Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/42Olxex43Q8x8uhe6SvVr3Oyaiw.roa
File: 42Olxex43Q8x8uhe6SvVr3Oyaiw.roa (raw, json)
Hash identifier: mUkqet+cI8t9cWqSb44H8KlF6RCC8nHG8IK8x37TIyY=
Subject key identifier: E3:63:A5:C5:EC:78:DD:0F:31:F2:E8:5E:E9:2B:D5:AF:73:B2:6A:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D2CB8309AD8E1FD3772A685EBBB4D4B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/42Olxex43Q8x8uhe6SvVr3Oyaiw.roa
Signing time: Thu 13 Oct 2022 19:21:36 +0000
ROA not before: Thu 13 Oct 2022 19:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:cb:83:09:ad:8e:1f:d3:77:2a:68:5e:bb:b4:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 19:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e363a5c5ec78dd0f31f2e85ee92bd5af73b26a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:4e:71:2c:bf:f4:40:91:e7:58:71:06:78:
be:87:db:50:1a:24:3a:e4:e0:fb:ae:9a:c5:20:ec:
86:62:28:e8:22:0c:e4:cf:0e:f2:26:b1:2e:9b:45:
72:a6:d7:6c:5b:47:19:e0:ed:6b:99:a5:a0:c4:15:
19:89:29:e6:0a:0b:12:a9:aa:61:1b:04:a1:81:32:
88:e4:14:7f:51:e5:ec:c6:ff:b9:e4:d8:19:3f:3e:
02:13:c9:72:18:ea:d4:65:69:c8:81:0f:32:e3:8c:
76:7a:8d:86:02:63:4a:ab:b1:b1:29:50:62:9f:9e:
69:dc:7c:56:20:ba:38:75:37:9e:ca:f0:e9:50:1f:
1b:7b:6a:3f:4c:cf:63:94:59:2b:67:f1:dd:9a:0f:
67:97:91:1f:6d:43:10:88:7d:86:61:1b:9f:65:a9:
1b:44:27:20:b5:eb:4c:36:b6:6f:7e:a1:e7:ec:00:
d6:85:b1:a6:c2:13:09:74:10:ae:d7:f1:e5:35:8d:
10:ff:d7:20:8f:95:22:2a:74:b1:0f:b1:f4:57:65:
a3:2b:f0:e4:65:ef:f1:8b:52:5f:a5:91:0c:09:c5:
0d:51:c9:50:a9:2d:52:73:bc:00:2d:aa:11:e7:98:
00:a9:33:ab:41:04:d0:35:7f:03:12:8c:a2:05:36:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:A5:C5:EC:78:DD:0F:31:F2:E8:5E:E9:2B:D5:AF:73:B2:6A:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/42Olxex43Q8x8uhe6SvVr3Oyaiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:e5:86:96:f5:f3:a3:10:4f:20:77:dd:30:d8:8e:51:0c:02:
5b:1d:1c:2d:b8:56:a4:c7:a8:91:e4:0b:1e:38:66:b5:7e:81:
6f:68:27:3f:cb:87:26:b3:c4:a3:37:ea:90:5c:ef:6a:93:da:
e2:04:77:2e:e3:ad:97:67:62:71:e5:96:30:c5:3a:4c:2f:4a:
95:b9:38:ce:a6:95:f4:af:d7:f1:30:33:4a:55:c3:4d:f3:c3:
50:c9:1b:16:01:ec:95:c5:b0:0b:48:9c:15:38:05:d3:af:66:
08:d9:53:1b:51:94:c1:2d:89:e7:84:2a:6d:25:14:03:94:3b:
ee:36:2c:81:80:6a:ef:27:00:9a:3e:c5:39:8f:3c:66:77:71:
b9:e2:9c:74:3c:1b:60:a9:dc:48:48:21:f3:0b:47:13:65:14:
e6:15:17:78:e0:9e:f6:89:97:75:48:c3:d2:a5:37:7a:4e:1c:
1f:01:01:f4:8e:39:72:bf:38:10:52:1c:fa:00:13:21:19:a1:
3b:49:d6:27:cc:c3:07:55:81:4f:a7:7c:11:ba:4b:7e:0b:7a:
c5:f6:24:2e:13:c1:e7:83:e5:1d:9d:0e:50:92:d0:82:1e:6e:
fb:12:09:b2:9e:e9:f5:88:cd:d2:b9:59:f9:fe:d4:ca:56:ef:
7d:5f:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:46:11 2025 by rpki-client