Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHewu8hh5Fy6YoiHd3YH-aLzUE0.roa
File: OHewu8hh5Fy6YoiHd3YH-aLzUE0.roa (raw, json)
Hash identifier: lwVOMc1/Orjz+OENsBarkn4bWGJ1UKRB0YgPzVbvnWk=
Subject key identifier: 38:77:B0:BB:C8:61:E4:5C:BA:62:88:87:77:76:07:F9:A2:F3:50:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885F0A843B13B5B947F7ABD8B71E33DA54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHewu8hh5Fy6YoiHd3YH-aLzUE0.roa
Signing time: Sat 27 May 2023 21:08:24 +0000
ROA not before: Sat 27 May 2023 21:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:0a:84:3b:13:b5:b9:47:f7:ab:d8:b7:1e:33:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 21:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3877b0bbc861e45cba628887777607f9a2f3504d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:dc:a0:4c:a2:60:ad:1a:ef:cd:d2:0c:c9:
7a:43:e0:ce:06:67:e8:fd:ac:72:6d:d9:bb:59:a2:
ef:e3:a7:aa:0b:b9:e1:0c:d1:0c:7b:1b:dc:cc:97:
2f:c5:63:f9:7b:95:98:ee:30:47:89:3a:35:82:e8:
e0:12:18:95:b9:3f:af:f8:3a:2c:f6:eb:a6:a7:3b:
84:07:8a:13:a3:56:6b:d9:8e:4b:ce:d3:34:47:19:
42:f8:74:15:e4:bb:4e:26:9e:0f:8e:1e:ec:49:e1:
b6:dd:f1:e3:de:3e:79:8f:33:b7:67:f2:0f:54:f0:
76:f0:06:30:e4:c7:d2:dd:ed:ac:54:c8:ac:8f:49:
1b:4e:4f:a9:11:c8:ea:88:e0:78:11:6a:4a:f3:62:
8a:a6:6c:04:c0:f1:78:14:f5:0e:a4:e2:4c:2d:a7:
29:8b:c3:8a:0b:ae:f7:8d:d0:be:f0:c5:d2:03:48:
95:93:ff:25:4e:52:2f:2e:94:02:37:9b:df:d4:a2:
7b:39:d6:e8:ee:86:6d:c0:f7:aa:9b:ff:2f:9a:27:
79:90:03:5d:f8:9a:bb:f4:44:e3:35:3a:0a:70:ee:
68:4c:62:10:ac:b7:f9:e2:bc:d1:b0:8c:fd:a4:75:
d3:34:c4:26:0b:69:ea:18:66:eb:61:17:12:a8:6c:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:B0:BB:C8:61:E4:5C:BA:62:88:87:77:76:07:F9:A2:F3:50:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OHewu8hh5Fy6YoiHd3YH-aLzUE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:cb:df:57:11:86:be:ee:fe:f1:2a:c3:b6:5f:79:be:02:84:
73:63:e0:02:a1:ff:30:40:ee:bb:69:91:77:99:51:5c:be:94:
7d:d8:b8:2b:04:d2:92:48:4b:2e:d5:21:ab:59:c0:9e:d2:65:
3c:bb:b7:4c:db:61:63:c5:cc:05:c0:b5:25:13:bc:46:9f:af:
74:67:2c:ef:10:00:38:45:a7:3b:0e:bb:46:0a:e0:f1:33:0a:
aa:94:80:68:68:0f:c5:fd:76:dd:24:8c:67:38:78:29:98:3c:
d5:68:cc:57:88:14:56:c9:fd:6c:6d:d5:02:f1:21:f0:34:05:
a5:4a:71:e4:29:3c:79:36:eb:36:ef:89:7a:c8:ce:a4:34:68:
bd:ea:74:78:d6:3f:ab:c3:21:59:64:5c:86:e2:d9:6e:a6:cd:
92:bc:22:74:4a:bd:7c:aa:e0:31:13:98:a2:44:46:b9:46:b8:
fb:75:c0:ca:b2:63:62:54:4a:28:f8:fe:22:d0:bd:b6:21:83:
47:ed:1e:aa:9d:92:d5:1a:6c:76:20:7d:f5:82:e4:c5:86:e2:
b4:12:d0:3b:be:34:cd:92:c7:ac:b4:d6:2a:8f:1a:05:65:91:
5d:34:f9:d5:ad:40:e8:fe:8a:76:70:53:a8:65:12:96:1d:41:
d5:02:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:21:44 2025 by rpki-client