Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OG1OVYihLtzbb6RFw9DVpqFz-7I.roa
File: OG1OVYihLtzbb6RFw9DVpqFz-7I.roa (raw, json)
Hash identifier: JkTnwlz3EuVUiMrgh0SGUgGs7QO05TA6zWaSlp9FBxk=
Subject key identifier: 38:6D:4E:55:88:A1:2E:DC:DB:6F:A4:45:C3:D0:D5:A6:A1:73:FB:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 867741E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OG1OVYihLtzbb6RFw9DVpqFz-7I.roa
Signing time: Mon 23 May 2022 01:09:29 +0000
ROA not before: Mon 23 May 2022 01:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255962593 (0x867741e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 01:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=386d4e5588a12edcdb6fa445c3d0d5a6a173fbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:ac:00:a2:57:b2:a6:c7:ca:ce:4a:c5:8d:
c1:3e:81:52:a3:e7:c8:da:94:08:3e:cc:b6:30:ad:
97:34:a7:b1:d7:40:c0:f7:01:22:a8:3e:0a:ef:61:
d1:1d:38:c6:ed:00:5f:7f:35:6d:96:09:5f:9b:1d:
05:1c:a2:0f:c5:c4:de:ca:30:35:2f:f8:82:41:2e:
5b:fc:c2:5a:ff:b8:ec:17:88:58:5a:7a:6a:d5:f2:
f9:e7:79:a9:65:9f:39:11:aa:bf:97:f2:a1:e9:f5:
34:51:76:d8:aa:ef:40:ec:58:ab:0e:b1:37:35:b2:
16:d1:39:d8:cc:af:88:27:a8:4c:ab:ec:66:0e:3b:
67:3b:a2:49:c0:58:5f:d4:be:42:fe:a9:22:a4:8d:
79:64:80:6b:04:be:71:3e:5c:c1:7a:32:b5:8d:ec:
17:e5:a9:5d:17:d4:4f:5f:e1:25:f3:e1:cd:38:1f:
40:65:63:75:2c:ee:8f:e5:57:8f:89:66:1e:1f:c6:
19:00:81:97:53:5e:4b:af:7b:0f:0a:e6:a2:47:95:
e1:c0:b9:91:a9:af:f9:68:22:6f:92:ed:06:e8:8c:
c7:3c:87:d8:bf:fd:46:50:02:a0:74:98:ca:27:60:
9b:85:54:21:15:78:37:0e:a2:4f:5c:2a:e0:04:cf:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:4E:55:88:A1:2E:DC:DB:6F:A4:45:C3:D0:D5:A6:A1:73:FB:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OG1OVYihLtzbb6RFw9DVpqFz-7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:b7:df:55:28:b8:9a:34:58:bc:dd:5a:d1:0a:34:f9:35:61:
e7:49:8a:b5:cd:57:6b:14:0e:83:2a:9f:e0:d3:5b:b0:ac:39:
42:fb:0d:2b:37:a8:7b:29:92:bc:3e:0f:97:23:65:77:88:7d:
54:e1:04:81:10:2c:a3:39:89:74:b4:d6:75:df:47:5d:d3:4d:
be:73:32:61:fe:c6:99:90:47:1a:dc:53:ae:98:b4:f0:54:03:
8c:d1:3c:8b:34:bf:03:69:03:07:85:03:fb:ac:5b:62:4b:2f:
f5:5b:2e:9f:06:41:09:e4:c8:4e:54:17:22:7e:0f:34:97:e0:
d8:a2:30:e7:2d:0b:31:08:46:9c:43:8b:e9:1d:48:e5:7b:31:
aa:e3:68:0f:31:dc:e5:96:9b:30:b0:48:20:6d:3b:a7:ab:d0:
0a:58:76:fb:f6:37:d1:3b:17:d1:48:c0:0a:06:95:93:6b:16:
36:10:5a:b1:77:86:db:a3:cf:d1:46:93:5c:61:47:84:4a:23:
95:f2:ea:01:21:44:3d:88:e0:a0:4f:8e:81:81:f6:3f:9a:fb:
75:9f:f7:33:5f:f7:77:02:ec:3b:d8:13:c7:6c:e9:71:bd:1f:
4e:46:fd:86:05:fd:fc:09:ba:72:bc:98:60:d1:5d:bf:7b:2e:
2b:ad:eb:2a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIZ3QeEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjMwMTA5MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDM4NmQ0ZTU1ODhh
MTJlZGNkYjZmYTQ0NWMzZDBkNWE2YTE3M2ZiYjIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8rqwAoleypsfKzkrFjcE+gVKj58jalAg+zLYwrZc0p7HX
QMD3ASKoPgrvYdEdOMbtAF9/NW2WCV+bHQUcog/FxN7KMDUv+IJBLlv8wlr/uOwX
iFhaemrV8vnneallnzkRqr+X8qHp9TRRdtiq70DsWKsOsTc1shbROdjMr4gnqEyr
7GYOO2c7oknAWF/UvkL+qSKkjXlkgGsEvnE+XMF6MrWN7BflqV0X1E9f4SXz4c04
H0BlY3Us7o/lV4+JZh4fxhkAgZdTXkuvew8K5qJHleHAuZGpr/loIm+S7QbojMc8
h9i//UZQAqB0mMonYJuFVCEVeDcOok9cKuAEzx63AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUOG1OVYihLtzbb6RFw9DVpqFz+7IwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9PRzFPVllpaEx0emJiNlJGdzlEVnBxRnotN0kucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAQrffVSi4mjRYvN1a0Qo0+TVh50mKtc1XaxQO
gyqf4NNbsKw5QvsNKzeoeymSvD4PlyNld4h9VOEEgRAsozmJdLTWdd9HXdNNvnMy
Yf7GmZBHGtxTrpi08FQDjNE8izS/A2kDB4UD+6xbYksv9VsunwZBCeTITlQXIn4P
NJfg2KIw5y0LMQhGnEOL6R1I5XsxquNoDzHc5ZabMLBIIG07p6vQClh2+/Y30TsX
0UjACgaVk2sWNhBasXeG26PP0UaTXGFHhEojlfLqASFEPYjgoE+OgYH2P5r7dZ/3
M1/3dwLsO9gTx2zpcb0fTkb9hgX9/Am6cryYYNFdv3suK63rKg==
-----END CERTIFICATE-----
Generated at Thu May 1 07:23:26 2025 by rpki-client