Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OZ586jcKb54S4aYfHDByh92FMXM.roa
File: OZ586jcKb54S4aYfHDByh92FMXM.roa (raw, json)
Hash identifier: miTPBQsXadndybPivGh7bt/RzgMd9ryBaFrtgrmu+wA=
Subject key identifier: 39:9E:7C:EA:37:0A:6F:9E:12:E1:A6:1F:1C:30:72:87:DD:85:31:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895593B9F39DAA38217E18AEF965925128
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OZ586jcKb54S4aYfHDByh92FMXM.roa
Signing time: Fri 14 Jul 2023 18:04:52 +0000
ROA not before: Fri 14 Jul 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:5593:2719/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:93:b9:f3:9d:aa:38:21:7e:18:ae:f9:65:92:51:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=399e7cea370a6f9e12e1a61f1c307287dd853173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:0b:1c:cd:cd:e8:2c:44:dd:61:49:00:aa:
00:67:12:5e:0e:9d:bc:8f:ec:2b:93:66:c9:23:e9:
1a:28:d0:a4:3b:7c:f9:78:8d:be:3b:b7:7b:f7:2f:
4d:5a:2a:4d:ff:a8:c7:53:72:e2:47:d1:1b:24:f6:
8b:c0:af:d9:54:cb:01:49:3f:b0:7f:37:52:98:c0:
a8:96:92:8d:d1:81:6b:8e:9b:c5:9c:ff:6f:ba:2c:
f8:7e:2c:64:8a:5e:e1:43:b6:93:77:f3:87:2d:18:
f3:e2:b6:92:b1:02:39:b3:98:45:f5:d4:7c:90:ea:
fc:19:02:28:c9:8d:dc:1d:8e:37:f8:9b:7e:81:d2:
ec:36:c5:59:d4:ac:e9:d5:6f:51:b0:63:7a:fe:57:
9e:de:6b:35:fe:d1:95:18:78:91:25:17:f9:e1:81:
80:0e:ca:08:4a:41:f4:a7:d5:c6:fe:3a:d8:40:4b:
25:e4:ce:00:30:8b:36:7e:a6:24:9f:6d:2a:cb:b8:
30:83:94:62:44:48:4c:90:fe:cd:fe:3e:65:92:fa:
d2:e2:35:0b:0a:7d:7d:76:7d:15:bc:17:07:cc:3e:
5a:23:2c:35:28:76:14:f8:6d:3e:dc:4d:60:48:f6:
7c:90:0f:35:54:32:62:4a:f7:9f:08:3d:ae:b8:e7:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:7C:EA:37:0A:6F:9E:12:E1:A6:1F:1C:30:72:87:DD:85:31:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OZ586jcKb54S4aYfHDByh92FMXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b1:29:db:7b:30:2e:bb:ff:dd:aa:a9:a7:c3:1c:1f:2e:fa:
16:35:9b:34:05:43:0f:07:3e:78:39:20:6a:81:79:57:0e:24:
f3:f8:9b:04:a5:ff:ad:f1:f9:e0:3d:20:e8:57:e8:ff:51:66:
7a:8a:13:0c:52:70:8b:00:0b:42:c8:94:07:e4:8b:c6:21:a9:
34:88:3a:8a:52:09:8b:53:9b:fc:d8:b0:96:6f:f5:6c:17:e5:
e3:f2:0f:e2:9d:af:91:50:46:fc:98:f7:20:b4:fd:6b:4d:8f:
ce:c3:92:2e:82:7a:90:ba:93:3b:56:61:4e:e8:38:90:3d:7f:
31:6c:16:20:fc:67:18:ce:cb:51:09:f4:47:f2:49:e8:f3:d0:
c5:26:e4:13:13:42:c2:bf:70:4f:1f:07:78:0f:7a:91:d3:93:
32:1e:eb:3f:f1:d8:f5:99:f5:00:fe:d8:43:be:2f:92:fc:17:
dc:64:1e:6e:42:78:3a:d0:96:62:a8:f1:6c:cd:d4:63:2d:1a:
8f:86:8a:e5:78:68:61:21:3a:c6:2a:6a:22:cd:87:0a:da:ae:
ca:38:7a:e7:38:d8:24:6e:27:a8:96:1a:dd:d4:ac:90:00:3f:
8d:40:ab:bc:57:dd:5f:04:8e:4d:c5:44:59:c1:d8:e5:74:57:
e6:02:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:53 2025 by rpki-client