Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Otr6SGtfrgAArzRWYhliIL4li20.roa
File: Otr6SGtfrgAArzRWYhliIL4li20.roa (raw, json)
Hash identifier: 1ZCC5d6uhYqUT5/IeaFgpitHgzQ2C44dLSGlMz9ANGw=
Subject key identifier: 3A:DA:FA:48:6B:5F:AE:00:00:AF:34:56:62:19:62:20:BE:25:8B:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018669CA1871F7A4CF2A6417EB34D27FFBF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Otr6SGtfrgAArzRWYhliIL4li20.roa
Signing time: Sun 19 Feb 2023 13:08:17 +0000
ROA not before: Sun 19 Feb 2023 13:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:ca:18:71:f7:a4:cf:2a:64:17:eb:34:d2:7f:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 13:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3adafa486b5fae0000af345662196220be258b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bb:45:00:ea:be:08:a7:23:33:04:27:68:4b:
4c:da:02:36:5d:6d:42:a9:2a:09:5b:e0:ad:44:41:
aa:ba:d5:b0:c8:e9:19:29:59:69:52:85:69:ad:fc:
21:b3:40:a7:1c:49:63:98:0c:ed:cc:ce:18:20:c8:
f8:7b:a7:91:5a:c6:3a:e6:8a:d9:70:8c:0d:fd:e7:
87:40:b5:ac:68:11:ae:1e:14:84:7b:40:8f:b6:38:
19:fa:3d:58:f9:1e:73:80:c2:53:0d:c2:d7:7f:57:
6a:ef:08:de:ad:39:e5:29:dd:4f:06:1d:e9:0c:6f:
42:7e:3f:9b:e1:c0:2b:f3:8b:83:5b:b2:b6:b1:4c:
ee:19:41:84:c3:dc:d8:9a:42:29:b1:55:a9:09:6e:
d9:70:19:7e:de:6d:6e:ea:0d:93:0f:c7:b1:f1:89:
f1:32:07:d5:f4:d7:85:2b:25:61:a6:c1:04:dc:86:
2b:00:81:2a:39:47:58:cf:78:c7:2b:37:aa:01:91:
fe:32:b6:0c:48:67:8f:4d:f6:88:44:c6:2b:e9:81:
4a:7b:39:b9:ec:09:24:76:7c:eb:7c:fe:85:8a:99:
f4:b7:72:89:5a:d9:03:30:3a:04:06:71:57:21:21:
9e:10:3a:3e:ac:d9:53:82:71:69:b1:56:17:54:cc:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:FA:48:6B:5F:AE:00:00:AF:34:56:62:19:62:20:BE:25:8B:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Otr6SGtfrgAArzRWYhliIL4li20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:38:84:33:47:75:14:fc:a7:a3:80:2c:97:2e:80:27:6b:ad:
80:52:9e:52:8d:0a:4b:f9:84:6c:79:75:ea:af:35:f1:58:17:
ce:d3:38:cf:c8:93:1c:bb:e8:18:bb:51:4e:e1:50:dd:0e:35:
a9:47:2d:e8:77:8e:38:62:6f:d2:42:e6:be:bf:b1:10:e3:2d:
1a:88:23:bd:74:2e:dd:db:75:32:2d:30:65:eb:55:6f:c1:03:
02:2f:89:31:0d:85:fb:26:30:f6:b0:3b:68:9b:43:1a:fc:86:
46:73:1a:19:a8:f4:5e:10:a7:75:a5:c2:38:25:15:f2:cd:ec:
59:ed:01:9e:73:6b:52:eb:10:b1:85:66:10:25:3e:74:eb:33:
20:15:b3:5e:5b:9e:66:82:ab:8e:37:5c:0e:f1:83:1f:33:1c:
81:d1:e6:dd:c6:e5:ef:fe:e5:2e:60:0e:eb:d2:98:3e:62:af:
05:ab:e5:31:ec:ad:6e:5c:a4:a9:2e:24:46:08:bd:e9:9e:a6:
b8:fd:39:eb:26:b2:ee:55:63:66:1b:5d:d5:9a:e0:b2:c0:4e:
d6:5c:d9:fc:a1:3c:b7:e2:10:c0:eb:0a:e5:29:88:b1:8e:fa:
18:75:c1:22:cd:63:28:f0:c3:9c:aa:b5:47:5d:47:e2:70:2b:
4f:f8:c0:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZpyhhx96TPKmQX6zTSf/v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE5MTMwODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWRhZmE0ODZiNWZhZTAwMDBhZjM0NTY2MjE5NjIyMGJlMjU4YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLtFAOq+CKcjMwQnaEtM2gI2XW1C
qSoJW+CtREGqutWwyOkZKVlpUoVprfwhs0CnHEljmAztzM4YIMj4e6eRWsY65orZ
cIwN/eeHQLWsaBGuHhSEe0CPtjgZ+j1Y+R5zgMJTDcLXf1dq7wjerTnlKd1PBh3p
DG9Cfj+b4cAr84uDW7K2sUzuGUGEw9zYmkIpsVWpCW7ZcBl+3m1u6g2TD8ex8Ynx
MgfV9NeFKyVhpsEE3IYrAIEqOUdYz3jHKzeqAZH+MrYMSGePTfaIRMYr6YFKezm5
7AkkdnzrfP6Fipn0t3KJWtkDMDoEBnFXISGeEDo+rNlTgnFpsVYXVMyuEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDra+khrX64AAK80VmIZYiC+JYttMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3RyNlNHdGZyZ0FBcnpSV1lobGlJTDRsaTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHo4hDNHdRT8p6OALJcu
gCdrrYBSnlKNCkv5hGx5deqvNfFYF87TOM/Ikxy76Bi7UU7hUN0ONalHLeh3jjhi
b9JC5r6/sRDjLRqII710Lt3bdTItMGXrVW/BAwIviTENhfsmMPawO2ibQxr8hkZz
Ghmo9F4Qp3WlwjglFfLN7FntAZ5za1LrELGFZhAlPnTrMyAVs15bnmaCq443XA7x
gx8zHIHR5t3G5e/+5S5gDuvSmD5irwWr5THsrW5cpKkuJEYIvemeprj9Oesmsu5V
Y2YbXdWa4LLATtZc2fyhPLfiEMDrCuUpiLGO+hh1wSLNYyjww5yqtUddR+JwK0/4
wLg=
-----END CERTIFICATE-----
Generated at Sat May 3 05:38:06 2025 by rpki-client