Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15OkiXAbREEKPeRq-u0oulDAF44.roa
File: 15OkiXAbREEKPeRq-u0oulDAF44.roa (raw, json)
Hash identifier: ou5BILjykBnobydiBC5PLuly2pfY0t6Sp9NW1dd95s0=
Subject key identifier: D7:93:A4:89:70:1B:44:41:0A:3D:E4:6A:FA:ED:28:BA:50:C0:17:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0CA43C616CBA37F00B465D4A82597A71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15OkiXAbREEKPeRq-u0oulDAF44.roa
Signing time: Sat 19 Aug 2023 07:13:24 +0000
ROA not before: Sat 19 Aug 2023 07:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:a4:3c:61:6c:ba:37:f0:0b:46:5d:4a:82:59:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 07:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d793a489701b44410a3de46afaed28ba50c0178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:59:7c:ac:fc:70:9f:b2:81:6d:0c:8d:23:
91:fb:42:67:04:66:c9:a7:93:00:e9:26:89:8e:a6:
45:2a:6a:30:99:d6:57:4b:af:2a:3b:f2:d0:40:ef:
1d:bc:c3:f4:ab:ea:eb:eb:6c:09:bc:6f:9b:a0:65:
a2:61:5f:c0:90:e3:41:7a:4c:5c:b2:c8:10:42:a9:
44:c3:7d:38:be:5a:3b:dd:e3:9b:42:e0:8d:05:73:
eb:c1:d1:43:db:41:c2:a3:9d:e3:86:d8:7a:0a:45:
5d:8c:ec:56:c1:af:87:0a:50:96:96:9e:18:57:ea:
04:e8:d8:18:14:29:c9:55:61:96:ab:fd:45:22:d6:
ef:df:44:03:79:0f:38:3c:19:98:86:76:4d:da:28:
93:a3:f9:33:64:73:5b:5e:ed:9f:7c:3b:19:82:6d:
fc:97:a9:4e:bd:f2:3b:33:b7:5f:68:ae:d1:ba:59:
2d:4f:69:8b:9a:16:48:11:0e:1f:d6:df:86:f0:41:
b7:34:91:86:7f:6e:53:39:d5:b0:82:0f:3a:ca:09:
8b:a5:8c:d5:08:c3:ba:10:83:68:46:26:3a:7d:14:
f4:91:8a:9b:99:52:0b:70:0b:82:61:be:aa:6d:35:
db:00:5a:d7:79:64:3f:a1:e4:24:ef:a8:7a:7c:a6:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:A4:89:70:1B:44:41:0A:3D:E4:6A:FA:ED:28:BA:50:C0:17:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/15OkiXAbREEKPeRq-u0oulDAF44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:8c:8d:a9:1a:1a:4f:d1:f0:e0:58:0c:c0:da:82:5b:9a:ac:
cc:0a:97:42:de:d1:df:2b:1a:a9:ac:43:f2:44:da:bc:01:85:
af:ed:5d:ba:e3:75:f3:36:68:52:45:af:83:fc:b1:88:f5:57:
35:cd:0d:a5:f6:0b:a4:e0:f5:f2:83:2d:86:9a:1f:15:1a:b1:
10:7b:bc:78:5f:ad:8d:3b:12:26:60:7d:93:21:7f:d8:cc:f3:
13:8d:69:fd:10:94:05:af:e0:7e:e7:09:1f:38:10:af:8b:97:
0d:ef:f6:24:46:2a:86:b9:15:0a:b2:95:a9:fb:8c:34:3b:83:
a6:99:73:af:de:48:5b:21:4b:5e:53:0d:87:81:b8:6b:bb:df:
78:37:05:14:21:90:bf:8f:5d:66:37:75:28:29:fa:10:a9:81:
d4:a1:f9:b6:67:9d:a3:26:d9:a9:f6:67:97:bd:55:98:ad:0a:
d2:48:28:07:91:f6:a0:ac:0b:f9:2a:ed:a5:ee:15:7c:cb:91:
c7:5b:40:ff:ce:ef:f5:71:62:13:aa:8a:d4:21:21:19:2c:ed:
71:f4:7d:88:6b:63:05:ca:fb:ca:1c:da:19:24:d7:33:53:a3:
f9:df:1c:95:22:0d:b9:20:ce:43:a4:6e:6e:c5:fc:19:9b:8b:
17:cb:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:33:41 2025 by rpki-client