Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIqY2Xe06Ip3mlay25taph21SMw.roa
File: OIqY2Xe06Ip3mlay25taph21SMw.roa (raw, json)
Hash identifier: IVbyYuTZeH5aE8KSLlTdZc9HQKuMXAogf8C8t6oiiR4=
Subject key identifier: 38:8A:98:D9:77:B4:E8:8A:77:9A:56:B2:DB:9B:5A:A6:1D:B5:48:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E0AA81603855B1A60742E953A6CE0E37
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIqY2Xe06Ip3mlay25taph21SMw.roa
Signing time: Wed 03 May 2023 08:11:23 +0000
ROA not before: Wed 03 May 2023 08:11:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:aa:81:60:38:55:b1:a6:07:42:e9:53:a6:ce:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 08:11:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388a98d977b4e88a779a56b2db9b5aa61db548cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:50:72:14:3b:c6:0c:aa:af:4d:c6:ff:90:
ee:65:2e:51:35:27:23:52:78:19:d8:d3:10:5a:6d:
62:38:b8:5c:58:33:a5:92:7b:c6:fb:23:8e:4d:65:
f4:37:ea:d4:ca:73:bd:77:ff:d7:b3:af:f2:af:4c:
37:42:aa:fa:32:98:53:3c:73:1f:b2:c7:00:e0:2e:
be:ab:d8:6d:b9:23:e2:a6:e7:23:fb:c0:6b:3c:70:
81:c8:ae:89:93:ca:66:0b:c4:a6:03:62:08:5c:56:
cb:47:68:12:2b:46:69:9e:d8:bf:81:46:da:fc:fc:
bd:4f:a9:7b:c6:a9:ef:12:2e:54:7e:43:c6:6d:c9:
18:78:cb:25:67:7a:6d:24:c9:20:93:69:bf:e5:15:
64:83:58:db:3d:b3:c3:3e:0b:85:af:21:fe:6c:92:
ed:ca:15:42:c5:22:8e:7c:ba:ca:6c:86:0a:68:71:
c6:5b:e1:64:52:87:fc:e5:ce:46:4e:b3:46:2a:b7:
d1:10:e9:6e:b8:81:6a:ec:24:2f:f2:fe:71:2b:c8:
15:45:d1:d5:e9:e1:b4:9e:fb:30:b8:c5:b7:f7:47:
27:ce:d1:5c:b1:fb:d6:ab:76:eb:9e:10:fe:9f:dc:
00:be:2b:0a:0a:9a:30:1e:0b:5d:12:96:b0:c6:62:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:98:D9:77:B4:E8:8A:77:9A:56:B2:DB:9B:5A:A6:1D:B5:48:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OIqY2Xe06Ip3mlay25taph21SMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:88:55:4d:5c:dd:f9:8d:db:8c:83:0d:6b:f3:97:b0:b7:63:
2f:cf:95:90:b9:ca:31:dc:fb:fb:5f:cc:a7:1f:96:10:6f:56:
ef:1e:d6:c1:1f:e2:b3:32:fa:9d:4d:62:f4:28:cc:1e:40:79:
33:c3:3d:be:a8:97:f0:55:c3:7c:1c:95:bc:9d:df:2c:49:7d:
6a:6f:66:49:6c:40:bf:70:5b:a4:e8:f3:19:ae:69:db:44:cf:
d2:92:e7:a3:e7:05:09:28:12:e8:16:9a:08:28:d2:ad:34:b5:
1c:59:4a:ce:a3:ef:25:30:9b:56:37:ec:25:12:fd:30:b9:df:
9f:05:c5:e4:cb:3b:d3:06:82:95:9d:eb:9c:62:c5:16:00:fd:
e2:20:6f:35:7f:0e:6a:5f:b5:9f:1e:4e:b8:99:d1:66:2a:b6:
50:de:d3:90:aa:a5:86:60:01:3a:13:fa:d3:0f:c8:14:2b:40:
a8:a9:8e:fc:0c:8a:15:97:1c:c8:57:53:d9:72:e9:11:ab:d2:
94:20:c7:cf:c5:75:44:dc:bd:37:9a:9b:85:e5:24:cb:3d:39:
89:eb:9d:4a:32:ba:3f:c1:48:b7:5d:6b:e7:14:b0:8a:13:c3:
e8:67:59:f9:5f:ed:88:17:82:76:a7:fe:11:28:f3:cf:44:04:
bf:e0:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:31 2025 by rpki-client