Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OfzMv_qR7JirX4qUdBgVu2j9w0w.roa
File: OfzMv_qR7JirX4qUdBgVu2j9w0w.roa (raw, json)
Hash identifier: /qWIHV5xWlSg1/lE7aRdXo5ud3GKDYbKAfCIxtlcDvU=
Subject key identifier: 39:FC:CC:BF:FA:91:EC:98:AB:5F:8A:94:74:18:15:BB:68:FD:C3:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A295DAD5D6A3C2A1263275BC1EA6E9340
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OfzMv_qR7JirX4qUdBgVu2j9w0w.roa
Signing time: Thu 24 Aug 2023 21:05:19 +0000
ROA not before: Thu 24 Aug 2023 21:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:295c:c57a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:5d:ad:5d:6a:3c:2a:12:63:27:5b:c1:ea:6e:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 21:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39fcccbffa91ec98ab5f8a94741815bb68fdc34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:4f:c4:23:71:07:68:f7:01:ff:05:51:57:
39:1b:a8:ff:7b:bb:da:9b:cd:0a:8a:58:ab:93:3f:
b0:51:40:76:e2:d8:9e:9c:c1:cd:eb:1e:39:2e:65:
39:a1:b4:ef:0a:d6:ba:c5:d1:96:27:7e:a4:0e:63:
1d:0b:d8:9e:5b:8a:bd:5c:b6:2c:03:9a:56:73:e0:
7e:9a:c3:02:a0:42:a1:96:14:e9:39:8d:6b:51:f8:
7d:34:09:dd:b0:11:4e:4a:85:0a:ae:2d:e7:46:43:
01:9f:4f:c9:d9:f6:74:de:1e:9d:da:11:20:f2:64:
23:7b:cd:fb:32:ca:ce:72:85:38:a3:64:c5:1b:17:
23:4b:6f:bf:8d:76:1c:64:f8:79:c9:42:83:26:c9:
45:e8:d2:f4:3c:bf:76:bb:b6:90:9d:71:99:d4:7c:
bd:44:37:39:8c:04:3c:1e:bc:1e:6a:56:0a:cf:f0:
c6:77:2d:f4:5e:2f:b2:e2:7b:44:85:74:8c:44:08:
a1:89:e7:9b:74:12:9c:26:6e:08:d3:79:93:a5:c2:
f4:a4:34:e5:e8:69:84:f6:e0:cf:ac:e9:5f:9e:47:
17:02:fe:69:f4:6a:d3:f6:b2:ad:3c:84:c5:5d:60:
50:82:5d:38:b9:79:ec:3a:25:ad:45:38:80:6e:51:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:CC:BF:FA:91:EC:98:AB:5F:8A:94:74:18:15:BB:68:FD:C3:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OfzMv_qR7JirX4qUdBgVu2j9w0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:2b:4b:0a:04:f7:ef:cb:a1:ff:b8:5b:b5:41:b0:e0:94:cd:
72:27:63:52:6b:84:6d:ef:66:17:00:38:12:14:9a:3c:90:cd:
6f:5d:c0:92:fe:ce:74:3e:14:8a:1e:68:b0:94:8b:69:62:4a:
b2:05:39:8c:08:13:37:e3:32:32:ef:f6:a6:6d:91:16:c6:21:
30:95:f7:57:29:03:d0:b4:9e:62:23:95:80:60:2d:57:22:77:
31:ec:a2:17:f9:d9:9b:93:66:a0:57:a3:83:64:3f:5d:c7:6e:
9f:a3:51:e8:3d:ab:8a:cd:c9:81:28:fa:88:16:43:75:3c:90:
48:24:75:ae:9d:e4:0f:8d:f3:d4:c3:2d:36:94:a6:77:c1:ce:
5b:39:96:2f:75:b9:74:91:b2:08:fb:e6:b2:c2:e2:d5:38:70:
a9:d6:45:39:d2:8c:aa:37:af:85:13:b0:8e:42:16:5e:3c:85:
60:67:e1:d4:d1:04:ed:61:e1:59:94:05:68:5f:ca:f7:69:31:
da:95:77:b6:f6:cc:b7:96:71:eb:05:ac:24:4c:c1:3e:44:ea:
7b:88:c8:64:50:d9:31:e1:6e:02:06:08:af:f4:ac:a9:1e:e0:
67:7f:fa:fe:03:3c:4a:62:b4:61:36:66:e0:a3:05:97:10:95:
35:f6:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:23:23 2025 by rpki-client