Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OuinmJLvLH38U9mq701ffaV8OUs.roa
File: OuinmJLvLH38U9mq701ffaV8OUs.roa (raw, json)
Hash identifier: d4+4+d/cCCcd3+Kfbs/WNpD2/5yzKgZhNlWwwK4ovaw=
Subject key identifier: 3A:E8:A7:98:92:EF:2C:7D:FC:53:D9:AA:EF:4D:5F:7D:A5:7C:39:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189341FDC57E6EF21065FE21924C60088DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OuinmJLvLH38U9mq701ffaV8OUs.roa
Signing time: Sat 08 Jul 2023 06:10:50 +0000
ROA not before: Sat 08 Jul 2023 06:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:1f:dc:57:e6:ef:21:06:5f:e2:19:24:c6:00:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 06:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae8a79892ef2c7dfc53d9aaef4d5f7da57c394b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:60:c2:63:c9:f4:70:14:97:6f:8c:73:e6:
6d:ad:b7:a3:14:e5:d1:13:fa:f2:70:8b:a5:58:0e:
81:9f:42:c8:01:f8:85:62:f3:29:8a:76:7d:59:7a:
ad:20:31:ce:3f:e0:fd:6d:20:7b:2f:20:f7:cd:93:
6a:5c:04:cc:cc:24:e9:0e:81:19:8c:2c:43:ee:d7:
d5:24:1a:8f:6e:44:2b:04:3f:39:5b:0e:ad:e2:76:
36:cf:42:52:02:e7:f4:3d:43:42:df:d9:e2:63:51:
78:8c:e0:af:8b:dc:ba:e0:7e:b2:b7:73:19:26:42:
23:0b:28:7c:84:f6:c2:bd:a6:05:93:53:cd:04:33:
43:51:23:a7:8e:a2:e4:1f:ce:07:f7:96:c4:e6:d4:
d2:30:ab:19:71:d9:ed:ca:e9:80:f1:eb:8e:8d:ab:
78:d1:41:7e:90:f6:6e:01:a3:fc:7a:eb:6c:f9:20:
a4:b1:de:7f:24:ed:80:04:21:3a:e9:7c:a0:d5:5a:
98:d8:cb:b7:94:0d:c1:f8:43:41:3a:42:b4:8b:e4:
e9:d8:b4:18:02:49:e9:6f:4d:4a:da:58:b5:93:bc:
2b:20:61:8a:a4:29:a8:af:79:70:05:11:66:95:bc:
12:52:5d:63:58:a0:7e:66:87:30:37:8b:f7:44:5f:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:A7:98:92:EF:2C:7D:FC:53:D9:AA:EF:4D:5F:7D:A5:7C:39:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OuinmJLvLH38U9mq701ffaV8OUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:b5:64:1d:d6:e8:b4:54:3c:83:af:a6:fa:67:0a:e3:51:09:
f7:43:b9:32:d5:f2:ba:47:dd:1a:81:f5:34:10:db:24:40:83:
97:8a:4e:57:e2:5a:09:b4:c4:40:9b:97:63:5b:94:5c:e4:ef:
76:8f:a8:14:d3:46:8c:84:75:17:f2:db:fe:b3:cd:ad:e3:fe:
35:91:ac:1c:58:62:5d:da:af:96:64:a6:86:a2:61:44:97:f2:
f7:8e:6f:b1:9b:35:ed:1a:93:9c:bb:f8:db:1a:76:1a:18:ad:
40:57:fb:25:c5:b1:ef:18:78:aa:08:7a:51:c9:58:38:7d:fc:
d1:5f:16:b2:48:48:a1:59:0e:ae:3b:6f:0c:ad:20:c9:9f:60:
10:10:e0:8b:fb:7e:f2:00:c0:97:19:8a:a8:38:d0:9c:ed:a0:
81:ca:3b:be:00:bf:ae:49:0b:d8:ba:02:2e:1e:d9:8e:a9:0b:
17:eb:dd:2a:a9:71:f1:d2:4f:fe:f0:c3:88:88:4a:e6:a2:12:
3d:d0:e9:2b:72:df:76:64:d1:62:48:bd:6d:9f:25:b9:1e:4c:
59:8a:1d:34:02:61:f9:3b:36:22:bd:99:41:5e:1d:40:fb:09:
f4:17:bb:5c:a3:e0:d8:60:3a:4d:64:e9:ab:ea:e8:01:0a:1f:
25:35:52:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk0H9xX5u8hBl/iGSTGAIjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA4MDYxMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU4YTc5ODkyZWYyYzdkZmM1M2Q5YWFlZjRkNWY3ZGE1N2MzOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD5gwmPJ9HAUl2+Mc+ZtrbejFOXR
E/rycIulWA6Bn0LIAfiFYvMpinZ9WXqtIDHOP+D9bSB7LyD3zZNqXATMzCTpDoEZ
jCxD7tfVJBqPbkQrBD85Ww6t4nY2z0JSAuf0PUNC39niY1F4jOCvi9y64H6yt3MZ
JkIjCyh8hPbCvaYFk1PNBDNDUSOnjqLkH84H95bE5tTSMKsZcdntyumA8euOjat4
0UF+kPZuAaP8euts+SCksd5/JO2ABCE66Xyg1VqY2Mu3lA3B+ENBOkK0i+Tp2LQY
Aknpb01K2li1k7wrIGGKpCmor3lwBRFmlbwSUl1jWKB+ZocwN4v3RF8VEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDrop5iS7yx9/FPZqu9NX32lfDlLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3Vpbm1KTHZMSDM4VTltcTcwMWZmYVY4T1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJi1ZB3W6LRUPIOvpvpn
CuNRCfdDuTLV8rpH3RqB9TQQ2yRAg5eKTlfiWgm0xECbl2NblFzk73aPqBTTRoyE
dRfy2/6zza3j/jWRrBxYYl3ar5ZkpoaiYUSX8veOb7GbNe0ak5y7+NsadhoYrUBX
+yXFse8YeKoIelHJWDh9/NFfFrJISKFZDq47bwytIMmfYBAQ4Iv7fvIAwJcZiqg4
0JztoIHKO74Av65JC9i6Ai4e2Y6pCxfr3SqpcfHST/7ww4iISuaiEj3Q6Sty33Zk
0WJIvW2fJbkeTFmKHTQCYfk7NiK9mUFeHUD7CfQXu1yj4NhgOk1k6avq6AEKHyU1
Unc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:45 2025 by rpki-client