Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0f36QuDld8qKDLB2WwaOfrSm_o.roa
File: O0f36QuDld8qKDLB2WwaOfrSm_o.roa (raw, json)
Hash identifier: FU9tCjj26wbExkfu7TvGRRAj0bKzHVoNgwMOxhjBDpA=
Subject key identifier: 3B:47:F7:E9:0B:83:95:DF:2A:28:32:C1:D9:6C:1A:39:FA:D2:9B:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E950D923BEF92FF6C7D5659EBEB67DCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0f36QuDld8qKDLB2WwaOfrSm_o.roa
Signing time: Mon 29 Aug 2022 11:16:05 +0000
ROA not before: Mon 29 Aug 2022 11:16:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:50:d9:23:be:f9:2f:f6:c7:d5:65:9e:be:b6:7d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 11:16:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b47f7e90b8395df2a2832c1d96c1a39fad29bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:1c:cd:b5:b7:5a:ee:3f:77:43:87:f0:86:
26:86:a3:ea:f6:7a:fa:e8:86:18:2a:d5:bb:8f:4a:
82:a7:5b:44:32:7f:20:ec:22:51:e6:aa:9b:92:6f:
4a:dc:7a:b3:a9:7d:74:21:e4:dc:81:ef:f8:34:1f:
d9:e5:68:c0:77:dc:54:44:27:22:b6:12:0e:c4:d1:
5f:62:71:f8:33:20:92:ee:cb:eb:a4:5b:d5:98:22:
d4:f9:2a:15:9b:91:c5:c6:67:d7:dc:2e:2a:5f:73:
af:a8:95:3d:8f:2b:9b:60:57:b4:4f:0b:a3:e7:a8:
1b:03:95:52:2b:65:ca:73:72:4b:5d:79:c4:7f:9b:
6e:15:87:0c:aa:ca:fd:83:14:63:78:35:f5:11:22:
14:01:6f:ed:7d:25:f8:21:ba:47:da:57:ce:75:ef:
8f:ed:0a:40:4c:7f:c1:1d:8a:08:a3:92:a3:bb:61:
e5:be:2c:57:fd:92:44:77:6c:ef:4a:12:3a:ac:4a:
a9:95:32:e4:cc:d2:69:64:a7:1c:77:0f:cc:90:44:
29:62:ad:4c:90:a7:f7:9b:f0:17:05:fd:87:02:72:
77:66:98:94:d6:2b:8c:f2:08:12:7e:e8:5a:b4:c4:
b5:40:07:41:1c:56:01:e6:47:1d:37:86:a6:5a:34:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:47:F7:E9:0B:83:95:DF:2A:28:32:C1:D9:6C:1A:39:FA:D2:9B:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0f36QuDld8qKDLB2WwaOfrSm_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:b8:5a:78:03:d0:cf:b2:27:de:39:a6:81:ef:90:79:4e:bf:
c8:3b:49:08:01:a6:17:8c:6d:a9:c9:68:8c:7a:3c:99:d7:82:
c0:fa:a7:26:a2:f1:c1:a5:bf:24:a8:8f:83:b7:25:bc:fa:4e:
4f:fc:f2:4d:89:08:13:0d:41:8a:38:93:03:ef:9b:1e:63:da:
50:fe:cb:4d:d2:10:f6:d0:c4:9c:c1:18:82:d0:4a:05:2a:45:
d6:00:12:38:48:97:cb:9c:36:94:b9:4c:b6:ab:6f:52:94:3e:
2c:8c:52:44:2e:2b:6c:04:5b:1b:1f:72:4f:80:26:88:32:6b:
43:9f:fb:44:5f:c5:f3:98:cd:cf:1c:14:8a:fb:38:2b:d7:52:
9b:db:de:fd:14:e3:70:69:27:d0:02:94:e9:0d:29:27:c7:fc:
7b:d2:6c:76:af:bb:62:b9:e6:b2:91:ce:2f:7c:88:f9:8f:1b:
13:9d:21:bf:f4:51:f3:28:03:d3:a0:e9:f1:e7:ea:4a:8f:39:
a5:3c:9c:68:3e:75:f3:cc:32:ca:75:60:58:55:32:d3:fe:d9:
f7:75:c3:ae:29:59:e4:cd:16:5b:11:9f:a2:3c:4d:e5:6d:e4:
84:53:e8:5f:45:ac:5d:53:2e:66:6d:3b:8b:da:0c:31:77:c1:
d6:c5:58:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:29 2025 by rpki-client