Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OXohzLiKwLet9BFzZ4qjm96lUo.roa
File: 1-OXohzLiKwLet9BFzZ4qjm96lUo.roa (raw, json)
Hash identifier: 3TtEI4npLrNS/w9EhPDItg2JDvoDy2F8in8XkFhAyoc=
Subject key identifier: F8:E5:E8:87:32:E2:2B:02:DE:B7:D0:45:CD:9E:2A:8E:6F:7A:95:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875754B70B516CC9EBB334F7BBE6EDCF1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OXohzLiKwLet9BFzZ4qjm96lUo.roa
Signing time: Thu 06 Apr 2023 16:09:42 +0000
ROA not before: Thu 06 Apr 2023 16:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:54:b7:0b:51:6c:c9:eb:b3:34:f7:bb:e6:ed:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 16:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8e5e88732e22b02deb7d045cd9e2a8e6f7a954a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:6e:fc:99:33:de:b6:ba:9d:80:c1:a9:b6:
6b:15:ce:2f:25:91:51:26:64:e2:33:4f:f8:cd:92:
d1:df:69:e7:3e:c0:b3:76:12:c9:1a:7b:0a:eb:d1:
32:44:b8:b4:da:35:7d:d9:d0:8b:79:35:3b:9f:19:
c0:d1:08:b2:81:98:bd:78:72:fc:48:17:69:3b:d2:
0d:9a:ca:6a:04:bb:de:20:45:92:67:16:44:e0:11:
bb:5f:52:95:f3:65:74:a4:8c:d7:83:5e:21:9f:04:
6b:97:30:d6:7d:82:95:24:40:d8:07:de:b5:77:33:
0a:d2:95:07:0c:6f:08:05:02:7c:b7:30:50:69:07:
8c:16:de:77:ed:8e:ff:b5:19:77:48:a6:39:cb:fa:
5d:56:e2:78:9e:c7:87:ed:20:95:58:31:8e:42:2a:
d2:22:b8:61:b1:d9:cc:80:ca:66:a6:bd:6f:5a:c3:
2e:d3:e2:be:a1:a7:d6:81:fa:aa:14:c9:96:1b:96:
a4:c6:99:27:03:9a:98:29:85:23:7b:dd:d9:19:ac:
fe:1e:59:ad:a0:b8:13:f7:f7:b9:3b:8f:18:ea:f9:
77:c3:02:89:4c:88:f4:7c:fc:ec:f3:b6:93:3c:38:
5b:81:b8:31:95:34:72:62:89:b4:2a:3b:ab:12:1d:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:E8:87:32:E2:2B:02:DE:B7:D0:45:CD:9E:2A:8E:6F:7A:95:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OXohzLiKwLet9BFzZ4qjm96lUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:eb:9f:91:76:56:96:d9:15:f3:24:05:d1:bf:92:1f:c8:4f:
59:73:97:c9:30:a1:ad:a8:38:1c:a9:8d:91:56:82:aa:01:31:
8d:c4:1b:6a:a2:6d:b2:a7:c8:bc:6b:82:ef:ec:ea:98:9c:c5:
86:dc:35:76:9a:e2:ee:71:a3:47:d2:53:fd:6e:9a:d6:66:3f:
e4:25:ee:e8:6e:71:6f:c0:97:30:2c:8c:87:4e:ca:a5:45:42:
6a:8e:49:75:ba:cb:f2:63:a2:a7:aa:e7:3f:b3:78:1c:dd:d4:
9e:96:86:04:92:a1:8b:29:7c:4c:6d:01:8c:98:be:18:87:21:
4c:db:72:19:70:cc:0a:7e:bf:7b:f2:76:27:25:0b:16:2f:57:
90:95:11:94:6d:84:b3:2b:3c:93:bc:ee:4e:37:2f:bd:e4:a7:
be:b5:c3:0f:b9:93:bf:81:7f:49:9c:aa:86:1f:4b:49:fe:6c:
a5:58:f5:9f:3d:d3:e2:80:84:70:67:62:6b:77:06:70:d1:6c:
c4:a6:6a:01:89:53:d8:56:20:ab:aa:5a:3c:e2:32:1a:40:dc:
67:4e:92:9e:9f:55:c7:e1:3d:f8:a8:76:7c:e2:07:8e:20:16:
21:02:e4:a1:53:67:6c:a7:5d:4a:dd:df:59:b7:b0:71:2a:4c:
05:df:06:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:48:56 2025 by rpki-client