Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2OMbQBGJOhxdJBKxvOzeBAG7PQ.roa
File: A2OMbQBGJOhxdJBKxvOzeBAG7PQ.roa (raw, json)
Hash identifier: kNQwgJeMvBKrPH/9TUoWYm/fbJoWs1TpRv0uDlMh0Aw=
Subject key identifier: 03:63:8C:6D:00:46:24:E8:71:74:90:4A:C6:F3:B3:78:10:06:EC:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E52B2A1E64960D2F836D6AED343859F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2OMbQBGJOhxdJBKxvOzeBAG7PQ.roa
Signing time: Fri 11 Aug 2023 15:15:58 +0000
ROA not before: Fri 11 Aug 2023 15:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:2b:2a:1e:64:96:0d:2f:83:6d:6a:ed:34:38:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 15:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03638c6d004624e87174904ac6f3b3781006ecf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:74:e2:ed:e9:1d:b3:51:60:53:d5:34:02:
3f:4c:f9:55:ff:ec:65:8d:78:c4:d2:0c:89:fa:d2:
88:1c:82:e3:d2:20:1c:74:eb:75:24:0d:23:f8:83:
a5:c1:d3:61:cb:76:d1:3c:d9:59:c2:84:9b:3c:39:
1e:8d:f1:14:10:4d:32:e0:62:80:da:2e:67:08:a0:
0a:d1:1f:d1:7e:90:d8:19:cd:81:5f:1b:0a:7a:35:
03:0a:8d:a2:ae:72:83:74:d3:e5:01:b3:25:c5:48:
4d:49:ef:6b:7b:b1:45:ae:71:0b:a1:bc:ab:9d:12:
a5:ad:28:42:91:5c:45:a8:da:70:8f:c8:b1:72:43:
a3:21:51:c7:6a:7d:c0:d8:28:8c:f6:7f:0c:f4:b5:
6d:bc:ae:bf:4e:49:bd:73:12:8a:a0:4b:8c:23:d6:
ad:a2:e2:d9:3a:a4:4d:57:53:18:91:ef:fd:b4:8f:
cd:50:66:0a:19:9f:40:3d:5c:ff:bb:fd:f1:09:67:
c7:6e:3b:1a:2e:af:e9:f7:65:a6:20:1e:ca:4f:d4:
dc:40:79:c9:32:a2:33:3c:d1:2a:f0:40:28:cc:47:
6c:01:cb:ba:f4:91:05:61:fb:c1:05:ca:86:9c:55:
f2:eb:66:f9:22:ad:6a:b4:4d:6c:92:d2:6f:6a:c8:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:8C:6D:00:46:24:E8:71:74:90:4A:C6:F3:B3:78:10:06:EC:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A2OMbQBGJOhxdJBKxvOzeBAG7PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:f8:51:10:92:d6:62:59:0d:19:42:7d:b3:9d:03:a4:64:55:
f6:92:88:8f:2a:33:58:40:14:9c:49:91:94:e2:2d:7e:31:67:
1c:f5:6f:86:70:30:59:3d:28:86:7c:08:53:ad:75:ca:a5:e1:
51:f9:31:bd:32:f9:a4:c8:60:99:e5:22:f4:2d:a8:5f:8a:d4:
b7:22:30:d0:90:6d:6b:3f:3d:75:98:be:be:bf:bd:b2:7a:f7:
9d:27:5d:df:bc:96:35:3b:d9:86:16:22:d2:b6:01:ba:13:f6:
ba:2e:3d:40:89:50:df:1d:55:9f:ff:9a:48:cc:6c:17:31:67:
2c:e0:1f:34:c8:b0:13:39:17:a3:86:b6:63:c4:5b:ed:93:36:
63:e2:f0:84:f6:86:48:d9:5a:71:9d:91:91:46:c5:bf:67:1f:
aa:5b:e7:5e:31:0b:c3:67:bb:bf:97:5f:76:67:f9:8f:68:27:
4a:f5:8b:e3:15:72:9d:d7:f3:62:d0:53:6a:a9:07:b2:8b:9e:
bc:9b:3e:72:9c:38:dd:99:fe:5b:ca:18:9c:20:92:be:fd:5c:
f6:19:f0:51:af:e2:b8:36:42:59:a5:42:fa:e3:03:22:d3:06:
6c:56:f4:75:a3:c5:7a:b0:09:fd:77:1c:56:63:17:80:b2:6a:
64:46:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:31 2025 by rpki-client