Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP09l_B5eaHkCzqHJ5GmOCWbOw.roa
File: OPP09l_B5eaHkCzqHJ5GmOCWbOw.roa (raw, json)
Hash identifier: JI2g3bN/suIfV+fBROfF3H1GnDPKp3BySuo3S+d9EVQ=
Subject key identifier: 38:F3:F4:F6:5F:C1:E5:E6:87:90:2C:EA:1C:9E:46:98:E0:96:6C:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018665136E68027084E71BFE3947682C8355
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP09l_B5eaHkCzqHJ5GmOCWbOw.roa
Signing time: Sat 18 Feb 2023 15:10:17 +0000
ROA not before: Sat 18 Feb 2023 15:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:13:6e:68:02:70:84:e7:1b:fe:39:47:68:2c:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 15:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38f3f4f65fc1e5e687902cea1c9e4698e0966cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:b0:b0:ae:39:7f:7d:36:5a:87:20:71:67:
2f:55:4a:e9:73:8a:93:b1:bc:de:a0:3c:c7:f5:41:
2b:50:83:50:87:05:8c:04:13:83:87:f1:36:6f:4f:
ff:e9:c1:71:02:8b:bc:bb:86:23:79:48:e4:8b:1b:
67:50:52:73:48:ee:c9:50:94:4e:98:e0:bb:f1:4e:
71:dc:a2:a0:67:0d:a0:14:74:d0:90:d4:9f:85:15:
0b:8c:3a:de:09:8b:9e:19:2e:49:b6:42:40:4a:45:
c7:6b:a1:7e:ad:dd:e3:bb:90:ad:50:1b:68:40:dd:
d5:ee:e0:bc:b2:9a:ff:cb:30:f9:e2:25:08:ec:a6:
23:55:d2:73:a4:2b:21:eb:c5:02:c2:37:e8:b7:18:
7e:84:60:c4:73:13:6a:50:ef:bd:45:b5:2c:39:86:
4c:6a:25:7a:67:66:e7:02:e7:1f:ac:36:5d:d5:e5:
9e:9a:b7:b5:10:62:31:92:ea:40:c8:9c:7c:8d:59:
51:43:ed:3d:14:4c:13:dd:7b:97:58:a8:c6:98:cc:
84:12:68:c0:e7:51:e2:73:f0:aa:79:53:32:c0:0c:
97:b1:70:62:c7:e7:92:82:f6:92:ac:8c:74:e1:c0:
76:f8:b6:07:a9:96:49:1f:c2:11:3e:b1:0c:b4:7a:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:F4:F6:5F:C1:E5:E6:87:90:2C:EA:1C:9E:46:98:E0:96:6C:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP09l_B5eaHkCzqHJ5GmOCWbOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:64:50:78:a1:ad:2e:3d:7c:ae:02:27:a2:db:8a:ac:22:dd:
d4:0f:63:96:ac:b0:31:c7:10:cd:05:81:16:a4:ac:b9:35:29:
ae:54:ca:d4:e5:b2:fd:cc:18:4f:ec:bc:17:40:dc:30:f3:03:
b3:46:c2:06:ce:c7:77:ae:5c:ca:0f:34:7c:78:35:eb:1c:77:
7d:b5:9d:97:0d:d2:91:e9:1e:cc:58:49:f9:66:9c:bd:08:9c:
37:89:bc:e0:e0:c2:cf:aa:75:5d:8a:7e:57:c6:61:08:91:5b:
95:38:a2:62:cc:f1:f0:7a:df:bc:a8:90:af:fa:89:04:a6:e0:
68:d4:68:f8:28:34:7a:57:27:cc:d5:fd:13:c1:8f:ab:2f:ae:
c9:75:4d:17:23:8c:87:72:75:43:1c:50:3b:51:ac:d5:74:4a:
39:30:14:5f:35:ef:72:80:b4:be:0f:c5:9a:74:52:b0:a4:41:
ce:82:89:4e:9c:eb:d3:18:d9:e4:fb:66:e2:7c:5d:d6:a9:1b:
8d:10:fc:ed:b1:2f:69:41:ec:56:89:ad:b9:d4:47:47:12:1c:
18:da:0e:70:2a:45:23:eb:34:76:f3:c6:53:c0:d5:37:04:e8:
03:c2:cc:f7:01:b8:80:e6:0d:b2:b6:fe:d0:e6:c6:3d:e6:91:
26:e2:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:10 2025 by rpki-client