Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OW5SGxro-B6OSQY2DpKJPatZb6U.roa
File: OW5SGxro-B6OSQY2DpKJPatZb6U.roa (raw, json)
Hash identifier: pK6kUxS0Y7JDdC1Lkr+jhSiYSvw3e6k0fmtGY85bWPo=
Subject key identifier: 39:6E:52:1B:1A:E8:F8:1E:8E:49:06:36:0E:92:89:3D:AB:59:6F:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823F5D6BEAF6DA31D4DCE4A060C4E0FA5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OW5SGxro-B6OSQY2DpKJPatZb6U.roa
Signing time: Wed 27 Jul 2022 11:14:23 +0000
ROA not before: Wed 27 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:5d:6b:ea:f6:da:31:d4:dc:e4:a0:60:c4:e0:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=396e521b1ae8f81e8e4906360e92893dab596fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:f5:9c:e3:06:2f:2f:9a:62:06:af:c4:47:
00:cd:bf:db:20:4d:06:4b:ab:8f:b1:8a:7a:40:10:
5d:0f:7c:b6:6f:d1:29:aa:0d:92:f3:cc:97:ea:a4:
d2:a8:10:bf:5d:b0:69:c5:77:64:c6:51:2d:52:fb:
a6:18:12:78:83:0e:b8:87:e9:66:ea:d0:30:0c:38:
0f:03:5e:d4:3e:3b:1d:57:a9:04:4b:fe:db:49:f4:
eb:e8:6a:a5:d9:02:d4:b0:f7:2c:98:f2:e5:27:72:
37:0a:ac:f3:39:c0:99:63:84:5b:fa:fb:bd:38:e2:
30:54:fc:d6:19:5c:5c:49:43:03:77:1e:58:ff:4c:
df:33:d6:a2:76:a5:5d:9e:5b:f3:f4:ee:57:33:07:
15:e6:80:6f:0d:8c:e6:e2:e4:b9:ae:22:be:bd:e8:
80:4e:53:f1:a8:73:2c:a8:dd:44:e9:61:58:29:1c:
4d:9e:43:d6:91:6d:cb:b5:e3:d1:c7:20:93:be:cf:
0a:b4:71:e8:cd:50:5b:39:32:ad:e2:f9:c0:e1:25:
03:de:b4:c3:10:f1:ca:6d:04:99:e1:39:83:d4:ad:
6a:2d:c1:07:a2:93:47:c4:d7:1d:8a:27:ef:07:79:
88:cd:c3:bf:a8:a1:c8:6e:cb:27:ca:75:79:46:3a:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:52:1B:1A:E8:F8:1E:8E:49:06:36:0E:92:89:3D:AB:59:6F:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OW5SGxro-B6OSQY2DpKJPatZb6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:96:72:9a:c2:c9:91:b1:fd:0d:d7:a3:ad:07:7e:b6:c9:a8:
75:3e:05:a3:99:8d:cd:d0:95:9a:ae:41:a9:2e:db:4b:32:de:
52:99:fe:92:3f:77:05:6d:6f:14:af:41:00:3a:ee:c1:9f:00:
ff:7a:1e:ea:fb:55:5e:fd:83:96:33:1f:99:7d:b5:87:5c:03:
57:a0:3d:d2:76:1d:6e:9e:f0:0b:98:43:a7:32:7a:d8:f9:73:
91:4a:36:85:1e:7a:a9:36:75:1f:f7:69:66:c7:1e:e9:18:66:
db:92:25:7f:29:36:9a:91:38:b6:e6:c7:d2:92:a9:28:f6:78:
10:e3:6f:06:5a:5d:95:1f:dc:f1:a0:87:31:ef:d0:d9:c4:5e:
b4:3f:43:31:4c:e4:f3:b9:3b:76:3b:90:14:02:ac:54:08:4e:
a0:6f:66:0f:95:4d:24:44:7e:01:ed:c7:fb:78:43:a2:fc:39:
59:39:b7:07:b5:89:ff:19:28:1e:8a:96:22:c9:50:87:cd:f2:
79:d4:bf:36:98:98:b5:28:5c:86:7c:06:36:58:d3:4a:12:92:
6b:55:79:5d:d9:4c:79:29:e7:44:2d:e2:d1:a7:07:9f:3f:6c:
a2:98:04:27:8a:e9:cc:9f:be:b3:2d:36:d3:45:ee:33:a9:c8:
b9:22:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:07:52 2025 by rpki-client