Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O5OfruCe74Ebq-E1b-qa__0jOOQ.roa
File: O5OfruCe74Ebq-E1b-qa__0jOOQ.roa (raw, json)
Hash identifier: 8NriVKQ3Pg1MPc5MTLtwqx8L9SwBQyDOOoGcU3Ly2KQ=
Subject key identifier: 3B:93:9F:AE:E0:9E:EF:81:1B:AB:E1:35:6F:EA:9A:FF:FD:23:38:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6882947C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O5OfruCe74Ebq-E1b-qa__0jOOQ.roa
Signing time: Sun 06 Feb 2022 19:08:36 +0000
ROA not before: Sun 06 Feb 2022 19:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753388156 (0x6882947c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 19:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b939faee09eef811babe1356fea9afffd2338e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:40:24:84:70:19:e5:a6:39:91:ea:d9:f1:
12:d8:26:f6:ab:f5:e8:9c:fa:da:17:13:55:7d:f8:
93:6c:2a:27:30:2e:ac:88:4f:72:e4:cb:4f:45:56:
27:23:b8:ca:49:a8:ad:fd:79:b1:2e:ec:ea:65:f4:
b6:db:03:88:63:47:ac:5a:62:5a:06:5d:f9:43:fc:
d5:42:e0:5b:da:a4:ae:67:3d:02:58:46:c2:82:a5:
40:63:5a:ba:ed:d1:63:5d:99:db:d4:f6:86:34:e3:
93:77:d0:e2:75:63:22:15:0d:57:2c:73:9c:5a:71:
9b:3e:ba:12:02:21:79:48:1a:bb:b5:fc:e7:70:33:
23:91:04:9a:f8:c6:6f:3a:48:50:50:63:94:d5:08:
7a:91:eb:96:9c:76:ce:e8:2f:ed:5e:f3:56:26:82:
10:2b:0e:1a:d9:8e:6e:20:90:91:fb:9e:48:5d:27:
91:40:af:81:32:53:2c:aa:1d:43:15:4e:3f:c2:03:
1c:e2:25:0d:31:4b:a6:01:4d:5e:7a:1e:75:65:c9:
3d:f1:c6:d7:7f:e3:0e:f3:44:90:03:2b:65:d8:68:
97:cf:7e:30:4c:f3:5d:f2:98:be:80:03:c4:5a:58:
2e:8f:82:2f:d9:27:66:ec:c9:5f:50:b2:68:22:be:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:9F:AE:E0:9E:EF:81:1B:AB:E1:35:6F:EA:9A:FF:FD:23:38:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O5OfruCe74Ebq-E1b-qa__0jOOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:18:ed:7f:59:fd:a2:4a:bd:e0:3e:5c:4a:41:78:79:e9:de:
f5:75:83:32:be:48:1b:40:c1:ac:31:d6:5a:44:ca:a2:6f:ac:
c7:f0:13:ab:bd:db:3b:ce:30:c0:c1:ef:bc:f1:59:ec:51:ed:
99:47:4a:0e:cd:22:6d:75:18:5c:79:00:39:9e:be:09:56:e7:
da:ef:cb:4d:77:3d:e9:3f:fb:49:a3:1c:e6:b0:c5:9a:54:5c:
f3:a0:28:be:05:22:64:d5:5a:7e:6e:f2:b3:2d:e5:a5:85:f0:
c2:79:8e:80:b9:78:ea:12:19:2f:68:0b:39:da:7a:af:c0:97:
f6:92:e9:fa:0c:55:d4:31:b2:ca:8f:bc:27:51:aa:68:54:a5:
fe:82:11:f3:37:7c:97:d2:6c:11:3b:86:6d:6f:43:72:ed:a7:
0d:93:6b:70:4d:19:e3:9d:1a:ee:8e:35:5d:e8:06:d2:03:f8:
18:4e:c4:2f:c3:db:d0:91:5b:6b:24:ab:56:c6:5c:b6:64:19:
5f:24:53:c6:a0:2d:8f:04:93:bc:73:5e:a5:5d:cb:2e:44:6f:
8a:70:32:c2:0e:57:45:7b:97:ef:f6:5b:da:17:17:bf:78:0a:
23:82:44:6e:0e:27:2e:7e:0b:53:f6:ae:c2:fd:db:1f:ce:53:
8c:44:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:56 2025 by rpki-client