Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIQ8QIJWUnOEMKER7n7vDXJIaDE.roa
File: OIQ8QIJWUnOEMKER7n7vDXJIaDE.roa (raw, json)
Hash identifier: uBkMeIf1WaB8hLERHWkCc1IBmrnpTS783cOdArgFnpA=
Subject key identifier: 38:84:3C:40:82:56:52:73:84:30:A1:11:EE:7E:EF:0D:72:48:68:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018512E67DB67AD1028DF6128C6494379CC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIQ8QIJWUnOEMKER7n7vDXJIaDE.roa
Signing time: Wed 14 Dec 2022 23:09:33 +0000
ROA not before: Wed 14 Dec 2022 23:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:e6:7d:b6:7a:d1:02:8d:f6:12:8c:64:94:37:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 23:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38843c40825652738430a111ee7eef0d72486831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:f5:e4:4d:ab:71:b2:3c:4d:ce:0d:6e:7d:
15:32:46:7e:9a:42:de:cb:98:a8:d6:ea:02:ac:95:
8c:90:1c:7f:cb:76:4b:09:0b:14:b9:5e:d8:17:4e:
14:8c:61:7a:0b:c3:7d:41:5d:d1:f5:f6:fa:49:1c:
41:37:94:17:7c:04:c2:60:b4:71:4b:4e:eb:9f:17:
8a:23:42:4d:1f:1d:ec:78:ee:c5:19:48:f9:63:61:
fa:82:d3:89:da:a8:5f:0f:ce:41:ca:56:fe:ee:0f:
aa:b1:9d:cf:88:ce:83:8e:7f:b7:6a:ab:51:18:5b:
20:63:8b:7f:8b:3e:56:c6:71:2f:41:13:83:83:8e:
10:ad:b5:42:8e:1e:b8:a7:e6:28:01:ea:bf:f5:77:
82:8c:34:be:86:d7:de:f5:21:f6:1a:2e:8b:5a:9a:
ee:4f:1e:ae:85:36:c5:8b:c3:9d:40:80:72:fc:a1:
38:ed:78:d4:d4:98:90:9f:8f:fd:68:18:54:50:42:
4e:af:8d:44:36:b6:56:03:f1:22:79:dc:4f:c7:24:
52:4d:95:13:d3:99:22:1e:e4:88:52:b8:2b:5b:4a:
9d:6a:76:f9:96:38:46:1f:72:04:1b:91:77:27:51:
4e:a6:42:f0:97:d4:55:54:b5:ac:18:e9:ab:73:1e:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:3C:40:82:56:52:73:84:30:A1:11:EE:7E:EF:0D:72:48:68:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIQ8QIJWUnOEMKER7n7vDXJIaDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:02:b9:b6:ee:5e:f4:bb:35:1b:d8:e4:6e:b2:99:1d:73:a0:
f8:eb:8c:32:75:09:7a:04:63:5c:da:11:73:00:f0:2c:e0:d4:
23:33:cd:b9:9b:89:11:8a:1d:74:f8:0e:b6:47:90:19:66:47:
52:71:73:45:f8:67:bc:83:fd:3d:e2:98:b7:2b:fb:8f:29:3b:
3b:69:ee:e8:65:af:d6:c3:69:c5:fd:41:76:d4:94:39:97:4b:
85:e2:df:a7:b6:48:19:54:67:67:64:ec:cf:47:96:83:6c:0a:
a9:41:02:ec:dd:dd:1e:c4:d4:39:6b:d2:21:96:11:07:36:29:
5f:af:bf:6d:71:98:58:57:53:7d:6a:3b:8f:ba:e6:64:36:e4:
8e:b4:09:4f:ed:fe:6c:5b:5b:3d:f4:08:b1:3b:48:cf:95:cd:
fc:f2:08:b3:b9:10:29:82:31:5a:91:9f:3d:28:ee:9f:b4:75:
e7:75:ed:c7:36:06:c4:f0:9d:61:65:94:08:f4:08:1a:d8:9a:
4d:8a:f6:df:64:3f:c8:fc:6c:30:20:64:7b:d4:c4:d0:3c:ff:
c9:74:8d:d0:80:6f:6a:02:4a:4e:a4:87:c0:11:e0:4c:75:f0:
16:07:84:4b:77:7d:ad:25:f8:d3:39:aa:c4:81:d1:e7:12:ee:
ba:ea:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:01:18 2025 by rpki-client