Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QhAIoqi7ZynDRds-rhJzE2FoxU.roa
File: 0QhAIoqi7ZynDRds-rhJzE2FoxU.roa (raw, json)
Hash identifier: I+XKVn4Ozt00FC7U/HJAHurvB16wJy5rvqMzhPvcPA0=
Subject key identifier: D1:08:40:22:8A:A2:ED:9C:A7:0D:17:6C:FA:B8:49:CC:4D:85:A3:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 690F1AB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QhAIoqi7ZynDRds-rhJzE2FoxU.roa
Signing time: Wed 09 Feb 2022 05:04:26 +0000
ROA not before: Wed 09 Feb 2022 05:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762597559 (0x690f1ab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 05:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d10840228aa2ed9ca70d176cfab849cc4d85a315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:e0:03:e9:6f:b2:55:92:95:97:e1:bf:ca:
1a:ad:d8:58:eb:ff:cb:61:5f:97:1a:fa:2d:31:84:
5c:f3:b1:02:ab:1a:22:33:d9:b3:32:e8:b2:01:48:
d9:aa:b1:8c:72:51:fb:2d:5f:6f:75:88:7f:00:13:
d3:3e:93:e2:47:2a:90:06:d5:fc:89:e2:bc:7f:16:
ef:cb:d4:8f:62:fc:d1:2d:7e:f4:f6:9b:68:ab:3f:
b2:9e:36:79:7d:11:02:63:cf:96:4f:9f:c0:38:fc:
86:3f:38:1a:9e:aa:45:a3:27:cc:00:98:70:e8:32:
d7:57:78:46:9a:ca:b2:80:e5:a2:0c:72:f9:1b:e7:
f6:39:f1:8b:f6:2a:b8:ff:5b:b8:db:db:f0:39:dd:
70:24:7e:38:17:1f:8e:e5:a0:cc:f9:f8:f5:b4:e9:
01:b7:45:ba:84:4e:df:d6:2c:d6:a0:d5:ba:4e:f3:
5d:71:24:3b:89:9f:cd:1e:60:44:e5:0a:9d:b8:99:
bd:9c:78:a0:5e:6a:4c:2c:4c:85:71:64:91:56:1b:
af:71:78:ea:ab:71:2b:ff:b2:88:92:33:79:f2:19:
75:7e:1f:b0:68:f8:14:5f:e4:b8:48:aa:fb:52:0b:
5d:55:f0:52:ca:a4:38:b6:be:4a:c0:57:f7:d1:96:
e5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:40:22:8A:A2:ED:9C:A7:0D:17:6C:FA:B8:49:CC:4D:85:A3:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QhAIoqi7ZynDRds-rhJzE2FoxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:3d:a6:fd:bf:01:8a:03:46:93:44:b7:c2:10:36:c1:68:e3:
92:92:56:1b:3c:2e:34:b0:a4:8e:cc:ee:b5:89:67:34:d8:46:
b5:3c:81:b6:a4:62:8f:5a:27:66:14:b7:13:54:ae:9b:4c:b3:
f6:51:5c:22:9c:79:0e:dd:a5:14:21:b5:7e:53:22:ca:9b:e1:
9b:b6:e8:01:9d:82:6b:34:79:32:93:f9:40:ca:d1:38:2c:b6:
27:4b:63:38:a9:bb:cf:5d:91:ef:a7:03:36:cd:b9:b9:bf:c3:
ef:d9:5e:72:20:a1:e1:b3:c3:6a:6d:c5:10:01:ad:f2:3c:84:
c5:6d:ea:1e:78:9f:a6:fe:94:36:39:ae:34:d3:a1:20:3c:dc:
0f:76:83:a2:cb:3a:f9:c0:a8:c5:9b:c0:fe:22:87:3e:a1:7b:
8f:3f:69:cb:de:67:81:29:bd:eb:0c:62:92:33:f6:bc:5e:df:
d9:7a:51:fb:2d:f7:48:11:9d:8b:9f:4d:af:d6:d6:b2:59:77:
b5:af:10:60:63:9a:0b:67:d8:72:5d:37:81:ba:79:4a:1c:c7:
ec:a5:9b:50:1d:8b:cd:ba:ed:fe:8a:96:77:44:f9:34:b5:ec:
11:fd:42:b9:c7:f3:06:3e:20:54:41:e5:4a:be:de:25:6a:31:
e4:6a:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:40:21 2025 by rpki-client