Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoElYGyce6d433zace5_D-Zv6JE.roa
File: OoElYGyce6d433zace5_D-Zv6JE.roa (raw, json)
Hash identifier: syjB9XoSpUU2HwpHVdhmC+YcNuWFnjMdGHDqkD1NuTc=
Subject key identifier: 3A:81:25:60:6C:9C:7B:A7:78:DF:7C:DA:71:EE:7F:0F:E6:6F:E8:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FF54A5584021518F39FCBD12416C6240
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoElYGyce6d433zace5_D-Zv6JE.roa
Signing time: Wed 16 Aug 2023 17:11:24 +0000
ROA not before: Wed 16 Aug 2023 17:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ff:54:a5:58:40:21:51:8f:39:fc:bd:12:41:6c:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 17:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a8125606c9c7ba778df7cda71ee7f0fe66fe891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:a1:0f:15:30:f5:bb:fa:9f:f9:e6:2f:be:
db:29:c3:32:91:30:65:35:f3:17:65:a8:29:3c:16:
b5:23:57:8d:88:7e:6e:0b:97:7f:67:55:e5:8e:35:
4a:e6:9f:5d:7c:17:25:b8:8e:d3:5c:15:57:0a:32:
07:2c:7e:93:74:87:a8:76:bd:11:e1:2a:03:c2:30:
a0:66:ef:c2:6c:85:2a:8d:54:85:06:54:18:04:39:
64:46:2c:53:9f:f2:1c:e8:13:14:fe:d1:e6:41:66:
38:9f:48:57:92:80:31:b3:c6:04:ac:df:5a:6a:cb:
42:9d:3a:c8:e1:6e:31:de:bd:21:e2:b6:88:ab:5e:
f4:b9:3b:a3:53:be:cb:cd:bb:3f:7f:f0:e0:55:6f:
ca:97:f1:16:d2:f1:1e:a9:44:25:e0:84:11:20:ec:
08:c5:c5:ca:80:a3:77:d8:af:60:b6:cd:55:92:c4:
90:cc:cf:d2:45:08:f7:b8:9d:60:6a:fd:35:8c:8a:
49:92:c4:5e:ee:de:93:a3:9a:45:e4:b7:81:d3:f3:
30:a7:8b:16:51:44:6c:35:ca:0a:eb:4c:47:6e:99:
5d:84:91:56:63:37:fb:55:f5:60:f2:a3:1a:d9:81:
35:4c:7a:df:d9:97:9a:55:9b:d4:aa:35:4e:7e:95:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:25:60:6C:9C:7B:A7:78:DF:7C:DA:71:EE:7F:0F:E6:6F:E8:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoElYGyce6d433zace5_D-Zv6JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:12:43:88:98:be:9d:27:2e:c8:83:42:1c:83:43:e1:66:fb:
5d:50:d2:6f:8e:36:09:23:13:97:8f:b8:7d:a4:58:ac:b2:b4:
ce:bd:08:e0:17:c5:59:7c:f2:16:f3:01:b7:33:cb:37:64:7f:
25:83:c2:db:65:c8:6d:de:bb:4c:7b:5b:d5:a6:e0:48:d8:6b:
9b:0f:4c:d2:4a:37:3d:c2:c0:8d:aa:2e:da:f2:a8:05:95:3d:
63:e2:2e:17:14:cc:52:d1:9c:db:5f:bb:49:ce:f2:ca:b6:37:
87:9b:2e:81:d6:86:77:19:1b:0b:0b:28:b3:a7:a5:ee:8c:0a:
c3:32:84:4f:8e:32:98:76:11:33:e7:90:a9:2a:29:84:b8:d7:
a7:e8:5f:83:5b:0d:7e:c3:f5:fa:c8:17:9a:9e:2f:78:ef:3d:
6b:ab:8b:ca:9a:84:e0:91:89:21:75:a7:a0:80:62:f9:2f:61:
a4:1d:c8:e1:fb:bb:35:08:40:b4:8d:3f:35:25:05:b7:a8:32:
28:9a:fa:6d:de:bd:3a:ce:a6:38:07:e1:e1:ba:5a:28:1d:59:
ab:34:4b:48:62:b7:53:45:3f:a8:d6:af:f0:0d:ee:8a:55:2d:
8b:80:c6:b7:70:81:03:e3:af:c3:64:6c:26:11:0b:94:86:fc:
9f:6a:08:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:01 2025 by rpki-client