Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsJBxOoXtIcNVfChPWLhKWj3Qyw.roa
File: OsJBxOoXtIcNVfChPWLhKWj3Qyw.roa (raw, json)
Hash identifier: Koc/1mWAyyFobXSLrPWWs32AwnK0VFFShrYyhxu7izw=
Subject key identifier: 3A:C2:41:C4:EA:17:B4:87:0D:55:F0:A1:3D:62:E1:29:68:F7:43:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01860A8596449901E36EFBB8960213D63E6F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsJBxOoXtIcNVfChPWLhKWj3Qyw.roa
Signing time: Wed 01 Feb 2023 01:09:32 +0000
ROA not before: Wed 01 Feb 2023 01:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0a:85:96:44:99:01:e3:6e:fb:b8:96:02:13:d6:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 1 01:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac241c4ea17b4870d55f0a13d62e12968f7432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:76:ba:3d:71:f8:2e:c2:35:b2:34:fa:e9:
df:3a:0f:2f:93:cc:47:7e:bf:cb:44:89:cb:20:fb:
b0:88:18:87:a7:6f:03:21:f7:b8:2c:1f:18:d1:50:
3f:e6:b1:31:d2:2c:70:79:69:38:0e:3c:14:30:69:
2b:78:d3:c8:fb:08:41:83:3a:7b:59:03:50:d4:a2:
a6:88:c9:c4:9d:0e:2c:db:98:a4:f7:b6:df:db:c6:
53:06:5c:ab:18:a1:67:87:39:5f:9d:ee:72:7d:e0:
5c:2a:07:ef:82:e1:f2:7c:79:98:7d:9a:64:d3:8c:
87:12:39:3d:4d:6e:50:b2:75:b3:4b:78:60:f9:80:
cf:21:18:73:58:ae:91:f7:bb:01:0e:38:bf:e7:c3:
a9:61:55:6a:ef:4f:b5:bb:c8:a0:a5:49:b5:ab:e1:
93:82:4e:c6:de:75:79:e4:51:54:b8:9a:d5:87:c8:
18:5c:6a:7c:ca:46:99:a7:7d:b9:c8:2b:d7:e3:6a:
ac:02:ba:d6:24:80:9e:b3:a9:1f:8b:0a:cd:bb:90:
fd:f7:1a:e5:92:e3:dd:16:f3:22:3b:f8:26:13:09:
e2:72:4b:8d:e0:01:16:31:2b:9e:d8:23:ca:a1:34:
b3:22:64:09:2d:df:4c:0e:df:2d:ee:e3:4e:56:39:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C2:41:C4:EA:17:B4:87:0D:55:F0:A1:3D:62:E1:29:68:F7:43:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OsJBxOoXtIcNVfChPWLhKWj3Qyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:cc:2a:a0:84:f9:16:51:8e:53:ab:2d:1c:ea:36:9b:24:f7:
81:cb:cf:66:d4:06:ae:d1:77:23:29:62:55:77:fc:d1:b4:3c:
74:b8:da:8e:0b:3d:e2:66:c1:99:42:d6:2d:91:09:2f:16:cf:
76:6f:fb:65:25:99:df:db:10:af:c7:c0:92:6f:0e:2c:7f:b9:
a3:19:e4:32:09:6b:e4:d2:64:75:27:4b:91:72:f3:77:37:cd:
c3:1c:bc:a0:fe:4e:eb:7d:dd:49:6b:62:f6:7f:49:95:e4:9f:
dd:29:07:26:ac:84:ac:15:cf:33:69:a1:5d:8d:f6:de:e4:8c:
d0:0a:b7:82:94:60:cd:17:18:b6:53:c7:48:b8:5d:c3:24:96:
84:9c:84:c1:a1:92:ec:27:65:b4:90:72:33:73:cc:a1:5f:40:
aa:fd:a9:fa:5f:1b:2a:f9:0b:ca:de:0c:9b:07:10:f0:a1:ae:
29:e2:bf:51:85:0e:00:a3:43:76:23:f5:14:c4:56:91:69:4d:
2c:29:f1:6a:45:70:cd:01:8c:a6:04:f6:6b:e7:23:94:9a:f7:
8b:80:a1:e8:f1:98:f3:81:0a:5a:61:75:8b:3d:a4:1f:91:3f:
4e:d4:6e:3e:f6:7b:0d:18:1b:a7:61:4d:3c:2c:d7:48:d9:26:
e3:7d:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:27:16 2025 by rpki-client