Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OQjsRKyzuW0RYBzobiyISBUf2ig.roa
File: OQjsRKyzuW0RYBzobiyISBUf2ig.roa (raw, json)
Hash identifier: GAQl1jbiZvnrdtdZlwBqNJT1KDqlcNClc7dh/EEylAE=
Subject key identifier: 39:08:EC:44:AC:B3:B9:6D:11:60:1C:E8:6E:2C:88:48:15:1F:DA:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188831A80FDBA0C75AA3CEBCCBDA2A239CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OQjsRKyzuW0RYBzobiyISBUf2ig.roa
Signing time: Sat 03 Jun 2023 21:12:12 +0000
ROA not before: Sat 03 Jun 2023 21:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:83:1a:80:fd:ba:0c:75:aa:3c:eb:cc:bd:a2:a2:39:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 21:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3908ec44acb3b96d11601ce86e2c8848151fda28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:93:8d:6c:d0:c9:60:b5:03:25:03:5f:94:
3e:19:62:71:23:5c:cf:b7:60:38:7f:77:1c:e6:7b:
fe:11:ab:3e:4f:d7:46:d5:ad:63:e7:6d:e5:f6:13:
8f:ee:51:40:83:55:73:96:e0:b1:7c:e5:7a:c0:d3:
6c:30:44:29:99:c6:19:38:fb:23:b3:2d:40:63:6f:
58:ea:dc:74:76:d1:87:3b:a2:d1:73:0e:ae:ee:46:
46:e0:35:14:bb:44:fa:a0:48:48:e9:5c:86:94:4d:
e0:9a:6d:ba:fb:50:bc:4d:67:55:99:ef:af:3a:d5:
51:20:44:ee:a0:36:72:4a:b2:ad:7f:54:88:28:3c:
0b:d3:95:2d:66:0c:2f:22:43:82:e2:be:1d:f2:33:
4a:62:60:5b:89:bb:5b:e0:88:22:34:98:3a:c2:fc:
83:b8:94:b5:c3:86:1d:5e:3d:b9:76:f3:8b:86:24:
7f:47:22:f8:48:f9:aa:f6:97:90:52:b4:70:36:68:
ba:25:0b:c7:ba:26:93:2b:52:54:26:7f:5b:b5:58:
3f:95:09:a6:94:1e:30:bb:ab:60:a2:ce:d1:cb:47:
d1:32:63:3d:5e:b0:06:73:34:e6:40:8f:9b:62:f3:
2c:ab:13:08:97:ef:34:b4:f8:ca:c6:76:8b:05:bc:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:EC:44:AC:B3:B9:6D:11:60:1C:E8:6E:2C:88:48:15:1F:DA:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OQjsRKyzuW0RYBzobiyISBUf2ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:96:65:0a:c6:d9:7d:5b:f5:fd:24:fc:2c:9b:15:2a:14:f3:
0c:45:90:c0:63:1b:6d:cc:cf:6a:7e:d3:a3:30:10:23:d7:cc:
5f:67:81:c6:de:8b:71:63:3e:8a:04:c5:cd:e1:a8:ff:1d:04:
34:a0:76:0d:de:14:11:1c:47:db:3e:c9:d3:ab:d5:d7:84:d1:
03:e1:a5:5f:87:bb:ce:50:d6:23:9e:9c:4e:21:45:8b:d6:e7:
c5:d3:bb:0c:91:fb:28:78:2f:24:ef:f9:a3:7e:07:39:5f:c4:
27:4d:2e:e3:9d:8e:ac:40:b2:cd:94:3a:80:9a:06:42:91:3c:
05:02:ab:17:c9:a1:4e:81:59:49:a0:03:0b:a1:c0:ff:5c:fe:
f6:8f:97:94:3c:83:37:f1:27:f2:04:b5:b7:48:e0:8e:92:76:
da:34:f5:67:57:c1:a4:fd:3b:67:04:29:17:6e:f9:52:91:a3:
88:30:fc:36:44:76:c6:3a:01:1b:a0:eb:a6:0b:88:18:4d:5e:
f3:4d:1c:4d:0f:d4:8f:6d:fa:d6:1c:bb:a1:a6:a9:36:74:86:
30:63:97:84:0e:0e:1a:dd:a5:fb:02:c8:a4:4d:1d:78:5d:4f:
e7:36:c2:e4:9d:5b:ae:61:e3:2b:11:81:78:87:ad:58:d2:80:
31:f3:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:15 2025 by rpki-client