Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcjRh0jf6xuSfuSkFGYf_kWHV5E.roa
File: OcjRh0jf6xuSfuSkFGYf_kWHV5E.roa (raw, json)
Hash identifier: j7UdyMnZCnwA7I4+izo0Qsh0MlaVQFzPbZuVXUdhzlA=
Subject key identifier: 39:C8:D1:87:48:DF:EB:1B:92:7E:E4:A4:14:66:1F:FE:45:87:57:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6826388F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcjRh0jf6xuSfuSkFGYf_kWHV5E.roa
Signing time: Sat 05 Feb 2022 15:04:23 +0000
ROA not before: Sat 05 Feb 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:ca6a:2eda/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747335311 (0x6826388f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39c8d18748dfeb1b927ee4a414661ffe45875791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:e7:60:dc:d4:0d:60:67:6d:e1:58:82:49:
14:2b:e6:65:21:03:f1:95:2b:10:07:1a:9e:d1:25:
91:83:44:4e:d1:0f:c9:e7:d7:41:1f:54:63:2c:cc:
91:87:09:26:75:9d:38:61:1e:4f:36:6c:d0:11:68:
33:54:53:e1:28:f5:57:d8:05:b8:25:df:7b:e8:c8:
dd:7a:cf:82:5a:2d:45:bf:73:f2:7a:8b:4c:f5:63:
2b:e2:3b:14:14:1c:2c:c9:cb:a1:cd:fd:fa:4c:5d:
c5:a8:af:39:b5:86:a1:78:ed:93:cb:22:2d:5d:3c:
0c:b8:56:7c:93:92:c1:25:6b:cb:8a:cb:08:3b:13:
d0:0c:57:40:8b:af:4f:e2:7b:dd:68:e3:58:1e:81:
0a:ed:a3:d7:c2:2e:e3:13:1d:98:70:27:64:b8:26:
12:f8:44:1e:bb:d1:e8:fa:1a:1b:74:7d:dd:1f:45:
97:d5:ab:4f:79:b6:c7:4a:95:f8:52:79:61:08:f4:
26:f6:b6:d0:00:b7:66:fa:b1:a2:41:04:ec:c7:b5:
b9:dd:77:01:cd:1f:12:4b:22:26:e4:26:b3:06:52:
43:56:3b:94:a6:5c:0f:fc:51:6b:5f:7a:85:b8:e4:
ff:a7:6b:88:41:04:d6:db:66:d1:1b:4b:28:5f:9a:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:D1:87:48:DF:EB:1B:92:7E:E4:A4:14:66:1F:FE:45:87:57:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcjRh0jf6xuSfuSkFGYf_kWHV5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:75:63:20:e0:b1:cf:dd:42:31:e2:d9:61:25:4b:40:2c:fb:
8c:f4:96:8d:52:9c:3b:ac:95:96:1c:75:01:0f:5e:f6:37:7c:
db:3f:7b:02:ff:39:9c:01:6b:5a:84:aa:2a:34:6a:ec:2f:58:
0a:ca:eb:22:01:9a:20:dc:62:59:c7:81:88:28:e7:eb:9b:8f:
b6:34:e9:8e:bb:6a:2b:c0:83:5c:32:81:cb:28:89:2c:02:d7:
aa:2d:15:b4:52:79:e9:27:c0:e4:e1:6b:8f:e5:bd:8b:9b:fe:
49:5b:b6:54:8e:e4:15:43:8b:91:18:8b:da:b4:01:e0:32:e6:
a8:20:ab:5c:dd:fe:b2:7b:bf:b4:13:c0:7e:f1:4d:aa:6e:46:
7c:2e:d7:13:4a:ce:9a:f8:6a:12:83:cf:96:d5:d9:02:fe:d2:
fb:03:d2:e4:56:d1:1e:75:75:aa:39:de:54:36:f7:7e:9f:9d:
83:a0:0d:fd:bc:c1:e0:6f:7f:2e:76:01:90:ad:2f:1d:ab:cb:
d7:5b:4a:de:00:17:1e:a4:f7:b8:42:2d:e3:2a:29:0a:e7:34:
e5:68:14:7d:8e:6e:d3:21:cb:19:ea:a9:6b:ab:9d:15:e0:35:
bb:99:cb:fe:d7:d5:20:93:c7:d0:19:91:37:cf:77:62:5d:66:
16:ce:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:02:04 2025 by rpki-client