Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O9RYyRhQlIB8hYM3FW54Weug2lY.roa
File: O9RYyRhQlIB8hYM3FW54Weug2lY.roa (raw, json)
Hash identifier: rffy+ApzsAC68IgSYtiUPrGrPfATx/cVYcHw032w6Eo=
Subject key identifier: 3B:D4:58:C9:18:50:94:80:7C:85:83:37:15:6E:78:59:EB:A0:DA:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828F94FBBE7D60CA363ABA59E9FA84846F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O9RYyRhQlIB8hYM3FW54Weug2lY.roa
Signing time: Fri 12 Aug 2022 01:04:41 +0000
ROA not before: Fri 12 Aug 2022 01:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:8f94:ad9b/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8f:94:fb:be:7d:60:ca:36:3a:ba:59:e9:fa:84:84:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 01:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd458c9185094807c858337156e7859eba0da56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:2d:97:16:08:5f:94:24:3f:2d:f7:57:16:
bf:7c:1a:30:d8:47:2b:51:d3:9d:77:df:ba:15:af:
43:c9:5f:2c:99:91:d1:d9:d3:97:b2:cd:ae:47:a1:
9d:04:0f:64:10:46:e2:bc:d5:6e:e6:e5:c9:8f:8e:
95:db:b9:92:fa:73:db:5b:ed:d0:df:ce:39:00:85:
dd:17:4d:5a:9a:92:93:b3:d7:ed:c8:c6:00:2c:31:
3e:21:57:22:e5:0a:49:a7:75:83:52:e5:47:62:ad:
57:4a:bd:53:ae:f2:eb:96:80:36:c6:5e:56:18:1c:
1e:93:58:8c:c3:db:68:4d:90:19:ad:dd:d8:4b:06:
dd:22:0e:1a:bc:94:22:95:68:32:20:87:b8:27:de:
0b:55:4b:71:2d:0e:d2:d6:80:99:8e:d3:68:cc:5b:
26:6a:08:79:39:30:07:c1:62:d0:cc:78:28:51:db:
52:ad:dc:b4:1a:9f:c0:37:2e:1e:d6:28:83:5c:4b:
b0:56:45:49:45:da:b5:64:2b:5a:8d:23:26:3f:59:
b0:29:db:78:bf:a8:08:9e:3f:54:e7:17:85:96:c9:
cf:a3:dc:9d:75:3c:5d:e2:fd:13:b3:c5:8b:27:74:
e1:fe:0b:96:b3:1e:ae:11:e4:43:9b:d4:f2:13:ba:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:58:C9:18:50:94:80:7C:85:83:37:15:6E:78:59:EB:A0:DA:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O9RYyRhQlIB8hYM3FW54Weug2lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:d9:43:4f:1b:43:79:b8:a0:0f:36:fa:f6:37:a7:04:82:38:
ed:9c:df:ee:f3:d5:74:19:ad:df:3f:d8:de:0a:79:2a:57:2e:
a3:37:80:fc:fc:d7:3b:a9:9a:74:80:ee:45:18:c1:fa:dd:1e:
ff:52:f4:8a:7f:43:ae:b6:e4:bb:9d:d8:3d:15:36:6a:fb:15:
12:76:6a:eb:95:29:8e:ce:a0:26:4f:3d:de:b8:4d:b5:01:cd:
1e:4a:4a:37:ee:a5:b6:f6:59:15:56:d2:57:6c:93:b7:f0:33:
7f:80:93:24:79:e8:aa:d6:c8:10:21:62:34:1f:12:cd:54:53:
69:ec:9d:73:1c:93:3b:b5:3d:6c:70:c2:73:8d:26:4d:8a:9e:
a0:38:1f:1d:91:5a:a2:08:d2:45:55:e3:d8:cb:70:af:3a:9d:
d0:1f:9e:2a:a9:77:10:08:be:a2:44:73:aa:ef:ed:f6:aa:4e:
2c:52:b2:ed:51:93:7e:06:da:a6:f2:2a:af:2c:84:76:1d:64:
a8:fc:d7:2f:73:ac:ba:02:e5:0d:57:ef:f5:4f:da:25:2a:2e:
b4:e6:90:ec:1c:67:73:aa:3d:79:e7:ca:0e:41:81:0f:eb:4e:
5c:29:74:e4:70:26:bf:38:24:fc:24:83:bf:c7:b0:ef:12:99:
55:c6:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:50 2025 by rpki-client