Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpIx7qYvlIUisKzdG7WH42OvW9A.roa
File: OpIx7qYvlIUisKzdG7WH42OvW9A.roa (raw, json)
Hash identifier: VZbOQGb4JVzv2ccAlzXQxua6MJvp1pcPX7foYZ36YHo=
Subject key identifier: 3A:92:31:EE:A6:2F:94:85:22:B0:AC:DD:1B:B5:87:E3:63:AF:5B:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829F7C55766B20BBAB1D8E87218A25BEF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpIx7qYvlIUisKzdG7WH42OvW9A.roa
Signing time: Mon 15 Aug 2022 03:11:41 +0000
ROA not before: Mon 15 Aug 2022 03:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9f:7c:55:76:6b:20:bb:ab:1d:8e:87:21:8a:25:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 03:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a9231eea62f948522b0acdd1bb587e363af5bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:ac:0c:95:b8:5a:f1:21:1f:9d:42:d9:ef:
d5:3f:5b:b3:83:50:1a:ce:80:7d:d8:61:e2:30:29:
68:b8:63:e3:52:a0:85:49:d8:d9:8b:5f:a8:38:3d:
98:6a:52:7f:3f:90:35:0c:41:3e:d5:85:98:c1:dc:
cb:a4:c2:43:fc:71:37:e3:74:b0:f5:f9:e4:b5:17:
1c:67:4e:f5:76:29:d3:11:3e:24:8e:71:6c:d1:55:
c0:9f:51:5a:9f:19:b2:cb:cc:d5:ef:7b:e8:f1:35:
ff:b4:8c:44:09:e2:af:4c:fd:d0:ba:50:a8:39:fa:
36:6f:66:67:24:5c:61:ea:88:53:51:51:05:2e:d2:
72:e1:c9:77:5a:3f:ad:59:19:02:02:a3:24:59:16:
09:f4:b2:d7:0e:ee:82:a3:1f:6b:a9:69:47:fb:b8:
e9:e8:0b:a7:9f:8e:7d:00:d1:89:5a:bf:9b:59:f9:
bc:d2:f9:c3:99:d8:f1:27:99:4f:f5:24:97:d3:e8:
9d:1d:a6:8d:d0:42:ea:69:58:86:a4:5d:8d:4d:5f:
2a:dd:d3:84:a5:18:0b:11:bd:26:c6:ed:b6:8c:f0:
c7:f8:02:59:7f:45:3e:b8:2b:25:04:e8:96:52:68:
56:58:ce:e2:a6:77:a3:62:55:be:f7:6b:99:fc:36:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:31:EE:A6:2F:94:85:22:B0:AC:DD:1B:B5:87:E3:63:AF:5B:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpIx7qYvlIUisKzdG7WH42OvW9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:75:45:76:f5:db:cc:21:7c:c4:64:af:be:3e:1e:15:80:09:
82:07:b4:2c:bd:50:c5:d6:84:51:28:4f:5d:22:fe:6d:10:ff:
f5:29:72:0c:03:30:f4:d1:34:6f:96:61:a0:7b:cc:a1:e6:61:
f1:99:98:47:43:fb:38:18:d8:be:38:9f:39:80:98:1c:c7:9d:
33:f3:eb:d8:27:a0:52:92:96:b0:02:d9:71:be:26:9d:9f:d1:
25:77:b6:7d:25:f0:44:4c:b6:19:15:5d:91:d5:13:e3:35:75:
b0:67:10:e1:d6:36:48:2a:ce:e3:14:01:1d:47:63:c8:d3:07:
1e:3a:0b:cb:d4:9b:3d:58:28:26:dd:34:fd:19:ce:7b:4b:b6:
ad:88:db:74:e5:fa:a2:fb:3c:37:50:ad:8a:47:36:7d:7c:e1:
19:bb:db:b7:63:91:b4:3d:33:d6:6a:0d:95:01:da:f7:f6:6c:
20:95:93:6d:f8:88:c6:44:1f:a6:7b:6f:3d:de:eb:b0:be:90:
d5:a4:3c:d8:0f:4d:69:c3:bb:d3:8e:e0:07:e6:68:9d:05:a4:
46:ae:c4:b6:73:d3:0d:db:e8:eb:eb:82:25:19:9f:6b:dc:a6:
db:3c:4b:9a:cd:aa:01:94:86:f9:bd:9e:36:8f:87:fa:c3:c9:
9a:62:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:05:53 2025 by rpki-client