Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHYIc2LJXLQhRzdGGHSGoz0SBm0.roa
File: OHYIc2LJXLQhRzdGGHSGoz0SBm0.roa (raw, json)
Hash identifier: KPFmCU7r6zfweNK67sk71XW5Mu47h0R3FSVOuLlh104=
Subject key identifier: 38:76:08:73:62:C9:5C:B4:21:47:37:46:18:74:86:A3:3D:12:06:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187018293E337E53BD6C03D3F66FF8463E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHYIc2LJXLQhRzdGGHSGoz0SBm0.roa
Signing time: Tue 21 Mar 2023 00:12:27 +0000
ROA not before: Tue 21 Mar 2023 00:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:82:93:e3:37:e5:3b:d6:c0:3d:3f:66:ff:84:63:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 00:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3876087362c95cb421473746187486a33d12066d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:94:97:8d:4e:38:d0:8f:db:b5:f0:36:8f:
5a:06:21:96:59:16:30:2f:61:0c:e9:73:84:6e:d2:
7f:bc:b1:e9:88:b5:6e:7a:a6:17:3d:2c:b7:0a:21:
9a:86:c1:1f:5a:42:78:b4:8f:2c:4f:93:83:c1:ca:
26:93:e4:fd:82:86:bb:1b:ec:7b:93:f6:43:02:d1:
7c:c5:18:92:bd:f2:9f:66:9f:7e:d2:27:66:33:1f:
87:c3:f8:c8:89:cd:fc:58:2c:f0:3c:ea:e4:41:4e:
cc:9a:21:45:f3:b2:7d:34:12:cd:33:5c:3f:74:53:
ae:57:d3:f0:6e:b4:fa:25:46:a5:6d:bd:33:98:40:
41:f6:ba:25:35:4f:fe:b9:8d:d0:f9:22:75:c7:56:
7c:23:e3:25:fc:09:ab:f1:0b:82:ca:05:a5:99:3a:
7f:61:7b:f5:64:bb:db:63:6b:10:ce:f4:55:25:98:
3a:81:22:a7:57:9b:e1:03:e4:de:fc:f6:63:4d:24:
09:65:d1:4a:b3:2e:a8:c8:1d:d4:17:60:de:b5:94:
40:97:02:cd:69:f9:78:62:1e:7c:35:b4:7e:d7:87:
31:21:62:a5:04:1d:e9:9a:08:88:81:5e:53:93:d2:
c5:25:b2:99:c1:7f:0b:1a:91:56:d5:05:33:d8:7f:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:08:73:62:C9:5C:B4:21:47:37:46:18:74:86:A3:3D:12:06:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHYIc2LJXLQhRzdGGHSGoz0SBm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:72:ba:58:53:ef:45:54:45:58:99:e6:46:ec:e4:4e:3e:48:
45:33:a7:8f:7c:ae:4a:7b:25:d4:6e:bc:41:c4:76:fb:74:08:
2e:74:24:c8:ab:39:1c:8b:10:4f:50:38:85:2c:d8:df:e9:88:
c0:ff:03:b8:7a:3b:9e:6e:7a:88:2e:a4:35:10:84:a2:4b:a4:
2b:2b:63:4c:1e:cd:57:cb:73:af:11:12:6f:6b:bd:35:26:65:
8b:ea:d5:44:aa:50:7b:cb:26:fd:ba:3d:01:2d:a3:66:cb:af:
26:1a:a8:21:8a:c1:af:d5:32:f5:7c:f3:8b:e9:e1:a3:13:b6:
f8:ab:7f:8e:cb:cd:4f:8c:4b:dc:5d:eb:35:11:1d:f8:22:0c:
ca:86:8f:be:8b:92:af:19:8c:4e:fd:96:f4:a5:b6:07:c0:6d:
02:83:43:a4:b9:94:e5:62:1a:ee:c1:b4:e5:5b:c3:73:90:ba:
f1:f3:5c:bd:c9:cc:2c:f8:70:ed:e6:44:5e:d9:2a:8e:ca:c5:
51:70:0a:a5:37:75:28:b6:5b:18:c5:14:24:a4:f0:ce:0b:43:
f0:21:23:2a:5a:f6:09:a0:09:0c:98:05:4d:b1:fe:1d:04:0b:
b6:13:ca:d5:d1:63:0f:2c:9e:5a:4a:4d:66:ff:6b:1d:9b:34:
c5:aa:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:21:07 2025 by rpki-client