Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0t5qbH7wGuXkbAvL_pvpzXpHSA.roa
File: O0t5qbH7wGuXkbAvL_pvpzXpHSA.roa (raw, json)
Hash identifier: h8IMJY+qk8l6Da3boKgYniW5hCpeCDr+pToA92rvCB0=
Subject key identifier: 3B:4B:79:A9:B1:FB:C0:6B:97:91:B0:2F:2F:FA:6F:A7:35:E9:1D:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018862B14A4E878AADC7BF3CDD7C221F2D3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0t5qbH7wGuXkbAvL_pvpzXpHSA.roa
Signing time: Sun 28 May 2023 14:09:26 +0000
ROA not before: Sun 28 May 2023 14:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:62:b1:4a:4e:87:8a:ad:c7:bf:3c:dd:7c:22:1f:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 14:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b4b79a9b1fbc06b9791b02f2ffa6fa735e91d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:10:86:58:bc:0f:68:53:3c:0f:a6:0f:f3:
0e:f4:de:94:df:fb:e9:6a:e1:44:70:f0:c9:47:1e:
70:0e:a1:17:41:ca:ed:d5:32:6d:70:56:77:d6:61:
91:d6:81:bf:ad:21:a2:ea:1a:7b:0a:8c:80:72:ff:
8a:71:87:74:06:19:c9:f7:18:9f:ee:b6:99:ba:fe:
a3:d8:62:d8:7a:cc:a6:9e:51:aa:c2:7c:ec:7a:62:
2a:96:34:26:61:b8:25:c9:77:af:e4:7f:98:bc:6a:
4a:ce:ef:ff:ef:7c:1f:f9:89:21:ca:6d:6c:84:41:
85:c8:68:fd:7f:3c:36:e4:f7:b6:51:77:8d:3d:52:
a4:bc:19:21:75:23:0e:52:21:0d:e9:f2:6a:88:94:
14:a3:a5:c8:ad:dd:ce:71:1f:42:3e:91:9e:66:a0:
32:b2:a1:87:a7:47:fd:0f:a6:bd:d5:35:3d:01:5d:
81:d4:a5:18:8f:ba:68:92:f4:32:88:25:7e:ef:aa:
b4:c3:f4:f0:c4:fc:b6:c9:b6:93:6e:0c:43:fd:6a:
a9:6e:0a:22:39:f9:e3:c5:49:b3:7e:61:bd:54:c4:
ff:59:cd:fb:8e:e4:21:ba:5f:6e:e8:ad:e6:23:d4:
9f:0f:f6:93:a6:96:3d:07:20:a5:b2:19:6d:4f:03:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4B:79:A9:B1:FB:C0:6B:97:91:B0:2F:2F:FA:6F:A7:35:E9:1D:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O0t5qbH7wGuXkbAvL_pvpzXpHSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:2a:11:66:18:f9:f1:77:56:02:cc:19:c2:17:8b:83:fd:2d:
4b:37:ce:05:f9:8f:eb:a5:89:c5:12:8a:7d:63:74:84:53:99:
4a:82:c6:82:0c:07:3f:c0:98:97:78:db:0a:fa:79:f7:fc:33:
ce:16:e4:8a:d6:a8:e1:b5:19:87:f8:96:8f:be:8f:78:e7:b8:
8c:89:7b:d3:74:6c:59:7f:47:60:b8:c9:d8:60:32:76:25:01:
52:b5:b9:4d:fc:04:3c:18:13:b0:95:d7:fb:36:91:92:cb:93:
bc:55:d4:87:d3:af:b9:d9:a7:f3:b7:22:e4:c0:de:02:22:04:
0d:76:36:5c:e3:40:53:e8:82:29:47:2e:92:4c:00:9d:91:0e:
11:a9:54:59:85:aa:e1:db:25:a6:ad:4c:fa:65:6d:71:b9:68:
f1:3c:db:fb:3d:55:1d:da:ae:19:be:be:bd:d8:ea:57:7a:cf:
36:e9:35:55:3a:81:fa:c3:5d:59:39:48:0a:98:96:a5:cf:19:
48:0d:12:77:33:be:f6:b7:17:6c:3c:e1:28:f0:1f:9a:07:38:
70:b6:4c:3e:aa:9d:ed:24:0f:73:0e:05:63:d8:af:d8:b6:2f:
d2:e0:23:0a:da:41:62:12:ce:9f:b5:ba:ea:02:43:0f:45:1c:
3d:c0:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:10:12 2025 by rpki-client