:5d:05:cf:ad:a6:4c:ad:3f:22:83:b5:48:0a:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 03:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e3efd27eef47c188d1931436fa7116e3d399ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:25:c3:71:32:19:3a:f9:6e:fd:ea:56:38:
a2:9b:5f:93:95:77:fc:2e:1a:e7:48:47:46:2f:49:
5c:52:0c:9b:70:8c:95:06:d9:40:a1:56:f9:95:b8:
ef:85:68:c7:4f:4f:64:19:53:a3:1d:21:d2:ff:2a:
b3:f8:2d:72:4e:76:29:64:33:98:b7:c1:69:60:92:
64:b7:6d:aa:b4:9a:44:bc:6d:40:42:52:b2:c7:86:
f6:2c:ac:62:e3:bf:db:cc:3e:ae:0d:af:6a:ab:4b:
9e:9c:f1:37:31:4f:38:33:3c:32:a4:4b:ff:5e:08:
1e:c9:cb:07:75:b2:3e:5b:f8:61:41:28:eb:43:c0:
86:f6:fb:ad:32:4a:4c:d5:6a:7d:fb:9d:c4:69:2b:
2a:73:97:8b:6b:a3:44:df:75:b6:8a:68:fd:c0:e1:
1f:45:1b:0a:84:06:6c:ea:ad:97:bf:12:fc:ec:54:
e1:e5:a9:f5:b6:a5:88:f8:38:2c:ad:37:d9:72:c0:
57:78:07:ed:55:99:ee:4b:73:e3:09:e6:02:b2:3a:
b7:a8:f8:8c:c8:65:59:83:87:d7:2c:ac:80:75:af:
01:8e:74:be:37:49:57:65:58:f3:ea:cb:cb:5a:04:
db:05:ab:7d:c8:d3:ca:9b:eb:a6:6b:df:6c:e9:ef:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E3:EF:D2:7E:EF:47:C1:88:D1:93:14:36:FA:71:16:E3:D3:99:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0OPv0n7vR8GI0ZMUNvpxFuPTmeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:97:64:ec:b6:8d:fb:46:3a:12:27:b4:3f:f2:51:36:da:33:
a3:18:8f:da:ea:9a:51:2d:e3:90:8d:e1:6b:f7:e8:ba:e7:ed:
01:a1:c4:71:09:a6:f3:9b:08:b8:15:90:fa:01:54:d5:e9:e4:
42:ec:19:5f:02:80:35:71:c3:b2:fd:46:71:74:97:60:81:ab:
fd:48:57:5c:61:61:09:77:11:66:a9:42:a1:3a:5b:0e:9d:5c:
4f:4f:b8:5c:1b:90:f2:85:e9:f5:7f:7f:cc:34:65:5d:8a:5a:
6d:6b:04:df:c5:2d:83:c2:6b:ce:48:80:03:78:be:d2:9d:30:
49:bf:d0:b2:f1:01:31:2d:5e:10:d8:6a:97:4e:4a:75:dd:24:
87:2c:e5:fa:a2:19:dc:23:02:15:3e:0c:fb:b5:bd:99:b8:ad:
51:25:fc:6e:e7:f5:20:84:86:c8:52:3c:08:22:d1:61:66:20:
a3:49:a3:ac:04:8e:03:57:3e:38:9e:4c:ff:af:a0:92:c7:3d:
3e:e2:74:df:dc:d4:b9:ff:20:5d:83:06:80:09:9b:f0:65:eb:
00:db:2e:67:6c:be:5c:cf:cc:8f:1f:4c:e5:3c:0f:91:34:7c:
bf:62:96:c2:91:96:22:b9:f5:d2:da:5d:8d:f3:ad:51:c6:cd:
5f:e5:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:39 2025 by rpki-client