Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODoM4ruZp4h4lRQGiVKFqGXYqrg.roa
File: ODoM4ruZp4h4lRQGiVKFqGXYqrg.roa (raw, json)
Hash identifier: djInGq+abnvrZiQb2g+NfF6hsV5UV9JgZzY+jp+KTUU=
Subject key identifier: 38:3A:0C:E2:BB:99:A7:88:78:95:14:06:89:52:85:A8:65:D8:AA:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870674C0399EBA7885F8EF24E80E10C1A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODoM4ruZp4h4lRQGiVKFqGXYqrg.roa
Signing time: Tue 21 Mar 2023 23:15:27 +0000
ROA not before: Tue 21 Mar 2023 23:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:06:74:c0:39:9e:ba:78:85:f8:ef:24:e8:0e:10:c1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 23:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383a0ce2bb99a78878951406895285a865d8aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:1a:ce:29:75:ef:35:13:e7:09:c3:a3:bd:
51:67:9a:58:88:b6:a6:07:e0:ba:56:06:7b:86:45:
48:e3:6a:58:cc:af:b3:c5:ec:b2:00:58:cd:a2:38:
80:88:8b:99:fc:8d:43:4b:de:3d:8b:5b:df:bf:b4:
a6:09:d8:e4:a3:1c:d5:62:a8:fe:e6:c2:3b:a7:53:
cf:b4:fd:dd:5a:af:3f:11:a2:d0:63:7d:9c:e2:99:
ec:dd:ec:e6:55:e9:b9:db:27:d3:f0:91:fb:1e:6d:
cd:84:02:73:d5:8a:ab:36:6d:74:fc:75:5b:9c:b2:
f8:c5:0b:b0:d9:37:99:87:d5:d5:d1:74:f3:56:1b:
db:75:21:80:c9:08:2b:8a:1d:8d:ad:a9:fc:87:2e:
c1:e1:71:fe:27:2c:a9:1a:e5:2b:d6:12:d5:ab:02:
c0:18:5f:26:40:29:d2:d6:6b:4b:5e:12:03:a7:df:
9e:ac:50:e7:1c:7d:24:c9:77:d1:fe:b0:94:8e:5b:
49:71:d5:3e:29:a7:2b:f6:24:3f:99:fc:e4:db:f8:
d9:dc:3c:35:90:54:a7:1a:49:a2:12:84:b7:e4:38:
d1:17:40:2d:6c:d5:03:a3:2a:6d:5a:c5:e3:28:40:
4c:39:96:6b:81:44:81:33:02:50:8d:4e:5a:bd:40:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:0C:E2:BB:99:A7:88:78:95:14:06:89:52:85:A8:65:D8:AA:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODoM4ruZp4h4lRQGiVKFqGXYqrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:18:ff:f6:5c:5e:e7:97:5d:8e:7c:ac:fb:a1:d6:45:59:d3:
76:5f:ab:dd:9f:cb:6a:88:63:bf:3e:9a:cf:01:1e:83:82:dd:
77:96:48:4a:b7:20:34:7c:55:df:20:12:80:3d:a0:19:fa:2a:
bd:b3:fb:16:51:f8:6b:8e:87:e7:e5:fa:f0:72:6b:1c:fe:e4:
09:20:d6:86:fa:d1:8f:95:d1:9e:05:37:c5:eb:4b:a4:48:82:
64:5d:66:f3:ca:1c:a9:2e:59:20:61:b1:d2:90:84:3d:e2:10:
61:0d:96:26:49:79:bb:cc:6a:0b:3a:c3:6a:a1:a8:19:76:c9:
c4:61:b1:5a:af:63:7f:d7:bb:68:bf:4e:0a:d4:21:5c:58:13:
7a:8a:9d:54:c5:37:05:1b:78:e0:12:22:fe:96:75:1c:d3:27:
af:d9:dd:ae:96:e6:68:03:8d:ec:5e:88:d4:f1:58:07:f7:89:
b2:03:63:a6:7a:88:50:6e:f4:d1:ee:9e:84:6c:3c:dc:9f:2e:
97:dd:2b:3f:5f:f4:f9:c9:08:ec:86:c5:6d:bd:d0:48:42:a2:
be:bf:fa:aa:aa:9d:10:4d:0e:2d:db:4b:53:a4:5b:8d:3d:99:
ac:3e:89:a7:3f:e4:50:3e:77:f9:d3:0e:74:3a:44:fc:bb:81:
6c:e9:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:20 2025 by rpki-client