Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBl_bItRQKqtmFivbwfNekySkQg.roa
File: OBl_bItRQKqtmFivbwfNekySkQg.roa (raw, json)
Hash identifier: vyzvfXSMpKLWrnDRcqB3pjDcBDJuFrE/vgTinYOUK0w=
Subject key identifier: 38:19:7F:6C:8B:51:40:AA:AD:98:58:AF:6F:07:CD:7A:4C:92:91:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852D831F928DCA9370932A85DFD468192A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBl_bItRQKqtmFivbwfNekySkQg.roa
Signing time: Tue 20 Dec 2022 03:10:46 +0000
ROA not before: Tue 20 Dec 2022 03:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:83:1f:92:8d:ca:93:70:93:2a:85:df:d4:68:19:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 03:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38197f6c8b5140aaad9858af6f07cd7a4c929108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:89:7a:fc:ad:37:98:dc:10:6a:4f:a9:eb:
2f:83:72:09:ef:d2:86:ea:b1:a8:d3:4b:bd:23:eb:
39:78:91:86:c9:39:be:7d:4c:7b:c0:58:8b:06:aa:
a8:7e:a2:f4:7b:3f:5e:76:af:8a:f2:7e:03:e0:d8:
82:ef:11:36:f9:0c:39:79:22:b1:6f:eb:65:46:68:
25:34:f3:40:b7:e1:2c:8c:c0:f1:db:80:05:4a:9c:
e7:1d:72:60:41:9a:6c:fc:22:63:77:0f:8d:d9:b2:
f3:36:8e:54:9b:c0:99:c5:8f:f0:12:e5:10:c7:28:
a9:6d:18:66:73:81:03:ba:fb:73:9e:f7:8b:9c:97:
d7:bf:90:ab:c3:52:83:23:6d:e1:d3:87:ba:3e:44:
bd:33:7b:10:7a:2f:a0:30:e7:45:75:bc:9e:ba:a0:
94:f2:fb:63:12:00:26:01:73:51:a7:fa:2e:15:0a:
18:9c:9a:ec:14:7e:61:ca:7b:78:b1:84:3e:b2:29:
ad:e2:bc:73:4a:ec:0d:51:54:62:ca:33:f7:e8:98:
d3:06:06:10:f1:37:b2:02:4f:45:b1:c1:61:b7:51:
36:21:a4:09:c5:e5:29:98:e5:2c:56:42:82:67:ef:
50:a5:88:87:b3:d9:66:e1:f0:74:7a:c0:5c:66:56:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:7F:6C:8B:51:40:AA:AD:98:58:AF:6F:07:CD:7A:4C:92:91:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OBl_bItRQKqtmFivbwfNekySkQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:39:ac:52:39:19:bc:40:5c:a3:31:a4:85:3f:27:7a:74:91:
1b:78:f3:11:b0:55:fd:92:b2:63:63:00:60:74:05:c1:ee:96:
fc:3e:aa:87:0f:cc:a3:87:78:3f:1f:b8:dc:81:4e:c1:ea:37:
62:75:b1:a1:0b:6f:36:60:8c:33:2d:0e:6c:0e:2f:ab:04:ee:
3c:83:0e:11:08:4f:72:f5:5d:9f:10:ba:4d:d1:93:26:31:2d:
24:14:d7:1f:13:29:ea:37:85:ee:7c:68:c3:71:39:27:95:6d:
5e:9e:a6:bf:98:00:c6:c3:92:1f:3f:28:9a:0d:ec:a2:ca:33:
73:22:81:f5:dd:a5:ec:40:31:50:2c:dd:6e:da:1e:19:04:5b:
16:2a:0a:97:b7:40:a1:ad:29:a6:30:78:24:b1:79:81:b1:74:
85:a4:7b:a3:dc:3a:25:59:cb:b7:3a:7a:bb:75:7b:d2:d3:f2:
fb:7c:0f:fb:9e:3e:d6:5f:91:e9:55:a0:89:92:5a:4a:1e:98:
99:bb:2f:29:b3:c9:10:03:94:31:7b:ad:28:14:29:04:f0:2f:
6a:9a:fc:de:a2:98:0c:69:c3:41:f6:2d:dd:b6:2d:ea:cf:d3:
5b:e7:91:b8:b7:f3:ea:8c:09:ec:8b:4d:25:78:b4:d7:cc:63:
01:7e:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:03:26 2025 by rpki-client