Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoOiX6s4xZfUvarUmjlgMVrUkcE.roa
File: OoOiX6s4xZfUvarUmjlgMVrUkcE.roa (raw, json)
Hash identifier: y9/4TksIor2t3ywNNajnfYNbX8aB+swtmPvDaNDVGrk=
Subject key identifier: 3A:83:A2:5F:AB:38:C5:97:D4:BD:AA:D4:9A:39:60:31:5A:D4:91:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182986797693DD619F65F1B866631A0D417
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoOiX6s4xZfUvarUmjlgMVrUkcE.roa
Signing time: Sat 13 Aug 2022 18:11:41 +0000
ROA not before: Sat 13 Aug 2022 18:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:98:67:97:69:3d:d6:19:f6:5f:1b:86:66:31:a0:d4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 18:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a83a25fab38c597d4bdaad49a3960315ad491c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:46:ff:bd:d4:84:55:0f:68:aa:64:53:0a:
39:66:b9:8e:88:fe:a8:59:5c:0f:25:c2:a1:f5:34:
0d:fa:90:a2:25:f0:26:85:e5:ce:ab:c6:13:ca:a6:
81:0b:b3:b5:42:b9:f8:cd:3b:0d:52:d1:74:06:7d:
3a:5a:96:63:30:c6:53:2a:33:72:39:22:b7:95:5b:
da:d4:84:a5:68:8d:90:09:0f:c9:97:a8:93:ec:87:
fc:53:cc:8e:cd:bb:e5:f6:dd:9c:e8:5b:32:f0:f3:
ec:b0:f2:78:a3:32:12:59:67:fd:b8:a8:1a:68:2c:
53:0a:62:96:2b:4c:26:e0:a7:51:13:e9:33:3a:b0:
52:38:60:17:7e:25:9d:30:c2:55:e9:5b:e1:b4:25:
92:a3:63:50:f9:c6:6a:16:4c:07:22:0d:12:9c:05:
9a:fd:79:22:61:f6:e1:5c:d8:8e:a2:c7:d3:d1:23:
ac:73:a0:b5:1f:b0:05:54:df:93:70:1f:31:59:19:
6f:7d:5a:27:16:e1:9e:12:79:2c:8a:7f:f0:37:49:
3d:f8:e0:d1:be:ab:18:eb:c7:f1:f9:1c:dd:75:80:
a3:21:52:9c:ee:f7:d3:95:81:48:ef:30:92:fb:be:
7e:3c:d0:f9:03:eb:12:98:ae:30:82:16:67:41:24:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:A2:5F:AB:38:C5:97:D4:BD:AA:D4:9A:39:60:31:5A:D4:91:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OoOiX6s4xZfUvarUmjlgMVrUkcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:61:36:59:3e:c2:04:77:b2:72:0d:a3:0f:12:50:9c:1b:21:
ef:1c:75:48:29:4b:ea:cb:d1:9e:92:51:2c:f2:b8:24:37:e3:
62:28:3f:79:3c:40:1f:96:20:3b:04:d1:12:23:17:24:a2:54:
4c:cf:d3:33:8e:77:b0:91:0b:06:6a:90:a0:96:0e:f0:f9:83:
20:41:a4:8b:74:e2:56:af:aa:74:fd:2e:55:53:27:de:18:82:
08:6e:d8:58:8c:fd:53:24:9c:d3:09:d5:98:d5:66:b2:0f:51:
01:9b:d5:0d:35:6e:91:c6:12:e0:2f:a2:56:a5:03:09:24:55:
33:7f:af:51:7b:6f:10:6f:70:e8:19:17:b7:c2:ca:c8:dd:7d:
5a:7f:db:0c:4b:ea:d5:32:32:fa:61:c8:1e:49:e0:25:96:23:
a8:1a:30:bb:d6:93:c8:81:1c:4f:6d:20:f3:40:45:55:23:ce:
12:b3:51:fc:74:ab:89:5a:f1:b8:b9:84:c4:f2:af:75:61:38:
49:bb:09:de:f9:e9:0c:79:89:68:82:a7:3b:1e:c9:83:ae:f0:
fd:70:e9:7c:9b:5b:c2:f6:d5:ad:c9:49:34:7e:d2:cf:4f:99:
ef:48:e0:87:6f:64:cc:af:7d:bb:73:af:14:52:df:db:03:06:
6b:f0:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:32:55 2025 by rpki-client