Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP4H50fLknmdU04Tq6vHpAwZFo.roa
File: OPP4H50fLknmdU04Tq6vHpAwZFo.roa (raw, json)
Hash identifier: aTDDlGINo34fetsNHmdqE5kJFqOBorPoyy2d0BgmhDg=
Subject key identifier: 38:F3:F8:1F:9D:1F:2E:49:E6:75:4D:38:4E:AE:AF:1E:90:30:64:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 773FEEFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP4H50fLknmdU04Tq6vHpAwZFo.roa
Signing time: Thu 31 Mar 2022 14:09:36 +0000
ROA not before: Thu 31 Mar 2022 14:09:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000678654 (0x773feefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 14:09:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38f3f81f9d1f2e49e6754d384eaeaf1e9030645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:73:50:2e:45:f8:21:6b:9d:92:f7:1b:98:
34:fb:d8:09:f0:89:38:77:1b:82:f9:0d:ea:07:7f:
ee:bc:0e:a7:58:e8:0e:6e:7a:01:84:ef:99:56:f1:
96:aa:90:70:9a:25:ad:f2:d4:0a:ac:6b:a8:9b:a7:
c3:c3:08:1c:aa:b6:4f:a5:8a:55:8b:64:80:27:3c:
87:3e:cc:9d:72:2d:6f:e2:6b:84:b0:e9:52:c8:89:
88:3f:52:f2:31:97:f8:81:0e:71:53:d2:8f:20:fc:
e9:dc:5e:ec:b9:fe:69:f7:da:7b:02:59:22:d8:1b:
9a:4b:b8:2d:31:13:cb:1c:3d:cb:85:7a:58:fa:b3:
38:b1:b4:a2:e1:5a:31:bc:e8:01:fd:e8:da:35:cf:
ac:e9:c7:b9:e3:f9:14:f4:28:ad:ea:22:6e:5c:ea:
ff:d4:c2:0b:4f:e9:fc:ab:b2:18:32:3c:1c:49:a4:
d7:21:a0:71:01:d6:55:3a:ad:eb:23:e1:f8:35:4e:
87:97:d6:30:8a:11:6a:1e:55:3b:3e:16:c8:25:be:
cf:99:ec:c5:b0:f3:4c:0c:bf:f5:4b:45:82:fe:3a:
57:92:09:bf:cd:08:6c:8c:be:bd:56:b9:cf:71:48:
a2:23:6f:73:ef:f3:e9:fb:64:85:e2:fc:12:78:38:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:F8:1F:9D:1F:2E:49:E6:75:4D:38:4E:AE:AF:1E:90:30:64:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OPP4H50fLknmdU04Tq6vHpAwZFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:d8:14:fc:ba:81:6d:be:e4:48:ff:d3:af:7c:b5:f5:49:ae:
b6:41:ab:87:7a:cb:df:ef:0a:85:24:af:00:a8:98:2f:d3:2c:
2f:30:78:a0:a3:fc:17:c3:c0:46:5c:dc:0f:d5:47:b6:71:e2:
a6:e1:bf:a9:48:d6:cc:af:47:ac:2d:10:15:93:04:ce:71:e6:
d7:15:5a:1e:cf:f1:b8:01:55:8e:21:4f:7b:06:36:46:31:99:
ed:f6:f5:87:a7:d9:79:d4:df:d6:e8:19:b4:e9:68:7c:9d:ef:
38:ae:86:1f:38:47:96:ba:f7:4d:a8:84:ba:be:1a:91:7d:69:
7e:98:3b:f2:50:ce:61:40:c9:30:94:e3:aa:67:2c:7d:7d:7d:
22:45:76:19:e4:5f:f0:c5:b1:a4:e9:6f:ea:29:94:4f:5c:39:
49:9f:6a:30:da:4d:c1:70:88:ef:96:2f:4a:74:5e:71:5c:5a:
63:da:8e:e5:01:d5:f5:ae:d9:10:66:11:87:da:05:05:37:b4:
0d:ee:0e:c6:9f:c9:7f:3a:7b:3a:4d:96:93:6e:4e:e8:b9:81:
c6:3a:d0:82:41:72:9a:4d:32:04:d9:b2:f4:34:ed:ce:46:bc:
d7:e8:0c:56:28:93:2b:e0:e5:e5:dc:df:1b:0b:09:c3:b1:dc:
70:8c:3d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:26:44 2025 by rpki-client