Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OA9W_wI9fpVR2tW3GWYNjDHSpp8.roa
File: OA9W_wI9fpVR2tW3GWYNjDHSpp8.roa (raw, json)
Hash identifier: fyqc270DdwhgOYLgmH0sq2Kue65Jt+LrfVJ1Zr308fg=
Subject key identifier: 38:0F:56:FF:02:3D:7E:95:51:DA:D5:B7:19:66:0D:8C:31:D2:A6:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A421A71DC2143DBCA0B2CEED874F772E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OA9W_wI9fpVR2tW3GWYNjDHSpp8.roa
Signing time: Fri 21 Apr 2023 14:04:41 +0000
ROA not before: Fri 21 Apr 2023 14:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:a421:577e/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:21:a7:1d:c2:14:3d:bc:a0:b2:ce:ed:87:4f:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 14:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=380f56ff023d7e9551dad5b719660d8c31d2a69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:2a:e6:55:36:0c:2e:96:2c:82:77:df:3a:
dc:e9:b4:f9:a3:e0:73:5c:a8:e8:77:fe:01:04:1e:
16:61:19:97:3a:4a:64:af:09:53:49:1a:72:e0:0c:
ea:21:72:50:f9:a0:b2:f7:a2:e1:81:4f:2f:cc:21:
92:3f:fa:91:ba:fb:74:8a:d0:2e:15:2a:4c:5a:36:
25:5e:d3:f2:30:8f:93:fa:1c:80:e0:46:ea:7b:de:
ff:94:0c:91:fe:46:fc:34:e6:a5:a1:e6:84:6f:31:
bc:d2:ff:4e:37:ba:3e:6a:e7:c0:8b:89:47:fa:94:
e0:e6:84:8f:2e:c8:e9:2c:2f:a3:65:61:d1:ce:aa:
b0:12:8a:7a:be:ea:3d:1d:ed:5d:ed:2e:a8:be:d6:
fa:a6:97:16:7d:bc:4a:2a:3a:d5:65:c2:9f:05:16:
78:69:98:07:d2:da:c3:c1:24:15:bd:b1:bd:98:fe:
f6:39:91:6e:d5:8b:5d:41:77:7c:b8:eb:e6:c4:3d:
98:d6:d0:22:d7:a6:88:bf:a4:d4:da:cd:1a:a1:44:
d5:d0:c9:e5:c4:1a:41:7c:1c:d1:4c:60:ab:57:86:
aa:15:3c:5c:72:af:67:ee:fa:84:eb:e7:64:19:b3:
2e:d7:49:3e:c9:ac:51:dc:92:45:82:c5:75:33:cc:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0F:56:FF:02:3D:7E:95:51:DA:D5:B7:19:66:0D:8C:31:D2:A6:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OA9W_wI9fpVR2tW3GWYNjDHSpp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:69:d2:be:19:0f:20:d5:20:20:fc:19:6d:ff:ef:a7:5a:05:
3d:f3:72:d8:17:b5:2e:b4:d8:98:4e:5e:b5:60:94:6a:bc:b3:
fb:6d:7a:ee:24:1b:d4:0f:d2:f0:84:5e:79:8f:87:26:8c:d0:
84:1d:7b:48:95:91:af:60:65:9a:55:e3:16:b8:f9:02:54:08:
29:ec:b6:43:58:8c:60:c0:d5:bc:b6:c2:9d:d4:47:5e:32:fa:
12:e2:34:48:aa:a8:97:cb:09:f4:d6:87:22:e1:17:bb:ad:83:
31:14:73:03:7a:af:9d:d9:96:e4:8b:17:b9:cd:3c:e0:45:ae:
67:03:ba:44:a0:e7:dd:58:32:2b:ea:be:89:d5:dc:5e:c4:ff:
4a:b2:29:3c:6e:5f:1d:80:95:47:b4:02:57:d8:f2:87:c0:e2:
da:d2:a9:ca:4e:2f:45:7a:0f:ff:41:c0:7b:21:ce:30:b3:b6:
00:7e:df:ad:58:0a:10:28:ea:71:6d:6b:ef:27:82:0a:20:48:
77:a5:f1:f6:7d:25:a8:98:25:4a:56:51:b1:7e:34:5e:38:73:
73:77:f9:4d:f7:6e:c8:c5:89:6c:60:37:ee:8b:cc:91:c4:8b:
5b:30:dc:97:eb:e4:9a:fe:67:e5:41:b3:39:92:6c:38:f9:3b:
75:6c:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:09:52 2025 by rpki-client