Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh-TriERPSLyskRUmMUOWLxWXas.roa
File: Oh-TriERPSLyskRUmMUOWLxWXas.roa (raw, json)
Hash identifier: VGCP+4KPQRGyd37AS0jOWmHZc6imczTor2y10yip+5g=
Subject key identifier: 3A:1F:93:AE:21:11:3D:22:F2:B2:44:54:98:C5:0E:58:BC:56:5D:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018309E4A3E4F6B8E50D5213AF1F8F3F1B90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh-TriERPSLyskRUmMUOWLxWXas.roa
Signing time: Sun 04 Sep 2022 19:05:22 +0000
ROA not before: Sun 04 Sep 2022 19:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:9e3:e898/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:09:e4:a3:e4:f6:b8:e5:0d:52:13:af:1f:8f:3f:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 4 19:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a1f93ae21113d22f2b2445498c50e58bc565dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:86:11:f3:2f:62:8b:ce:7a:ba:bd:cc:50:
57:e3:a8:b2:b0:8e:7b:94:0a:db:9b:9b:2b:e9:ac:
d2:ab:02:c6:b1:2d:c6:ac:e7:4a:eb:9f:da:b1:ed:
5f:80:93:b7:72:84:c8:bd:bc:cf:ce:d9:78:c6:ca:
4b:5d:1d:a5:9e:19:be:4f:f5:87:f4:9c:4c:e3:a3:
91:1d:67:74:da:65:82:86:3d:6c:ca:53:31:a3:82:
2f:e3:72:49:c7:54:7f:79:ae:dd:9c:ca:ae:e0:dc:
98:b7:90:3f:6d:a6:89:da:c6:53:2e:26:ac:42:7a:
8f:1d:f4:e7:fb:19:e4:e6:00:79:e6:92:d9:21:78:
c6:ec:dc:84:e6:17:4d:09:e2:4e:97:79:92:80:3b:
be:15:3e:54:59:86:43:65:34:7f:e5:8f:8b:b4:cc:
9b:c9:e6:dc:6b:df:be:99:ec:35:97:d4:04:42:5a:
1b:57:4d:57:6e:da:0d:01:5d:68:18:10:e1:58:e9:
25:7e:cc:9a:f7:d0:32:8e:77:3c:00:79:d6:13:69:
97:7c:a4:46:40:e2:25:50:92:6e:d3:a1:56:e2:16:
36:3d:b9:7c:82:12:61:37:2b:75:f5:ac:c8:1b:0a:
96:01:83:03:ee:7e:f5:23:48:19:3e:a0:8d:ab:e7:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:93:AE:21:11:3D:22:F2:B2:44:54:98:C5:0E:58:BC:56:5D:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Oh-TriERPSLyskRUmMUOWLxWXas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:86:32:a0:78:94:d6:1f:37:6a:46:ec:af:c1:d0:80:b9:bd:
79:90:8a:91:b8:50:98:08:a3:64:a7:a6:67:47:38:f8:ae:b4:
d0:82:a5:ef:06:fb:66:d4:e5:70:c2:bc:48:05:41:3c:a1:82:
29:44:d8:3a:99:36:30:64:bf:55:d7:95:5b:1b:80:94:33:a7:
9f:17:5c:48:b2:9c:97:a8:98:ae:2a:be:9a:6a:33:61:53:bc:
9d:89:93:58:d0:8a:c3:30:12:62:ce:2d:18:26:ca:87:7d:e9:
5c:37:8f:8b:b9:28:4d:7f:a8:9c:85:c7:dc:d9:85:3a:5e:f3:
b7:86:db:4b:1b:5e:1f:57:b4:14:e0:00:d3:d5:14:2a:26:1b:
9c:cd:6e:3d:96:ec:dc:cc:d6:20:f0:c9:01:8f:84:1d:bb:19:
96:dc:6e:a5:e4:74:99:51:57:d6:a0:75:35:63:19:60:43:62:
20:4f:6b:bf:c5:4b:41:3e:6c:8d:c8:aa:28:09:eb:ec:62:90:
54:3c:ed:e2:72:da:51:3b:65:e9:e1:c9:87:50:40:8e:9e:76:
8f:30:8a:2e:fe:fa:e2:3d:59:a7:d1:65:01:f7:b0:0a:a0:20:
39:db:eb:a9:30:c9:d3:8a:f5:a4:62:e9:96:40:60:d3:e1:60:
2b:19:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:12:03 2025 by rpki-client