Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBZTlb2vmw5mpYbSz1zgeADQTCo.roa
File: OBZTlb2vmw5mpYbSz1zgeADQTCo.roa (raw, json)
Hash identifier: f9C3cQKpV1sCDIuZDL+7TsFqBqik7A3SOE3KTvKJpQU=
Subject key identifier: 38:16:53:95:BD:AF:9B:0E:66:A5:86:D2:CF:5C:E0:78:00:D0:4C:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820A92351A3C7B2D45C9C105DD2D43C1A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBZTlb2vmw5mpYbSz1zgeADQTCo.roa
Signing time: Sun 17 Jul 2022 05:12:09 +0000
ROA not before: Sun 17 Jul 2022 05:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0a:92:35:1a:3c:7b:2d:45:c9:c1:05:dd:2d:43:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 05:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38165395bdaf9b0e66a586d2cf5ce07800d04c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:9b:9b:dc:78:dd:53:6e:fa:41:64:81:60:
d9:1f:c1:a8:2d:54:33:be:5b:80:a1:30:b7:23:12:
4d:8f:56:ee:50:6f:ab:23:50:d3:c9:cb:f6:cc:cb:
50:25:4f:82:14:23:65:76:ad:a5:ae:8a:20:5d:1c:
b0:42:c4:58:82:f7:15:51:70:cf:fe:a7:05:2c:5d:
5a:6c:4a:af:35:22:ac:86:5f:91:07:ab:77:57:11:
60:c3:e7:a5:0e:1e:32:a5:5b:e2:1d:ca:5a:bf:f3:
0e:67:83:57:31:56:f6:cc:36:b9:32:c7:5d:2d:8f:
69:1c:82:56:b6:3b:3e:49:eb:26:52:23:66:f2:b2:
9e:6c:d7:2b:39:f5:1a:1f:a1:1e:94:b1:f3:6f:ab:
9a:f4:92:c6:5d:40:5e:b6:61:f7:c6:ac:23:65:73:
7a:28:8d:de:28:5b:49:2c:99:51:b7:9b:ae:b9:fd:
97:36:5e:80:a8:a9:1d:b3:55:bc:d1:47:6d:7a:66:
59:b3:02:ad:c6:45:a8:28:03:96:91:43:3d:fb:1f:
0d:8e:08:99:60:61:5f:73:13:e4:07:83:39:43:12:
c3:e9:52:f1:2e:c7:a5:94:1b:c3:5c:5c:b0:7d:7c:
ad:5b:49:f5:e6:e0:87:be:e5:f1:0d:49:c5:c3:52:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:53:95:BD:AF:9B:0E:66:A5:86:D2:CF:5C:E0:78:00:D0:4C:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBZTlb2vmw5mpYbSz1zgeADQTCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:d7:07:95:e4:9d:36:08:21:fb:a1:ca:56:f3:6d:ce:ec:d5:
26:a8:e9:92:9d:63:d4:84:56:1e:25:74:ab:b9:3f:cc:39:4c:
e3:46:6d:9a:ec:69:eb:c2:c8:41:1a:0e:76:09:3d:55:3e:ea:
f7:63:d4:12:fb:d2:08:cd:ba:30:98:0b:94:ba:3f:b7:af:84:
63:79:9e:e0:43:86:b2:45:df:75:db:a3:db:cb:0f:5a:d8:7d:
5c:19:b2:5e:ea:ca:b8:1d:d1:f7:c9:c6:f2:cf:04:43:6d:23:
e4:f7:5e:88:51:c4:13:d5:5a:6f:02:8d:e3:7d:7f:91:de:16:
82:1f:a2:d0:bd:77:50:79:a8:11:7d:5c:9b:31:0a:e2:d7:f9:
f6:1f:21:df:ae:d8:a8:8e:42:c3:1e:99:c3:19:e0:bf:37:dd:
48:de:de:dc:d4:53:bf:11:65:57:90:68:98:fc:ff:5c:aa:1d:
34:33:c8:b1:3b:6b:5c:2d:9a:83:b2:bc:78:4f:ec:94:07:bf:
c9:1d:7a:9c:0d:39:10:e4:7a:72:f0:b8:33:b8:ae:b7:8c:73:
0f:81:47:28:0e:12:5b:f9:37:2a:92:65:ec:19:64:85:ee:4c:
94:bc:47:f3:6e:98:89:52:7a:91:06:94:6a:a9:91:32:c0:3b:
48:d1:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:26 2025 by rpki-client