Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OOeF3IIIQZLMCpG_g6zPdTQ2aek.roa
File: OOeF3IIIQZLMCpG_g6zPdTQ2aek.roa (raw, json)
Hash identifier: U/URqLnYAsLqFvYMhMWvJj6Z2bzf39P72g/duybhfhg=
Subject key identifier: 38:E7:85:DC:82:08:41:92:CC:0A:91:BF:83:AC:CF:75:34:36:69:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829D59C686E85838494F42A76D4630118D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OOeF3IIIQZLMCpG_g6zPdTQ2aek.roa
Signing time: Sun 14 Aug 2022 17:14:42 +0000
ROA not before: Sun 14 Aug 2022 17:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:59:c6:86:e8:58:38:49:4f:42:a7:6d:46:30:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 17:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38e785dc82084192cc0a91bf83accf75343669e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:3f:6c:d9:c3:c4:bd:33:6d:4a:7c:7e:63:
a9:8b:72:83:5d:96:b6:bf:b5:22:6a:ea:3b:03:73:
69:ca:92:cd:06:c8:18:fe:a3:ed:28:00:6c:c0:50:
58:f0:cf:4b:2f:56:12:27:b9:df:b2:4a:72:e8:59:
28:3e:e5:fc:b2:29:32:9f:f4:4a:f9:3d:9e:02:5c:
19:ee:54:b3:eb:ec:ff:6a:d8:dd:f1:fc:bc:d8:9f:
4f:56:b3:88:3c:26:16:a3:d6:c5:6c:1b:91:68:3a:
34:d5:c3:8e:38:30:cd:55:0f:e1:7a:1d:c0:3c:34:
52:7d:f6:d1:c9:95:1d:c1:e2:88:64:59:db:23:08:
0e:2a:48:d5:2a:f6:f2:6b:db:ed:23:ad:e6:c2:77:
b3:ae:92:2b:0d:c2:de:21:6e:39:8f:b7:95:cd:a9:
77:f2:a2:78:82:78:9b:1f:30:8f:68:50:08:b3:34:
79:54:e0:ce:7e:f7:e3:00:e8:96:5f:15:5d:0d:e1:
18:f8:7d:b4:2f:7c:f6:2f:b9:c0:fe:c6:c1:66:d5:
be:e3:60:c2:bf:e7:0c:71:8f:63:61:0a:2e:4c:85:
05:e8:b4:41:1e:c4:94:1d:15:a6:fd:a6:6c:ec:21:
23:bc:9a:3e:a0:b1:5e:52:67:46:cc:6e:e6:f4:89:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E7:85:DC:82:08:41:92:CC:0A:91:BF:83:AC:CF:75:34:36:69:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OOeF3IIIQZLMCpG_g6zPdTQ2aek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:a8:68:6b:b2:b0:a8:1d:90:71:0c:a8:9b:5a:63:b8:64:66:
0d:08:25:e4:57:2e:87:83:72:24:f0:93:06:cd:c7:c6:ae:bc:
2b:d0:81:19:4f:af:59:0d:a7:b0:a7:e1:02:2b:35:3b:ca:f2:
0b:3c:cc:5b:d3:e1:0e:91:09:a3:46:ee:21:ae:44:b6:10:00:
d8:55:79:3c:64:0c:26:62:52:b0:00:02:e4:c6:72:3c:2a:2e:
a8:b0:a9:1e:ab:3a:95:31:2e:9f:a1:e3:92:4b:57:48:73:31:
2a:4f:f8:21:56:7e:ff:74:7e:7f:a8:8b:1e:15:bd:3d:29:87:
ec:30:7c:b9:f6:6e:a9:43:ca:94:a4:ca:87:9a:a3:28:f5:43:
ae:ee:e9:78:7a:b6:4b:50:83:66:37:aa:e7:2e:11:91:d3:d2:
12:74:01:79:87:e2:34:8a:b5:f7:98:c6:02:ca:64:76:a4:39:
80:93:d2:2d:db:76:b5:a8:ad:f8:2a:e3:0d:00:dc:e0:e0:fa:
6e:72:b5:2f:5d:c6:30:b0:f4:f6:c1:58:c1:bf:c1:81:64:ce:
ca:a5:01:b2:5d:6c:89:7a:03:5d:15:a6:53:5f:92:13:67:8e:
28:a0:71:f7:3e:bf:8e:7e:79:c1:22:01:36:32:f7:48:f8:73:
18:66:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:44:28 2025 by rpki-client