Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OGNAEb76y01q7JtNO90PbEMKUyk.roa
File: OGNAEb76y01q7JtNO90PbEMKUyk.roa (raw, json)
Hash identifier: xmO6QMVXqb+VqgLB78mBKeKswm2NczlwG8aAz02F0u4=
Subject key identifier: 38:63:40:11:BE:FA:CB:4D:6A:EC:9B:4D:3B:DD:0F:6C:43:0A:53:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EED7A4C549609B9AE7DCD6ECB4B65C65
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OGNAEb76y01q7JtNO90PbEMKUyk.roa
Signing time: Thu 26 Jan 2023 16:09:47 +0000
ROA not before: Thu 26 Jan 2023 16:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:d7:a4:c5:49:60:9b:9a:e7:dc:d6:ec:b4:b6:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 16:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38634011befacb4d6aec9b4d3bdd0f6c430a5329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:d0:da:a1:03:dd:c3:1f:cc:ad:36:15:24:
1f:87:85:43:a9:47:c2:2a:3f:8f:1f:fd:08:92:e0:
4d:d8:eb:83:a8:8a:b2:ee:04:b1:77:dc:ca:59:4c:
11:f8:fc:9a:a4:ed:51:ff:78:c8:91:b3:bc:b0:69:
db:20:12:34:70:4e:ae:ab:fd:d5:de:b3:a4:0f:76:
17:b2:2a:e6:02:a7:f5:82:e4:75:d0:1a:ae:22:d1:
e6:e2:5c:9e:d6:3d:29:1c:b0:da:b5:b0:63:bf:58:
c3:0e:1d:7b:bc:a3:26:b1:54:a0:2d:6a:74:41:5f:
0b:22:f7:14:81:48:42:35:b0:49:f9:9f:ab:69:e2:
0e:39:5d:56:f5:76:ea:06:10:14:a5:66:2b:96:95:
74:76:b8:36:33:46:49:37:cc:88:81:c5:cc:ae:32:
c7:9a:73:41:f3:cb:04:8e:77:15:cc:6c:a3:7d:7f:
42:21:47:ee:4f:01:63:89:be:21:b2:fd:87:23:2f:
c3:c4:10:40:56:16:2d:41:70:66:cd:f7:2d:5b:b6:
44:9a:7c:56:04:44:4e:20:a4:e2:e8:5c:2c:31:4c:
e3:2d:50:21:a3:df:c2:ce:9a:be:ba:bc:14:dc:d8:
3c:58:f5:28:f7:b1:0a:05:6e:a8:ea:3d:70:82:58:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:40:11:BE:FA:CB:4D:6A:EC:9B:4D:3B:DD:0F:6C:43:0A:53:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OGNAEb76y01q7JtNO90PbEMKUyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:01:5f:d9:b6:fe:fc:f6:44:24:99:e4:06:db:ee:52:90:6f:
28:15:a0:e5:66:36:d2:45:81:b3:5e:47:b9:8d:cd:fa:e1:e9:
11:6b:b0:f0:b8:fb:e1:48:c0:c5:23:a3:19:81:ab:3c:81:ed:
57:f2:da:7f:12:fa:d5:6a:e3:e1:84:53:46:9e:ae:52:07:0d:
10:1e:b9:15:07:d5:b1:b8:0e:0e:db:51:75:03:8a:71:1e:fa:
ee:47:21:a1:c0:1f:34:a1:51:85:1f:0d:09:bf:52:d8:ae:ee:
ab:d3:d8:c9:e9:15:0f:f5:5a:72:c8:14:e1:ce:06:a5:9a:67:
78:af:bc:7f:fb:d0:a2:a5:a1:30:44:91:76:0f:0f:8f:82:9c:
54:5b:4a:42:d9:8a:89:6f:30:a9:5f:39:bc:1e:29:cf:3a:17:
c1:44:9e:a4:d1:0b:00:a5:31:b1:ec:9b:94:c0:84:13:a0:68:
54:da:22:66:54:7c:1d:36:ce:dc:45:47:53:55:96:32:93:d0:
89:b6:f7:18:f7:ac:e6:b0:da:ef:75:95:2e:ab:d9:80:80:a7:
27:13:25:8b:16:18:5c:db:17:fa:6a:06:f8:ba:75:9f:fb:9d:
d0:5e:22:12:d9:e9:9e:aa:32:07:3c:82:69:a7:a1:84:fa:46:
bd:2d:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:25 2025 by rpki-client