Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpnTnKfBryLjEVU6CQDoW-szDsI.roa
File: OpnTnKfBryLjEVU6CQDoW-szDsI.roa (raw, json)
Hash identifier: Hwjpg6Lzt51KFYJL3KXjkfK94TEFSH2LkikcObF0Duc=
Subject key identifier: 3A:99:D3:9C:A7:C1:AF:22:E3:11:55:3A:09:00:E8:5B:EB:33:0E:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CB5B25A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpnTnKfBryLjEVU6CQDoW-szDsI.roa
Signing time: Tue 19 Apr 2022 15:11:40 +0000
ROA not before: Tue 19 Apr 2022 15:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092282458 (0x7cb5b25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 15:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a99d39ca7c1af22e311553a0900e85beb330ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:4a:d9:8d:9d:32:4e:6b:94:4e:70:d4:45:
0d:9e:1c:c6:9d:d8:5b:b6:84:57:57:a7:5f:63:1f:
8a:59:be:6c:9d:f5:62:06:f5:65:bc:ae:b1:c7:73:
79:16:6b:1d:f6:f2:21:7e:c7:58:2f:37:b3:32:58:
21:3f:d1:54:5d:d8:1d:9b:3d:0a:28:75:16:48:94:
20:25:83:9a:7f:49:e9:07:5e:ac:87:56:ad:c0:35:
04:2a:70:b1:09:5f:7e:fd:f7:9b:06:65:22:4a:c9:
dc:5b:06:92:ed:3b:07:4e:cc:ec:f8:06:fe:0c:62:
4b:63:62:f6:a1:0e:12:40:f7:a7:ad:49:aa:13:ba:
53:c8:0e:63:99:a1:61:d0:b5:d5:50:b1:35:9c:59:
42:50:f1:aa:49:b1:f8:c3:59:14:18:5e:d8:6d:d3:
a0:42:2d:4a:43:26:6b:5b:fe:c2:57:8d:2c:19:f9:
8b:0e:31:66:fb:f9:cd:ac:7d:b9:54:87:45:59:20:
0d:6b:64:36:70:d6:d1:86:07:4c:d1:79:eb:3a:6e:
c1:38:c6:5f:ad:79:73:24:6c:8c:21:fc:ba:41:2e:
64:73:18:30:ff:5c:1c:f7:36:7f:c2:65:fb:b6:08:
fe:ed:dc:cc:25:78:9a:63:2d:36:d9:b8:83:9b:2f:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:D3:9C:A7:C1:AF:22:E3:11:55:3A:09:00:E8:5B:EB:33:0E:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OpnTnKfBryLjEVU6CQDoW-szDsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:9f:34:b7:ad:67:04:8a:0a:52:07:98:ce:36:7b:b8:2a:a8:
b3:3d:47:47:78:cf:9f:f7:40:ef:c2:fe:4a:c1:99:9a:08:60:
0f:f9:9e:f2:19:f5:57:8b:9c:bb:f2:77:6c:2b:a9:b7:a4:a6:
75:b7:a7:2e:dc:76:2a:33:dd:31:f9:d7:7c:f0:5c:00:c5:ea:
b9:c3:63:8e:3f:e4:17:3c:69:e6:45:68:5a:3d:42:d8:32:e2:
73:af:d0:a2:31:ef:f7:34:5d:28:d3:15:7a:ae:a4:68:89:49:
4d:01:55:f5:27:f8:c4:f4:b4:75:f1:e3:83:16:91:2c:c5:81:
e7:e6:20:2d:35:23:9e:03:11:50:d4:fd:2c:a1:0f:51:3b:f8:
1f:19:66:fa:a7:cd:60:ea:94:19:15:e5:a3:51:0b:a9:d0:53:
b7:da:af:b2:ce:0a:15:19:e5:24:55:84:e8:47:14:17:14:c1:
07:c8:0a:87:b0:32:3e:c9:d0:26:36:83:92:77:4e:cb:24:8b:
fa:15:57:56:98:0f:11:17:38:2c:35:26:1c:ef:08:a4:82:cf:
fd:ec:97:d2:af:bc:2e:ef:b4:1c:f7:16:b0:ee:17:d7:3c:f8:
1e:e1:d4:7d:5e:19:f6:b3:8c:19:b1:d4:34:59:53:be:12:2a:
24:ab:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:39:26 2025 by rpki-client