Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OJxFV6wecmmGVjSVdyI6uZaCXfc.roa
File: OJxFV6wecmmGVjSVdyI6uZaCXfc.roa (raw, json)
Hash identifier: q5PYdEBM4R4V0RVwVAFJVnEJTz071Nqus2d8MQTo4TE=
Subject key identifier: 38:9C:45:57:AC:1E:72:69:86:56:34:95:77:22:3A:B9:96:82:5D:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857BD4345C4378F20589FC723C28B5FEA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OJxFV6wecmmGVjSVdyI6uZaCXfc.roa
Signing time: Wed 04 Jan 2023 08:09:42 +0000
ROA not before: Wed 04 Jan 2023 08:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:d4:34:5c:43:78:f2:05:89:fc:72:3c:28:b5:fe:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 08:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=389c4557ac1e72698656349577223ab996825df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:38:b6:db:1c:7e:21:68:ed:af:ba:82:42:
d9:59:43:19:32:57:9a:fa:94:76:b1:cb:5b:d7:d8:
61:6f:86:bf:a7:32:06:2f:1d:c3:ab:0d:cc:87:4e:
38:24:58:ae:21:13:de:4d:8a:80:c8:00:de:78:17:
9d:30:c8:a3:95:94:af:d1:64:9c:a0:55:8c:82:8c:
13:42:45:f5:c7:77:3e:8d:be:bc:95:dd:82:e7:45:
e2:9b:fd:2b:94:7d:92:d1:96:4b:36:a7:88:f0:61:
be:e4:09:bf:96:84:35:3e:96:5a:b3:5a:61:5f:a7:
7b:df:ed:01:6d:2f:49:02:7f:76:a1:ba:a4:26:79:
62:da:fc:75:c9:b6:96:d8:25:c6:a2:9e:3e:0f:47:
29:d5:26:4d:29:94:26:a5:e3:d6:22:1b:9a:52:7f:
b0:67:67:01:3e:e7:13:d4:2f:bf:6c:ea:75:f2:c4:
42:1b:ce:94:87:8b:d6:85:8c:9c:02:8a:1a:23:ee:
7c:f6:43:64:c0:c9:28:f8:2b:84:2d:1e:9e:6a:26:
17:50:ce:56:eb:13:01:01:64:4b:20:84:e1:47:05:
fa:56:ac:1b:1c:39:4b:8d:ca:f0:af:06:17:0d:c2:
7b:e1:b7:59:73:04:86:19:03:4c:cb:19:98:61:ff:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:45:57:AC:1E:72:69:86:56:34:95:77:22:3A:B9:96:82:5D:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OJxFV6wecmmGVjSVdyI6uZaCXfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:96:ed:8d:3d:53:71:f3:61:d5:63:51:c7:ae:53:10:6c:a9:
4f:72:7a:8e:7a:0a:66:e3:0a:b1:5f:d5:64:c0:52:7c:2f:4c:
f8:89:80:e2:78:a8:e2:34:de:81:e0:ca:97:21:9a:32:b3:d3:
a5:89:97:79:4c:6e:d5:ae:21:e5:41:8b:ed:9b:18:f7:9f:eb:
17:e9:00:2a:73:d2:c2:14:2a:b6:5c:eb:eb:a1:dc:c6:3a:dd:
44:38:2b:7c:71:23:8c:53:7b:dd:7f:4d:38:0c:09:05:3a:86:
6d:07:75:c3:7d:12:bb:18:63:01:3e:1d:fa:c5:55:fc:c8:a2:
00:e8:9d:e6:f6:72:5b:57:6b:5b:fc:2d:47:0f:85:de:10:a7:
d9:00:bc:0e:55:ac:1b:87:53:a3:08:11:c9:0b:6f:95:cf:38:
d5:70:41:89:d2:25:f9:d0:5e:8e:e9:be:b5:52:17:62:bd:97:
79:88:79:35:af:61:93:9a:d2:06:eb:60:03:c4:c3:f0:41:fe:
a1:86:73:f9:95:b0:28:5b:db:20:62:c6:ae:48:d4:05:d9:27:
fb:89:f2:57:bc:12:25:a5:df:08:d4:58:04:03:6e:ea:81:de:
b9:36:ac:d2:27:c4:82:ea:3d:6d:07:6d:4c:fb:70:8b:b7:f1:
9a:79:7d:f3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV71DRcQ3jyBYn8cjwotf6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA0MDgwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODljNDU1N2FjMWU3MjY5ODY1NjM0OTU3NzIyM2FiOTk2ODI1ZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpM4ttscfiFo7a+6gkLZWUMZMlea
+pR2sctb19hhb4a/pzIGLx3Dqw3Mh044JFiuIRPeTYqAyADeeBedMMijlZSv0WSc
oFWMgowTQkX1x3c+jb68ld2C50Xim/0rlH2S0ZZLNqeI8GG+5Am/loQ1PpZas1ph
X6d73+0BbS9JAn92obqkJnli2vx1ybaW2CXGop4+D0cp1SZNKZQmpePWIhuaUn+w
Z2cBPucT1C+/bOp18sRCG86Uh4vWhYycAooaI+589kNkwMko+CuELR6eaiYXUM5W
6xMBAWRLIIThRwX6VqwbHDlLjcrwrwYXDcJ74bdZcwSGGQNMyxmYYf9sBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDicRVesHnJphlY0lXciOrmWgl33MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT0p4RlY2d2VjbW1HVmpTVmR5STZ1WmFDWGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIaW7Y09U3HzYdVjUceu
UxBsqU9yeo56CmbjCrFf1WTAUnwvTPiJgOJ4qOI03oHgypchmjKz06WJl3lMbtWu
IeVBi+2bGPef6xfpACpz0sIUKrZc6+uh3MY63UQ4K3xxI4xTe91/TTgMCQU6hm0H
dcN9ErsYYwE+HfrFVfzIogDoneb2cltXa1v8LUcPhd4Qp9kAvA5VrBuHU6MIEckL
b5XPONVwQYnSJfnQXo7pvrVSF2K9l3mIeTWvYZOa0gbrYAPEw/BB/qGGc/mVsChb
2yBixq5I1AXZJ/uJ8le8EiWl3wjUWAQDbuqB3rk2rNInxILqPW0HbUz7cIu38Zp5
ffM=
-----END CERTIFICATE-----
Generated at Fri May 2 04:07:03 2025 by rpki-client