Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ol1s8naDpaCaqSFp4VIIw9y53g8.roa
File: Ol1s8naDpaCaqSFp4VIIw9y53g8.roa (raw, json)
Hash identifier: OAB+9YKrJ3Y4pVncYt12SFeIl/rseZ42juKUn2zWEPc=
Subject key identifier: 3A:5D:6C:F2:76:83:A5:A0:9A:A9:21:69:E1:52:08:C3:DC:B9:DE:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018649CE689F06CD3E1DF01A0E980515BA82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ol1s8naDpaCaqSFp4VIIw9y53g8.roa
Signing time: Mon 13 Feb 2023 08:05:09 +0000
ROA not before: Mon 13 Feb 2023 08:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:49cd:d318/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:ce:68:9f:06:cd:3e:1d:f0:1a:0e:98:05:15:ba:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 08:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5d6cf27683a5a09aa92169e15208c3dcb9de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:9a:67:1e:43:91:f0:aa:48:ce:b4:37:40:
67:94:dc:bb:e6:90:8a:fe:24:62:82:d0:51:62:d4:
ad:7d:c9:bd:1c:55:85:fa:3e:35:81:f9:31:a9:b3:
7e:ba:49:33:30:ef:10:82:b9:d4:3c:5c:b0:de:ea:
f1:44:b0:35:1d:e3:33:de:7e:34:9d:dd:0e:bb:0c:
b9:66:f9:b5:f4:d0:0a:1b:58:80:7f:48:49:56:ff:
cd:03:49:86:c4:c8:a3:04:36:f9:03:bd:7b:46:81:
f8:26:5a:ed:a4:d0:1a:fa:33:4c:6a:09:c3:0c:89:
69:ad:42:9d:bd:8e:55:28:16:72:4d:6d:c5:c5:2b:
b4:17:3b:60:be:e8:9e:2a:f7:d0:aa:c1:80:93:51:
0c:13:a6:b4:f7:b4:6b:b9:cb:ee:67:70:bc:a5:ff:
a5:85:04:43:ff:ca:11:b6:bb:51:db:4d:62:92:ac:
eb:2a:c3:eb:88:26:20:22:52:be:fe:62:7c:ec:00:
f7:09:b0:44:9a:e0:7f:71:8f:fd:d8:ad:b7:e3:47:
ed:4b:0a:79:19:6b:0f:05:02:76:81:4e:e8:7b:00:
b7:0e:8c:fd:ed:6f:dd:63:84:9c:f8:6b:1c:b6:da:
9c:10:35:57:60:8b:7d:a8:2a:89:79:ab:ea:41:72:
f3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:6C:F2:76:83:A5:A0:9A:A9:21:69:E1:52:08:C3:DC:B9:DE:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ol1s8naDpaCaqSFp4VIIw9y53g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2e:0a:a2:11:08:b9:10:e0:35:94:1f:97:ae:cd:9c:fd:fe:
31:c7:b0:27:c6:41:50:95:6e:77:ef:11:f8:49:de:47:3c:64:
3b:e0:54:48:64:ec:63:cc:8f:69:ae:b4:e3:f8:45:4a:de:b1:
06:a0:7c:50:62:12:13:8b:52:52:85:67:27:12:6c:b2:f4:70:
fd:b7:c4:95:b1:10:e5:83:b8:55:64:78:44:18:9b:5f:20:45:
0b:7e:bc:75:1a:bc:83:06:2b:10:ee:4d:f7:36:e1:9f:f1:3c:
22:27:33:5e:68:d5:2a:63:7a:d4:ed:f2:f8:e6:ee:35:ec:ce:
35:b8:85:93:c0:c3:b4:f1:d7:02:78:4c:a2:f6:66:b2:ed:68:
b4:76:ef:50:b3:01:35:f0:27:cf:1e:31:e7:f0:e4:8f:1b:f8:
e0:73:2e:b0:ff:28:ae:f3:f2:d4:20:2d:ba:77:21:f3:18:93:
22:14:d4:8f:98:ee:b8:b0:a6:5e:0d:1c:5d:1c:ba:a8:bd:fd:
85:3d:91:66:bb:a2:75:3c:63:90:25:84:59:a3:75:0f:95:ad:
f7:98:91:7e:08:95:f4:b0:0d:70:ca:09:af:36:8c:26:10:ac:
af:53:0d:68:31:fa:32:ec:ad:05:9c:15:bd:77:44:dd:a3:e5:
28:cc:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:13:13 2025 by rpki-client