Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OkynW5enJSiPD5OKH28gekl_pi0.roa
File: OkynW5enJSiPD5OKH28gekl_pi0.roa (raw, json)
Hash identifier: Z6fvik7v/Lj4/v3hVvH9zvdhDxD/i85i+ewbVwzIE84=
Subject key identifier: 3A:4C:A7:5B:97:A7:25:28:8F:0F:93:8A:1F:6F:20:7A:49:7F:A6:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018958D4E1057863C95FB54D869480023798
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OkynW5enJSiPD5OKH28gekl_pi0.roa
Signing time: Sat 15 Jul 2023 09:14:53 +0000
ROA not before: Sat 15 Jul 2023 09:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:d4:e1:05:78:63:c9:5f:b5:4d:86:94:80:02:37:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 09:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a4ca75b97a725288f0f938a1f6f207a497fa62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:04:6e:16:4d:75:48:7a:4f:0c:6d:0b:50:
da:81:7f:0b:6f:66:0e:68:c6:27:95:25:43:b8:ca:
76:10:fb:07:c4:91:0b:19:f7:a0:29:20:e0:ff:33:
4f:2a:6b:92:d2:e1:15:80:a4:58:ba:40:cf:59:fe:
7d:9e:30:bb:45:32:5f:35:30:65:ab:d9:d1:66:f7:
54:a7:63:25:91:53:1f:4c:70:c3:ad:20:76:81:3f:
10:f2:69:55:a6:7c:d9:87:6b:6a:39:f2:8b:2f:4b:
b8:7a:d2:0f:75:6a:ed:51:9c:5c:b1:b4:50:5a:e9:
01:15:3f:8c:3a:34:aa:35:4d:96:f1:64:f8:56:b2:
5b:26:42:25:b0:00:aa:8f:99:55:4d:7f:ca:7f:fb:
c6:a7:4b:16:67:d1:90:4d:ab:07:82:52:30:5d:9a:
d6:13:fb:5d:06:18:6a:5c:b4:e8:2a:f8:cf:65:cf:
74:92:ce:1a:9f:f3:62:7a:ee:58:26:ef:2d:d4:41:
83:37:c8:dd:61:31:14:66:1c:3d:4b:5e:1f:93:f3:
f8:fa:b7:4e:4f:90:59:5d:14:3f:33:5d:90:28:cc:
88:ee:d0:14:f4:53:82:89:fe:9c:11:5b:49:ad:e2:
80:47:0f:3e:19:8d:c1:8c:c1:bb:6c:7c:a5:03:ce:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:A7:5B:97:A7:25:28:8F:0F:93:8A:1F:6F:20:7A:49:7F:A6:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OkynW5enJSiPD5OKH28gekl_pi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:0d:52:14:de:4c:4b:69:98:f9:6d:10:cc:c0:81:a9:90:c7:
fb:23:d7:1f:56:d6:2e:47:43:a1:44:70:a0:5c:f6:ed:64:f7:
ea:ac:e6:50:df:a4:e6:4e:e0:d9:65:0c:df:aa:a2:1a:2a:92:
85:f7:33:e7:69:71:29:98:66:8e:a4:09:4d:f8:ee:c9:7b:6f:
4b:50:5c:a7:3c:4b:1f:94:14:9d:03:02:07:49:89:25:f4:73:
a6:7f:91:86:77:89:75:25:a4:7a:45:5e:38:ef:0e:1e:c0:06:
69:d8:21:c3:04:fa:5b:45:cc:0a:b4:5b:06:f1:a5:95:d4:57:
d1:81:3f:b4:28:22:eb:9c:76:2e:f7:59:70:de:a8:9e:45:f2:
c2:31:0f:e3:d0:7a:a9:fc:8d:71:2c:2c:b3:8d:e6:d2:6e:9e:
7b:be:29:f8:f9:fb:31:80:bd:4f:4a:f4:93:26:48:f2:27:dc:
b8:d1:74:69:56:87:ad:83:26:3c:be:09:76:3d:d3:66:dc:b3:
23:4a:42:a2:16:cb:31:3c:47:b4:cc:d4:0c:51:d7:fc:6f:bf:
91:95:7a:25:4e:eb:60:6d:7b:42:8d:3b:3d:18:f9:d1:55:de:
bb:6c:d6:1e:a8:a1:53:97:31:fc:77:71:18:d7:7c:e8:5c:dc:
a3:90:8c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:18 2025 by rpki-client