Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OaHoZyC94DvJmrp-cJA0-UKJdjE.roa
File: OaHoZyC94DvJmrp-cJA0-UKJdjE.roa (raw, json)
Hash identifier: gIUqIIBA/uII/He2CRwlrpTDI6Mq+6xLlIyLpngfy8M=
Subject key identifier: 39:A1:E8:67:20:BD:E0:3B:C9:9A:BA:7E:70:90:34:F9:42:89:76:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78F13C3F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OaHoZyC94DvJmrp-cJA0-UKJdjE.roa
Signing time: Wed 06 Apr 2022 12:09:20 +0000
ROA not before: Wed 06 Apr 2022 12:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029075519 (0x78f13c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 12:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a1e86720bde03bc99aba7e709034f942897631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:5d:49:d3:fd:f3:d5:3d:4d:04:ab:0b:a9:
08:b6:7f:f2:ee:90:57:7d:bd:80:d0:eb:90:6d:b5:
fa:ad:14:59:86:53:97:77:d3:5a:b4:95:83:b8:37:
63:6a:b1:6b:0f:cf:c1:0f:fc:3a:a8:5e:3e:c3:37:
ef:f3:03:38:54:c0:76:b1:15:8f:3d:8a:49:82:36:
7d:73:15:68:79:aa:93:74:28:7a:c7:3f:86:4a:2d:
af:de:38:ba:10:16:ec:8c:01:b3:5d:55:48:71:15:
d2:29:95:44:89:ed:22:b8:4f:5d:90:d3:9a:a9:99:
4c:7c:d3:91:9a:05:59:b9:b7:11:73:c2:f4:18:47:
41:58:2b:22:f9:94:c5:73:79:c2:0e:c2:17:3c:f5:
c8:9d:bc:da:3b:75:38:8e:27:44:bd:7a:33:8c:b2:
0b:92:aa:db:f8:00:e3:32:dd:ca:81:c6:8b:6b:35:
72:16:ec:32:c6:1c:a1:81:99:02:fe:c6:15:bf:5c:
51:4f:ab:b9:8d:10:07:b0:c3:14:44:87:35:48:62:
7e:17:43:df:65:8e:bf:ab:5c:43:6a:96:94:09:27:
be:f4:d0:b4:c9:eb:d7:1b:22:3e:2b:2c:c5:df:a2:
17:9f:2e:44:78:c8:d7:a4:02:b6:0d:77:f1:58:7e:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:E8:67:20:BD:E0:3B:C9:9A:BA:7E:70:90:34:F9:42:89:76:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OaHoZyC94DvJmrp-cJA0-UKJdjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:f8:58:2d:bb:1d:82:76:c6:6b:63:65:49:9b:49:bd:ae:2a:
69:6e:35:f8:88:a9:ee:5d:91:9d:75:b2:dd:b5:8d:ff:81:92:
13:89:eb:fb:c4:34:96:3b:0c:92:29:cb:2f:7f:7f:7d:31:11:
a0:43:3a:fe:16:ac:26:fb:3c:24:f3:28:36:c5:09:72:94:fa:
40:7e:03:c9:e3:db:25:64:15:46:e0:8b:e5:1e:51:56:50:9f:
ab:b6:fc:d7:50:25:95:3c:92:ae:2b:61:81:2a:a9:d1:8b:6f:
e2:42:83:3c:e4:22:db:73:9c:05:b5:6c:cf:e6:09:2b:70:1b:
24:1f:11:65:8e:cb:cb:b4:fd:f9:31:59:e6:56:1b:61:c5:41:
b9:7b:57:61:fc:50:28:33:4c:d6:be:25:a2:74:27:e0:e2:e9:
5b:74:9f:14:be:75:19:9e:a4:df:ed:92:75:cc:67:0f:39:5e:
c9:63:21:c6:29:7d:f8:77:8c:88:b5:e0:9c:28:d6:fd:4d:2b:
d1:d0:31:4f:45:e9:d0:fc:60:a1:5c:96:82:83:00:c5:27:12:
f8:85:c3:68:b7:d8:0f:90:3f:de:07:fd:f0:dc:c2:6f:70:bd:
9a:e2:3f:8c:70:bc:88:89:c0:43:cc:9b:3a:55:81:c2:eb:2a:
63:28:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:13 2025 by rpki-client