Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OTQVKATjmdbXwUkCwVB840TSrn8.roa
File: OTQVKATjmdbXwUkCwVB840TSrn8.roa (raw, json)
Hash identifier: PEwIhOIcj+QINGO95gw5YoSiYgANvGQ/sLD1GtNT4jU=
Subject key identifier: 39:34:15:28:04:E3:99:D6:D7:C1:49:02:C1:50:7C:E3:44:D2:AE:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018461E4EA336D7307BD709A0039612FD0FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OTQVKATjmdbXwUkCwVB840TSrn8.roa
Signing time: Thu 10 Nov 2022 14:15:02 +0000
ROA not before: Thu 10 Nov 2022 14:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:e4:ea:33:6d:73:07:bd:70:9a:00:39:61:2f:d0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 14:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3934152804e399d6d7c14902c1507ce344d2ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:ae:5e:40:83:04:bf:a0:75:80:fb:98:eb:
3a:83:0b:f6:18:32:2e:8b:9c:2b:c8:03:d0:1e:80:
99:68:80:09:af:94:d7:f4:53:51:c5:9d:38:f4:5f:
ab:d4:2b:8e:fe:a3:5b:f6:9f:12:d6:3e:71:76:2a:
ea:1f:7c:06:ef:08:06:32:91:96:d8:d7:f4:4c:a4:
f5:05:46:10:9f:b7:ef:ca:17:30:f3:70:23:bf:80:
4a:91:3d:86:7f:20:88:bd:02:2e:e6:0a:5a:86:f7:
27:be:59:67:7c:9d:07:f7:fb:06:f6:8b:f3:09:85:
e0:67:63:06:93:95:cc:0d:cd:f5:eb:84:3f:a7:1e:
3a:a9:b0:e4:77:b4:60:ef:5e:d9:5f:6b:f9:8d:ed:
51:b5:4e:0c:7c:1a:79:0e:ef:ef:16:d0:06:22:b5:
bb:a7:01:0a:45:2f:90:00:52:b2:85:b5:ae:0f:84:
27:5b:dc:0c:ff:5a:f6:4e:d9:16:d7:9f:47:9f:e7:
78:a7:40:67:e6:40:ad:76:66:9a:4d:fc:3b:c5:05:
89:5e:ab:38:e6:cf:5c:ac:06:c9:5d:13:81:df:5d:
32:61:9d:ef:d4:fa:19:c8:f2:af:bc:11:d5:26:4d:
ac:5a:d2:67:a5:91:95:51:08:35:05:2a:32:e5:4c:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:15:28:04:E3:99:D6:D7:C1:49:02:C1:50:7C:E3:44:D2:AE:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OTQVKATjmdbXwUkCwVB840TSrn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:23:ce:76:57:07:87:07:17:07:86:04:d3:8a:86:c3:6d:d2:
bf:43:81:78:26:01:3b:2d:b4:6f:c1:3d:f1:d4:18:79:99:8e:
4b:44:7e:b9:6d:87:11:c1:a2:ce:a4:fc:04:88:bc:55:85:37:
61:01:d4:a7:ee:4d:59:6c:2c:ee:13:07:65:7c:04:a5:be:d4:
ab:62:9b:af:08:f1:3c:f7:4c:de:89:e9:50:fc:a0:99:e7:ef:
d3:aa:4c:cc:68:24:a0:e1:6f:6d:cc:72:c4:c2:ab:2d:a3:87:
79:b5:8c:fd:88:b4:6c:2c:4d:84:a2:27:91:b9:0a:e2:53:df:
3e:a2:29:f0:04:12:90:31:31:1e:5a:18:fa:fa:47:8e:b8:7b:
2e:cc:74:48:20:7f:f8:6c:a2:ff:c3:af:3f:e3:25:1b:bc:8b:
a4:86:cd:01:ca:9f:b7:87:b9:a8:fc:87:3d:c7:c8:ae:24:91:
60:e1:b8:72:73:06:36:ad:2e:11:2d:45:d2:de:2c:04:a1:17:
5f:37:fa:42:86:c1:f7:75:1d:a0:6c:ec:50:57:f7:48:30:f5:
2f:b0:76:87:dc:ae:96:8e:f5:73:30:ff:0b:ee:c2:8f:00:4a:
d3:f0:e5:5d:cd:23:1b:81:3f:3d:40:04:7c:b8:c6:b2:e5:e4:
2d:35:cc:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRh5OozbXMHvXCaADlhL9D9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEwMTQxNTAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTM0MTUyODA0ZTM5OWQ2ZDdjMTQ5MDJjMTUwN2NlMzQ0ZDJhZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleiuXkCDBL+gdYD7mOs6gwv2GDIu
i5wryAPQHoCZaIAJr5TX9FNRxZ049F+r1CuO/qNb9p8S1j5xdirqH3wG7wgGMpGW
2Nf0TKT1BUYQn7fvyhcw83Ajv4BKkT2GfyCIvQIu5gpahvcnvllnfJ0H9/sG9ovz
CYXgZ2MGk5XMDc3164Q/px46qbDkd7Rg717ZX2v5je1RtU4MfBp5Du/vFtAGIrW7
pwEKRS+QAFKyhbWuD4QnW9wM/1r2TtkW159Hn+d4p0Bn5kCtdmaaTfw7xQWJXqs4
5s9crAbJXROB310yYZ3v1PoZyPKvvBHVJk2sWtJnpZGVUQg1BSoy5Uw8SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDk0FSgE45nW18FJAsFQfONE0q5/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT1RRVktBVGptZGJYd1VrQ3dWQjg0MFRTcm44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFYjznZXB4cHFweGBNOK
hsNt0r9DgXgmATsttG/BPfHUGHmZjktEfrlthxHBos6k/ASIvFWFN2EB1KfuTVls
LO4TB2V8BKW+1Ktim68I8Tz3TN6J6VD8oJnn79OqTMxoJKDhb23McsTCqy2jh3m1
jP2ItGwsTYSiJ5G5CuJT3z6iKfAEEpAxMR5aGPr6R464ey7MdEggf/hsov/Drz/j
JRu8i6SGzQHKn7eHuaj8hz3HyK4kkWDhuHJzBjatLhEtRdLeLAShF183+kKGwfd1
HaBs7FBX90gw9S+wdofcrpaO9XMw/wvuwo8AStPw5V3NIxuBPz1ABHy4xrLl5C01
zKo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:10:18 2025 by rpki-client