Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsEMXbTLAzdLqcgGSdUOEiN68PM.roa
File: OsEMXbTLAzdLqcgGSdUOEiN68PM.roa (raw, json)
Hash identifier: 7ZOBE4SvhFtsqNmaErSABSSKXSl1cIqm4QF73jMN5e8=
Subject key identifier: 3A:C1:0C:5D:B4:CB:03:37:4B:A9:C8:06:49:D5:0E:12:23:7A:F0:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F087A7CE08F8017517586D999329F2CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsEMXbTLAzdLqcgGSdUOEiN68PM.roa
Signing time: Fri 17 Mar 2023 17:04:27 +0000
ROA not before: Fri 17 Mar 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:f087:821e/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:87:a7:ce:08:f8:01:75:17:58:6d:99:93:29:f2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac10c5db4cb03374ba9c80649d50e12237af0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:d9:86:2a:8e:72:bd:74:85:8f:78:22:e9:
8e:d8:81:a0:a2:49:f3:dd:2b:bd:26:e1:24:a9:11:
4e:fd:e3:93:08:c1:b9:90:7b:d6:35:fc:7b:3e:f2:
c2:dd:a6:8d:f1:4e:a7:69:9b:9c:7a:6c:04:ac:dd:
49:23:11:85:bd:68:b4:84:f4:f5:ef:5c:b7:9e:ce:
f4:25:e2:eb:a7:88:e0:fc:d5:6d:80:d6:de:81:8f:
be:1f:9d:bc:73:2e:90:b4:a6:a4:6e:24:ca:5e:89:
63:76:f9:39:12:b4:01:e0:0a:7a:9a:1a:70:da:bb:
fb:c9:79:6e:f2:f4:69:a0:df:31:8c:8a:52:18:b1:
1f:fb:2f:ea:fb:50:2d:8e:6a:c4:7f:8c:85:66:33:
31:40:f8:6a:80:4e:ad:23:47:30:6f:b0:fc:47:f1:
6e:9d:a8:2b:56:3f:11:88:54:dc:8f:79:68:eb:27:
42:60:a5:5f:7d:98:4e:73:36:21:cb:28:8b:ba:ce:
49:ca:30:d1:c6:45:2c:f6:a7:a5:cc:15:98:8d:c9:
16:6a:a0:63:78:99:eb:1a:7f:38:18:bc:81:04:17:
d0:12:8a:d0:bd:eb:9e:2d:a1:a1:ad:5e:ae:00:36:
b8:2f:1a:6e:55:ca:23:49:b1:4c:1f:a4:cb:2d:80:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:0C:5D:B4:CB:03:37:4B:A9:C8:06:49:D5:0E:12:23:7A:F0:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsEMXbTLAzdLqcgGSdUOEiN68PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:b3:3d:48:d2:dc:92:94:1a:96:57:9c:69:11:0c:d1:08:6d:
fe:8c:85:f2:27:9e:5d:9f:f0:eb:0a:be:55:e9:36:b7:26:1f:
02:e3:9c:e1:a0:fa:e0:94:3e:36:24:5d:e7:dc:39:e6:35:f0:
dd:3f:5e:c1:ce:17:76:b8:bb:8e:ed:ae:93:5c:ef:6c:42:a3:
2d:48:02:5a:cb:8e:11:aa:44:be:29:9d:a6:74:b3:d7:84:b4:
ab:ed:fc:cb:2d:c1:bf:27:d1:6c:f8:80:ad:18:bf:8d:fc:b2:
2b:ed:ee:09:14:c6:e0:f1:4f:73:78:24:4a:07:95:59:70:53:
ed:b3:e7:04:b1:44:9c:dc:49:bf:fc:18:64:29:d6:e6:ab:17:
d9:f1:23:92:6f:21:a8:35:1b:45:58:a5:b9:cf:db:8c:ea:dd:
20:77:85:65:22:cd:34:bd:fc:94:f1:cd:01:eb:32:69:a4:43:
cc:f3:de:ca:9b:a8:db:12:ef:93:8a:fb:c3:1a:fb:29:fb:23:
02:a6:ed:6f:75:ab:cb:52:51:cf:03:00:2b:73:0a:b8:2e:3b:
58:e4:d6:79:0f:6f:66:22:db:f7:9a:98:6e:16:e2:59:75:04:
90:09:2a:69:65:46:10:d5:f0:4a:4b:0a:03:2d:9e:1d:ea:78:
bc:55:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:04:59 2025 by rpki-client