Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OucZNouq2AjHsk42IxZv3BUMuLk.roa
File: OucZNouq2AjHsk42IxZv3BUMuLk.roa (raw, json)
Hash identifier: 2CHl9Hf+x6PgKztF4llnJhVKJLIMglxv5DxTmSmPb1s=
Subject key identifier: 3A:E7:19:36:8B:AA:D8:08:C7:B2:4E:36:23:16:6F:DC:15:0C:B8:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AB09DD4EF4BCCC192DFA64AFBF0F0645
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OucZNouq2AjHsk42IxZv3BUMuLk.roa
Signing time: Fri 13 Jan 2023 12:10:28 +0000
ROA not before: Fri 13 Jan 2023 12:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:09:dd:4e:f4:bc:cc:19:2d:fa:64:af:bf:0f:06:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 12:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae719368baad808c7b24e3623166fdc150cb8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:7d:b7:18:59:ad:36:b3:cc:59:ea:e2:38:
51:f9:43:6c:c1:2b:5e:d8:f3:4f:3c:ad:24:67:9d:
48:1b:0a:42:26:6f:08:6b:e8:b5:3c:a4:33:14:43:
5f:83:4e:a6:6d:68:bf:0c:49:f9:4d:d1:12:24:86:
f7:a4:6a:70:7a:b0:19:28:34:3e:f5:3f:6a:ff:dc:
46:da:c7:d8:5b:c7:64:b6:43:f5:e6:4f:bf:aa:61:
e9:b4:8b:90:f4:50:a4:40:07:41:80:e1:7f:eb:7f:
86:87:a0:b8:ff:f5:b2:d0:44:aa:6c:01:66:00:93:
aa:b6:11:c4:8d:a5:33:9e:c5:d0:38:05:94:e0:58:
1d:1c:53:67:71:aa:2b:75:b4:f5:13:c8:4c:d4:cc:
94:f4:50:f1:16:9e:18:d0:93:46:9d:1c:ea:0c:f6:
ad:1a:34:d1:b8:9f:ac:d4:c0:79:40:a3:8f:36:69:
f9:26:c2:de:80:d8:5c:2b:e3:7c:29:ec:83:87:28:
d7:3c:8d:7b:8b:99:6d:ec:87:00:ab:31:75:96:c6:
e8:a7:61:4b:53:a5:60:b5:7c:b8:ae:87:3a:5b:05:
12:db:73:30:a4:da:9f:97:d1:5f:7d:77:bd:8d:ee:
7d:cc:72:2e:f6:88:78:72:c8:db:d7:ed:e5:8d:36:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:19:36:8B:AA:D8:08:C7:B2:4E:36:23:16:6F:DC:15:0C:B8:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OucZNouq2AjHsk42IxZv3BUMuLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:0b:ae:5c:78:ae:52:15:09:3e:29:cf:46:ac:15:92:f8:02:
d8:dd:d2:c0:12:71:3f:94:b1:bb:c2:0e:8b:ec:18:40:8a:62:
ce:e0:1f:f1:1a:42:c1:8d:70:4a:d3:2a:fe:eb:e8:8d:2a:31:
1a:c3:55:b3:c3:ed:db:f4:3f:ba:6a:49:66:1b:0f:6c:97:00:
4f:75:8b:5c:b3:23:4e:fe:d4:6c:3e:7b:fb:9a:82:60:2e:ec:
db:54:68:95:90:e5:93:8a:c9:7f:c9:ab:fe:e6:5d:4c:ed:02:
53:72:d5:74:be:85:bd:23:48:45:6f:ba:47:ab:11:c0:f0:54:
f2:dc:99:e5:4b:1c:1d:62:f8:2c:67:c2:ca:01:7e:b8:40:83:
f5:e9:a8:bf:4f:87:ae:2a:71:fc:ac:bb:ed:b8:40:b6:73:b6:
31:8e:5e:d0:c1:a9:37:b6:96:67:4b:6e:9d:4a:cb:08:99:dd:
f6:da:b2:d7:42:aa:4f:3a:e3:6f:7a:b2:00:2e:37:1b:1c:ca:
1e:20:83:1c:8b:d6:8d:a9:af:fb:bb:94:9a:f9:5e:72:1c:36:
eb:5b:03:f9:c7:f9:98:ca:ed:51:8a:86:12:5b:7d:75:59:4c:
47:b2:09:bd:49:52:89:bf:0b:76:89:2d:c9:6b:5c:fb:c5:f6:
79:ae:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:58:55 2025 by rpki-client