Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OgzbgclEeJfv0b9uTXzUlgPBtVY.roa
File: OgzbgclEeJfv0b9uTXzUlgPBtVY.roa (raw, json)
Hash identifier: rqUb9X5AEAMpwGs5WH0I9AP+FvvutAuQcJMl6H7v+Sc=
Subject key identifier: 3A:0C:DB:81:C9:44:78:97:EF:D1:BF:6E:4D:7C:D4:96:03:C1:B5:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018665827C3696D3094924ED23E09CFC30D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OgzbgclEeJfv0b9uTXzUlgPBtVY.roa
Signing time: Sat 18 Feb 2023 17:11:35 +0000
ROA not before: Sat 18 Feb 2023 17:11:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:82:7c:36:96:d3:09:49:24:ed:23:e0:9c:fc:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 17:11:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0cdb81c9447897efd1bf6e4d7cd49603c1b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:63:ee:ff:78:b3:b4:98:f7:bc:29:d8:ed:
11:7c:32:9a:1f:a0:5c:14:ff:6a:3b:f8:c7:2e:a3:
7d:c8:d0:1c:3c:da:d9:35:6d:ed:6b:0d:f5:e4:7a:
13:c0:33:05:07:5c:d6:9b:f3:8a:ec:a7:21:8b:35:
60:70:9e:55:d5:e6:24:a1:6c:e5:16:cc:3d:03:c5:
f7:89:8d:28:d1:88:03:f4:47:af:38:30:83:ac:b1:
c0:2d:94:45:95:bd:29:3a:c7:71:ff:ae:0f:8b:fb:
a2:a7:2b:a5:5c:c5:a5:7d:64:d9:57:51:67:5d:29:
60:09:2f:54:10:7d:32:81:43:74:87:e4:70:ba:d3:
cb:47:49:ed:4c:29:b6:ca:7b:ee:16:e1:20:01:6b:
24:4b:a1:86:07:5c:73:d3:a5:36:49:7d:2c:97:c2:
b5:fb:5d:63:aa:01:c1:ce:e0:f2:db:25:f7:d0:45:
fc:bf:57:66:ab:40:33:40:d1:24:97:7f:55:db:ad:
3e:ac:cf:89:3f:ad:f1:b9:4e:13:d4:af:4e:7c:59:
66:a5:e1:2b:e9:2a:1a:d2:ea:48:39:11:b4:d6:00:
a0:99:db:5e:2f:83:85:c0:32:25:24:2f:4b:4c:dc:
41:75:f7:70:4a:9f:38:a9:14:13:1b:d7:8e:b0:1e:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:DB:81:C9:44:78:97:EF:D1:BF:6E:4D:7C:D4:96:03:C1:B5:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OgzbgclEeJfv0b9uTXzUlgPBtVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:53:a9:1e:49:c1:b6:d3:43:d5:f1:da:a5:85:2e:d2:67:19:
f8:64:0f:e4:2e:4a:32:3b:ff:4c:06:26:ea:0a:97:d0:ab:02:
4c:2f:d1:66:c6:79:c0:04:c7:57:db:98:32:3d:9b:93:4d:ee:
41:3c:65:84:65:bd:4e:9e:8c:2c:40:59:8f:08:7c:eb:81:6d:
e6:59:aa:7b:ed:b4:ad:e0:1d:27:a1:b9:e3:2b:1a:52:ec:3d:
e1:7e:37:75:3b:fa:f9:d7:3f:80:b7:fc:54:97:92:cf:b4:7a:
7b:5d:23:dc:d0:b2:27:ca:26:6d:c5:2a:23:a4:93:74:91:c3:
a1:9a:0e:2e:63:af:3b:b5:12:71:a5:35:23:36:4e:b1:83:f1:
47:ba:15:34:a8:83:60:a5:3b:a7:d8:9c:97:fe:0f:04:01:94:
c0:b4:7e:80:b9:4c:ea:ab:c4:82:22:1c:c6:10:d3:66:9c:4f:
ff:5b:cc:e0:57:87:bf:09:8f:49:70:76:6e:81:ac:9a:46:51:
d9:bf:75:9f:c0:2f:65:11:d0:96:7c:09:4d:1a:23:db:f8:1b:
d3:96:02:ba:7a:a0:2b:0a:5b:b5:f9:8f:37:70:ee:5c:24:09:
42:47:07:9e:4d:fc:85:b1:e4:8e:e5:82:d5:59:91:f9:54:ad:
94:6c:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:02:45 2025 by rpki-client