Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWtqPWZTXI4TKy4aGyiIktgHztw.roa
File: OWtqPWZTXI4TKy4aGyiIktgHztw.roa (raw, json)
Hash identifier: xH083gc+LUlbH3YvuHIALSAyRsxLROxGKyoLQ8hJoGE=
Subject key identifier: 39:6B:6A:3D:66:53:5C:8E:13:2B:2E:1A:1B:28:88:92:D8:07:CE:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183633320F51050436B773AF96D09DEBE12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWtqPWZTXI4TKy4aGyiIktgHztw.roa
Signing time: Thu 22 Sep 2022 03:17:18 +0000
ROA not before: Thu 22 Sep 2022 03:17:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:63:33:20:f5:10:50:43:6b:77:3a:f9:6d:09:de:be:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 22 03:17:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=396b6a3d66535c8e132b2e1a1b288892d807cedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:38:6b:ed:3a:05:2d:2f:35:7a:54:e0:3e:
55:b7:94:b4:56:87:c1:1e:35:fa:a5:0d:d5:a8:6d:
ae:59:4b:7c:81:b1:f3:38:73:ef:0b:e7:6e:c1:4f:
f2:d5:6c:49:43:c0:e4:5c:f3:5b:a8:03:21:a2:47:
0e:ae:c2:bd:f5:19:a6:0b:db:bb:6e:47:b8:4d:30:
d6:57:40:95:96:1a:04:ba:5a:5d:dd:46:48:8b:c0:
70:fc:b5:c3:a5:d1:fa:71:9e:f6:8d:88:0c:23:f6:
dc:f4:82:f7:d9:b2:ac:90:80:86:68:d5:c8:3d:7a:
9d:1e:85:92:08:25:cd:78:91:9e:ae:65:66:b6:17:
f5:86:a3:de:db:e3:53:54:37:a9:96:08:b2:81:2f:
ab:02:0b:6d:48:de:96:83:a1:c8:44:55:86:ca:f7:
6f:2f:7b:e0:fc:ce:bf:f7:ac:25:6c:24:11:d2:1f:
33:2c:30:3c:31:7d:56:f5:f8:36:eb:ca:8b:c8:8a:
02:ab:48:f7:07:18:d8:81:66:57:72:e2:06:25:c1:
97:cc:8d:d1:7d:e8:51:db:78:87:21:80:3a:af:a8:
0f:fd:4c:52:5c:4a:18:68:a8:a5:86:dc:9a:f8:b7:
83:49:13:eb:0e:a2:00:e1:71:94:90:50:04:8a:b6:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:6A:3D:66:53:5C:8E:13:2B:2E:1A:1B:28:88:92:D8:07:CE:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OWtqPWZTXI4TKy4aGyiIktgHztw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:6e:90:84:2f:67:c9:3a:76:6c:b7:8f:cb:9d:bf:9f:68:27:
79:e0:03:4c:79:5d:08:a9:00:4b:38:65:41:c5:d5:8c:ef:9c:
cd:98:06:a6:7a:19:a2:f5:e4:52:7d:be:8f:88:8d:eb:71:94:
87:55:5c:1f:75:a3:6a:64:a3:c2:15:81:fb:75:f8:a6:58:8c:
9d:1e:7f:85:e1:28:61:d3:50:68:7d:b4:bc:6b:52:c1:e7:b0:
25:94:68:82:57:eb:fd:dc:b7:0b:10:dc:e6:24:46:51:d2:48:
2f:a6:35:fe:04:98:36:63:ee:79:1e:25:4f:9b:10:c3:bd:d6:
69:a6:61:3e:2f:ec:f5:8d:85:81:f6:af:5e:6d:0b:f8:59:d5:
09:74:60:90:48:d2:53:0f:46:b9:c9:61:fb:0d:fe:15:5c:55:
c7:88:3f:29:4a:69:08:dd:15:87:dd:4f:29:de:05:dc:36:bc:
1d:b7:93:8a:79:c1:08:2c:a7:80:4e:c3:e0:5c:04:c0:28:a6:
4c:67:ae:b3:80:c2:fd:ef:2e:a9:ba:95:1f:b2:bd:ce:21:0c:
29:9e:85:84:c4:53:6d:31:de:37:74:31:57:0b:4b:2a:7f:ae:
18:e2:1f:19:f4:7e:f2:ca:bb:81:6c:ff:bb:e9:4f:cb:92:3d:
43:16:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:37:16 2025 by rpki-client