Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBUP499iRp2kNmVSlE2W9ED4Yac.roa
File: OBUP499iRp2kNmVSlE2W9ED4Yac.roa (raw, json)
Hash identifier: vjwbW1v+fuzOk8nNtn7fQ67CkFOPExZtN3kCbJ/yMig=
Subject key identifier: 38:15:0F:E3:DF:62:46:9D:A4:36:65:52:94:4D:96:F4:40:F8:61:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874C27E0A6EFB8C818C17E7CD2F021AE34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBUP499iRp2kNmVSlE2W9ED4Yac.roa
Signing time: Tue 04 Apr 2023 12:04:54 +0000
ROA not before: Tue 04 Apr 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:4c27:9f4b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:27:e0:a6:ef:b8:c8:18:c1:7e:7c:d2:f0:21:ae:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38150fe3df62469da4366552944d96f440f861a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:15:21:26:02:4c:21:96:57:10:ad:81:bc:
8c:65:91:84:6e:3d:8b:5a:a9:99:66:59:77:b0:09:
e2:22:84:0e:46:19:11:61:6b:f5:7e:46:8c:1b:09:
28:93:87:0b:da:30:5b:e0:75:5e:72:3a:74:57:1a:
73:f0:7e:b6:f0:06:f1:99:a7:16:99:45:65:27:1d:
ab:f8:23:79:08:9e:0a:45:8e:ce:30:90:41:3f:10:
de:c9:91:e5:41:9a:34:06:e7:71:f2:70:15:a6:04:
06:a6:70:c2:9e:06:91:4f:3e:39:7b:6c:1b:07:59:
b1:90:bb:58:1c:7c:95:28:33:26:cb:95:fb:49:ee:
da:ec:69:0e:54:05:0f:48:0f:ce:2c:ef:1d:74:6b:
9a:89:7b:70:1c:ca:d7:61:92:c0:20:15:1e:b7:ee:
3a:5b:7e:5c:ee:87:e3:3b:4e:cf:2d:30:61:8e:e8:
6f:ad:2e:75:38:57:f3:34:f3:93:bf:4e:27:01:ee:
9e:9e:9d:86:5e:1b:b9:5b:97:c1:0f:79:c9:4e:6d:
64:a3:83:64:b6:3d:09:90:76:2d:34:a7:94:7f:e4:
86:b6:60:b2:7a:3a:e1:bb:90:f9:db:89:cf:51:44:
b1:50:de:79:da:07:a2:6b:92:fb:e1:65:f4:b2:05:
3c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:0F:E3:DF:62:46:9D:A4:36:65:52:94:4D:96:F4:40:F8:61:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBUP499iRp2kNmVSlE2W9ED4Yac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:66:80:2d:f5:50:4b:f2:a2:85:2b:bb:8f:b6:e6:04:24:74:
d3:6c:9d:e3:84:81:99:99:d8:43:a7:b1:46:af:9a:4a:ec:3a:
36:db:54:a3:3d:2f:32:d5:d2:b9:5f:21:ff:a1:dd:d2:32:09:
0e:87:2d:b7:f5:5d:6d:80:69:86:60:dc:76:18:3d:b5:31:c8:
8b:e3:33:58:a2:33:e0:b9:25:2c:c7:10:ea:75:1f:06:22:a3:
7a:cf:81:f9:28:64:76:58:4a:61:fd:2d:6f:d5:8f:a0:9d:58:
42:98:4c:27:92:ad:a7:d6:7b:05:d3:cc:07:56:08:b7:70:a5:
dd:5f:4f:0d:a3:bf:43:04:a3:ab:75:e2:c7:fb:cd:98:fd:18:
48:6a:d1:83:32:b3:0b:69:06:62:c0:4e:0a:1a:47:dd:d6:ad:
46:12:b5:7a:34:5d:df:6a:33:34:2b:94:33:5d:a8:d5:10:ad:
d1:d3:da:a4:0e:93:24:e3:5c:8b:ac:54:51:cf:4d:90:6e:af:
03:21:4b:54:53:64:25:d9:51:05:81:19:a5:02:25:86:0b:72:
d4:15:9c:0e:c5:66:3f:e0:ed:50:88:0b:da:fe:9d:66:ff:59:
c6:4f:b6:92:5a:7d:a7:95:56:cf:0a:8a:c6:e2:cf:16:4f:2d:
f9:58:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:37:17 2025 by rpki-client