Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O6zRRjepoOHu7rbNTaRfjiPX2pg.roa
File: O6zRRjepoOHu7rbNTaRfjiPX2pg.roa (raw, json)
Hash identifier: 4bScUATkR/nMiAnt43Frpf2LC8HAsDNw1RyR7Q2VY6Y=
Subject key identifier: 3B:AC:D1:46:37:A9:A0:E1:EE:EE:B6:CD:4D:A4:5F:8E:23:D7:DA:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874475A99943AFF0BADF3BB8526D7DC65F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O6zRRjepoOHu7rbNTaRfjiPX2pg.roa
Signing time: Mon 03 Apr 2023 00:12:54 +0000
ROA not before: Mon 03 Apr 2023 00:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:44:75:a9:99:43:af:f0:ba:df:3b:b8:52:6d:7d:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 00:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bacd14637a9a0e1eeeeb6cd4da45f8e23d7da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:ed:8d:54:62:a3:9a:da:6b:1f:a7:3d:52:
ce:f1:fe:a4:3c:f3:b7:41:df:5d:44:f5:a8:83:3c:
1a:85:21:15:3b:9f:02:c6:60:91:13:07:19:c2:5a:
b7:05:04:80:cf:d8:24:64:19:6a:2c:13:d5:86:69:
0f:72:a9:f2:42:5c:f5:3d:03:da:db:80:f7:8e:ae:
53:e2:5e:2e:f4:61:f5:0f:3b:82:ec:de:84:10:e7:
91:28:d8:94:e0:11:a0:f9:1d:3f:cc:a9:3d:0b:8a:
cb:e2:ca:d4:81:15:e2:0c:a9:cf:21:28:16:88:bd:
6c:c1:a5:48:f8:8d:9e:95:20:11:89:e8:3d:30:d4:
5c:92:13:99:c2:e8:8f:93:8e:f6:c9:10:aa:c2:79:
63:53:ec:d6:24:ad:48:52:c5:99:6a:36:8f:17:3a:
95:f4:24:cb:15:21:ed:71:20:c0:52:9a:5e:d9:eb:
92:13:2c:21:38:a3:fd:3b:8d:88:75:6d:d5:53:76:
60:8d:68:ab:14:c8:78:75:d1:2e:71:6d:3f:f9:28:
a4:1e:0f:15:4f:2e:9d:d7:05:0d:d6:47:c5:41:12:
50:9b:e4:50:58:5c:ee:16:09:0d:28:52:bf:04:57:
54:15:3d:88:f6:50:18:ab:5b:57:3f:e1:89:63:b0:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AC:D1:46:37:A9:A0:E1:EE:EE:B6:CD:4D:A4:5F:8E:23:D7:DA:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O6zRRjepoOHu7rbNTaRfjiPX2pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:a1:9c:76:bf:dd:6c:8c:36:ca:1a:e8:fe:6c:18:19:bc:d3:
24:82:77:de:16:b3:c8:15:1e:6f:99:79:ba:d9:3d:ec:a1:c4:
0c:d7:3e:ea:5b:a9:2a:43:9c:83:29:74:2c:15:8f:da:ae:a8:
1b:53:6d:bd:b6:b4:b3:2a:97:d0:6a:97:52:2c:b4:19:7e:c7:
06:36:fb:f2:d0:49:96:44:c7:9e:3b:2f:d6:7e:6c:eb:02:da:
44:ea:5d:fe:f3:6c:23:29:d5:28:7f:87:a8:1b:08:34:1f:61:
57:bf:78:75:5c:c7:bb:e8:ac:18:bf:fd:3b:b1:dd:c4:94:7d:
75:97:eb:35:c6:79:32:cb:eb:3d:82:11:08:20:66:f2:91:b4:
ea:91:4c:e7:c3:b6:1e:d4:8d:46:82:8e:41:22:86:4d:23:49:
14:c4:6d:8e:b5:e6:85:d3:4d:a0:3a:c1:41:d4:9e:09:65:60:
01:9e:c6:c2:c7:86:14:19:dc:8b:4d:7b:fe:31:f8:2d:80:06:
89:80:c2:95:93:93:0d:07:68:b4:68:bd:ad:51:99:0a:dc:d4:
f3:7c:65:db:52:f5:a7:65:ba:e1:d5:73:af:0d:22:21:72:0f:
97:7b:a7:d2:ca:e3:d6:50:99:a9:7c:37:31:7c:22:f5:d8:3e:
28:ee:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:13:35 2025 by rpki-client