Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OVIuIkDkFgUfXHWiwbfIr8Ny3ro.roa
File: OVIuIkDkFgUfXHWiwbfIr8Ny3ro.roa (raw, json)
Hash identifier: hTOn9lKrpv/Hg0/32ZownX1t2RTbQUZUFcc4LpZciek=
Subject key identifier: 39:52:2E:22:40:E4:16:05:1F:5C:75:A2:C1:B7:C8:AF:C3:72:DE:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C60E14E4E211FC26B7942A66B2C2F18E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OVIuIkDkFgUfXHWiwbfIr8Ny3ro.roa
Signing time: Sat 05 Aug 2023 14:15:58 +0000
ROA not before: Sat 05 Aug 2023 14:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:0e:14:e4:e2:11:fc:26:b7:94:2a:66:b2:c2:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 14:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39522e2240e416051f5c75a2c1b7c8afc372deba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:7e:ec:26:9a:f6:43:ed:55:c7:c2:9f:b1:
31:9d:a6:0a:80:28:16:00:6d:77:2a:8e:99:c1:dd:
d7:b6:a5:c5:2c:9a:2c:28:a7:56:b2:46:ab:73:35:
a0:de:6e:92:84:67:3a:60:3c:43:8a:32:ba:25:cf:
22:4b:b4:af:ac:97:03:f2:03:cb:88:ab:f7:5d:62:
25:aa:af:54:69:f8:51:94:26:c2:d7:bc:5e:6d:80:
63:ed:c2:24:c7:c9:67:4f:f2:03:ad:3b:a9:43:05:
74:f7:5a:5d:cb:e7:fb:d6:e6:66:88:1b:5a:f3:21:
66:29:e6:a5:2f:d6:58:0f:b0:ba:27:24:4f:96:b5:
fa:41:fd:1d:bb:f1:c6:28:c6:46:dc:d4:5f:39:7b:
30:53:2d:40:3a:be:b1:27:c2:7a:bc:f4:82:5d:ac:
df:7b:83:42:0a:69:bd:64:79:5a:c2:f6:9a:2d:d0:
09:0e:23:4c:88:0a:60:35:79:cd:1c:70:14:2e:5a:
80:d9:c9:42:21:0e:54:d3:ab:e0:b0:d5:69:64:75:
ff:44:f0:e8:9c:b8:78:7a:bb:56:93:d2:8b:2f:b5:
dc:5d:cf:c3:e3:12:34:44:53:93:51:04:60:d5:d6:
46:b0:04:65:8f:88:c9:f2:15:c7:a5:df:80:e3:7c:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:2E:22:40:E4:16:05:1F:5C:75:A2:C1:B7:C8:AF:C3:72:DE:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OVIuIkDkFgUfXHWiwbfIr8Ny3ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:d2:4b:46:ac:9b:e9:76:fe:85:58:9b:fc:be:fa:bc:d4:3d:
06:f8:d4:e2:04:af:96:46:a3:75:10:ac:84:46:65:d7:6b:dd:
8d:81:11:99:e8:c4:f0:e7:74:c9:66:79:56:b9:d9:3e:be:56:
9d:47:43:1c:da:63:e4:bd:ee:f2:e8:4e:94:8a:3a:4b:8e:44:
34:2e:ec:49:73:50:6a:ca:a8:a9:ef:ef:2e:1d:d1:a5:46:77:
8a:ad:a9:7d:6f:23:62:60:55:6d:18:62:1b:12:f7:b3:72:2b:
46:31:1f:1c:e6:44:72:e8:17:90:e6:45:c2:be:bf:48:7f:14:
4b:f4:ee:7a:4e:8a:43:d8:54:8e:59:2b:37:47:fe:8d:ef:ef:
92:07:46:fa:ca:3e:1d:df:c3:0e:b2:2a:92:7f:0c:a3:3c:6a:
40:fe:e5:69:d3:1c:aa:5f:0e:8c:ef:04:7f:45:38:44:8d:4b:
56:94:81:40:95:04:d5:2a:f0:8e:8f:40:b7:6e:43:61:ea:5d:
75:37:c0:69:14:2a:40:3d:93:9c:fc:ba:9d:ba:5c:01:2a:b8:
fc:d3:84:fc:0d:e0:86:57:10:1a:e2:fb:53:62:7f:0f:ce:41:
58:3a:a2:8b:8f:c2:f1:c1:43:6f:6e:26:27:92:93:3d:ff:36:
21:54:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:48 2025 by rpki-client