Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oeg5UQYlvU1nNu8P-leOxZa5ecE.roa
File: Oeg5UQYlvU1nNu8P-leOxZa5ecE.roa (raw, json)
Hash identifier: iIeeE/dIxOxIWOMZrvwJKz+OghFWvORLwEZrrhe06og=
Subject key identifier: 39:E8:39:51:06:25:BD:4D:67:36:EF:0F:FA:57:8E:C5:96:B9:79:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851E45E46EAD82A42330CB1048DCFE3FCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oeg5UQYlvU1nNu8P-leOxZa5ecE.roa
Signing time: Sat 17 Dec 2022 04:09:34 +0000
ROA not before: Sat 17 Dec 2022 04:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1e:45:e4:6e:ad:82:a4:23:30:cb:10:48:dc:fe:3f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 04:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39e839510625bd4d6736ef0ffa578ec596b979c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:61:e3:20:8b:19:ac:e5:30:2b:e0:98:43:
cc:cb:a4:21:24:4a:55:4e:a5:8d:05:18:3e:72:4c:
da:27:83:bd:73:5d:9b:77:0f:e7:5c:0e:e8:7b:e5:
d0:0c:fc:88:97:f3:f2:68:df:74:2c:5c:d4:53:9a:
3d:7e:85:c5:19:e6:69:19:55:6b:60:ed:c8:12:94:
1a:9d:19:5f:5e:52:d5:a8:0f:91:f6:a3:30:39:c9:
97:d4:90:d1:b3:0c:72:d7:ef:02:00:05:fe:43:4d:
48:af:7f:dc:47:16:19:c0:e1:92:ef:e8:52:1d:cf:
66:2e:39:3e:ee:98:ac:25:28:be:94:cb:e2:31:c5:
70:b0:79:7e:06:10:81:8d:47:7e:90:4c:c2:45:7c:
23:fc:c0:39:50:25:62:de:68:20:04:67:d9:0b:01:
91:89:38:6f:68:71:aa:3c:ff:ff:0c:21:aa:be:dc:
fe:91:8a:21:b2:fa:c7:43:ff:db:13:e2:a0:65:11:
26:fe:16:30:0a:b0:2f:83:93:0c:29:87:9c:34:91:
b1:03:6b:4c:d4:8e:1e:58:b0:84:f1:5b:57:a8:15:
b9:74:58:73:ed:d5:29:4f:f9:4b:17:3a:f4:1a:48:
0b:5a:1a:98:ba:c8:1b:b0:9d:ee:99:7f:d6:aa:bc:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:39:51:06:25:BD:4D:67:36:EF:0F:FA:57:8E:C5:96:B9:79:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oeg5UQYlvU1nNu8P-leOxZa5ecE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:2f:72:b3:31:73:46:0a:e3:7c:b2:a0:8d:ca:3d:ad:32:80:
54:92:ce:1f:cd:48:09:7e:c0:e8:f8:9e:7a:1e:15:f4:9d:c8:
6d:d9:d2:38:fc:6d:fc:92:da:a2:f4:a3:1b:f1:c8:51:8c:16:
e7:3f:94:cc:c8:d8:46:93:af:26:84:f5:07:0a:ea:6b:66:69:
1c:0a:3e:0e:3a:f0:d2:c9:d1:d1:06:11:8e:69:29:a7:65:4f:
98:1a:c6:0d:0c:99:0e:70:7c:9e:07:6c:59:26:e7:73:cb:06:
c1:c9:8e:4c:ab:2a:46:79:f1:34:32:dc:16:8b:93:ae:5a:dd:
d9:d5:fd:89:68:24:ec:e4:88:1c:e0:cd:8f:ca:80:a9:2d:3b:
a6:29:5f:11:3f:32:98:c5:6d:cc:65:bb:af:b6:1a:08:3f:eb:
f0:ee:e6:a8:61:a5:19:4a:f8:5e:58:d6:a1:00:2b:bc:9d:dd:
d0:59:19:0d:6f:4b:7f:49:6e:3e:e6:08:29:87:76:f2:d7:d5:
eb:13:23:97:7c:7c:99:32:95:6a:11:4f:b7:24:9b:72:a9:3c:
16:51:ec:60:17:e4:9b:c7:08:e8:21:6e:4d:d2:06:61:5b:25:
52:72:d5:2c:11:f2:ea:ce:ad:f7:84:dd:2f:94:d3:d4:0d:9b:
9e:96:d4:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUeReRurYKkIzDLEEjc/j/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MDQwOTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWU4Mzk1MTA2MjViZDRkNjczNmVmMGZmYTU3OGVjNTk2Yjk3OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJh4yCLGazlMCvgmEPMy6QhJEpV
TqWNBRg+ckzaJ4O9c12bdw/nXA7oe+XQDPyIl/PyaN90LFzUU5o9foXFGeZpGVVr
YO3IEpQanRlfXlLVqA+R9qMwOcmX1JDRswxy1+8CAAX+Q01Ir3/cRxYZwOGS7+hS
Hc9mLjk+7pisJSi+lMviMcVwsHl+BhCBjUd+kEzCRXwj/MA5UCVi3mggBGfZCwGR
iThvaHGqPP//DCGqvtz+kYohsvrHQ//bE+KgZREm/hYwCrAvg5MMKYecNJGxA2tM
1I4eWLCE8VtXqBW5dFhz7dUpT/lLFzr0GkgLWhqYusgbsJ3umX/WqrzW6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDnoOVEGJb1NZzbvD/pXjsWWuXnBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT2VnNVVRWWx2VTFuTnU4UC1sZU94WmE1ZWNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC8vcrMxc0YK43yyoI3K
Pa0ygFSSzh/NSAl+wOj4nnoeFfSdyG3Z0jj8bfyS2qL0oxvxyFGMFuc/lMzI2EaT
ryaE9QcK6mtmaRwKPg468NLJ0dEGEY5pKadlT5gaxg0MmQ5wfJ4HbFkm53PLBsHJ
jkyrKkZ58TQy3BaLk65a3dnV/YloJOzkiBzgzY/KgKktO6YpXxE/MpjFbcxlu6+2
Ggg/6/Du5qhhpRlK+F5Y1qEAK7yd3dBZGQ1vS39Jbj7mCCmHdvLX1esTI5d8fJky
lWoRT7ckm3KpPBZR7GAX5JvHCOghbk3SBmFbJVJy1SwR8urOrfeE3S+U09QNm56W
1I4=
-----END CERTIFICATE-----
Generated at Fri May 2 20:30:54 2025 by rpki-client