Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OL7UhcuOfWJoqbkTC_FEJdvw74M.roa
File: OL7UhcuOfWJoqbkTC_FEJdvw74M.roa (raw, json)
Hash identifier: j/LoHdTpbfChPwgM2xSnbmcoj15JIRLd37LdqrEKVv0=
Subject key identifier: 38:BE:D4:85:CB:8E:7D:62:68:A9:B9:13:0B:F1:44:25:DB:F0:EF:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B84DC1ADB1E1D17A872AD12C83C8DCF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OL7UhcuOfWJoqbkTC_FEJdvw74M.roa
Signing time: Wed 14 Jun 2023 05:08:03 +0000
ROA not before: Wed 14 Jun 2023 05:08:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:4d:c1:ad:b1:e1:d1:7a:87:2a:d1:2c:83:c8:dc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 05:08:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38bed485cb8e7d6268a9b9130bf14425dbf0ef83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:83:75:44:a1:cc:97:e1:d3:03:24:89:9a:
d0:3d:ac:e5:b4:1c:ff:85:bc:02:37:36:ec:3b:e5:
b1:b2:25:9a:96:99:91:5c:4b:57:75:81:f4:72:7e:
01:e4:77:07:29:16:3b:3f:3d:f9:b1:b5:13:1b:3f:
53:2b:57:e6:8e:8f:a1:65:c6:bb:b7:bd:5d:74:7a:
4a:bc:0e:1b:a7:c3:66:5d:a2:7f:d0:a9:aa:e6:f2:
a3:fb:4e:6a:2a:9f:3b:81:0c:5f:b7:eb:77:29:d7:
52:48:e4:16:b3:6f:44:99:92:3a:1d:94:76:3f:a9:
a0:e4:70:ef:b8:c1:7d:02:41:8c:6f:e6:77:9e:bb:
3d:d8:e1:25:06:19:6b:1e:62:db:af:a8:f4:8f:85:
e3:74:dc:54:f3:e5:54:ab:0b:a3:d4:1d:e1:91:9d:
e6:69:61:4c:1f:76:1e:d3:89:52:59:89:ae:f4:db:
0d:69:bf:a3:56:49:99:b7:c5:35:6e:87:35:65:d9:
44:a4:92:a8:20:0d:18:01:13:f7:0d:ce:56:76:ab:
b6:b6:9e:52:4d:34:e5:0d:d1:e7:00:f2:05:63:3f:
fd:e9:15:a4:45:0f:fb:d3:71:4d:ee:a2:f7:7f:bc:
ff:a0:b8:40:29:dc:b5:a0:cd:ec:f1:f6:9c:b1:72:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:D4:85:CB:8E:7D:62:68:A9:B9:13:0B:F1:44:25:DB:F0:EF:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OL7UhcuOfWJoqbkTC_FEJdvw74M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:e9:f9:9f:56:91:b1:a1:46:93:c9:ad:32:f9:00:1f:72:fa:
3d:19:05:81:9d:75:a8:2c:9a:1c:f9:05:88:30:17:df:68:79:
a5:d9:db:56:12:a4:99:70:de:14:28:dc:d3:77:11:d2:f6:f2:
fe:47:67:5a:5e:be:c7:04:b5:9a:08:25:1d:3d:ea:be:05:3d:
46:b7:74:b1:51:cc:1e:8c:73:0d:6d:e9:b5:48:de:09:34:1c:
3c:23:6d:25:86:e2:2f:f4:be:b0:73:58:b4:54:94:a5:03:e7:
d7:7d:d3:7d:9a:f5:2d:14:63:30:eb:fc:8f:88:2e:c5:6e:bd:
8c:97:e3:06:fa:a0:0f:19:f0:d2:fc:92:e9:47:6d:bd:d0:33:
13:32:3c:43:2c:62:67:7c:2f:7d:53:b3:fa:b5:74:2b:a6:0d:
a6:0e:65:48:8f:d1:b2:3c:51:e2:68:f5:0e:0c:1f:b1:c9:4f:
14:82:ad:6d:5f:e1:c8:36:29:b5:74:97:6e:94:ed:c3:ff:44:
88:1d:df:78:6e:96:7d:28:15:f4:4f:f6:7f:64:a4:0e:83:73:
81:65:ec:64:1d:7b:68:dd:79:9a:35:3e:3c:84:e0:1a:a2:e0:
15:a7:4f:d8:b0:92:07:34:6e:d9:46:c8:3f:44:87:e3:17:9a:
02:f6:b4:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi4TcGtseHReocq0SyDyNz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE0MDUwODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGJlZDQ4NWNiOGU3ZDYyNjhhOWI5MTMwYmYxNDQyNWRiZjBlZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSCDdUShzJfh0wMkiZrQPazltBz/
hbwCNzbsO+WxsiWalpmRXEtXdYH0cn4B5HcHKRY7Pz35sbUTGz9TK1fmjo+hZca7
t71ddHpKvA4bp8NmXaJ/0Kmq5vKj+05qKp87gQxft+t3KddSSOQWs29EmZI6HZR2
P6mg5HDvuMF9AkGMb+Z3nrs92OElBhlrHmLbr6j0j4XjdNxU8+VUqwuj1B3hkZ3m
aWFMH3Ye04lSWYmu9NsNab+jVkmZt8U1boc1ZdlEpJKoIA0YARP3Dc5Wdqu2tp5S
TTTlDdHnAPIFYz/96RWkRQ/703FN7qL3f7z/oLhAKdy1oM3s8facsXLpJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDi+1IXLjn1iaKm5EwvxRCXb8O+DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT0w3VWhjdU9mV0pvcWJrVENfRkVKZHZ3NzRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGbp+Z9WkbGhRpPJrTL5
AB9y+j0ZBYGddagsmhz5BYgwF99oeaXZ21YSpJlw3hQo3NN3EdL28v5HZ1pevscE
tZoIJR096r4FPUa3dLFRzB6Mcw1t6bVI3gk0HDwjbSWG4i/0vrBzWLRUlKUD59d9
032a9S0UYzDr/I+ILsVuvYyX4wb6oA8Z8NL8kulHbb3QMxMyPEMsYmd8L31Ts/q1
dCumDaYOZUiP0bI8UeJo9Q4MH7HJTxSCrW1f4cg2KbV0l26U7cP/RIgd33huln0o
FfRP9n9kpA6Dc4Fl7GQde2jdeZo1PjyE4Bqi4BWnT9iwkgc0btlGyD9Eh+MXmgL2
tOE=
-----END CERTIFICATE-----
Generated at Fri May 2 14:25:08 2025 by rpki-client