Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvT_AEEt6wuuoghfbwypZJ-amMY.roa
File: OvT_AEEt6wuuoghfbwypZJ-amMY.roa (raw, json)
Hash identifier: CQ2z9dcJ/idNBE+x/p58lM30OcSvT1jJOvqvcSbKLtk=
Subject key identifier: 3A:F4:FF:00:41:2D:EB:0B:AE:A2:08:5F:6F:0C:A9:64:9F:9A:98:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C7CC65ECD23D15268307EE2B58F0CB54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvT_AEEt6wuuoghfbwypZJ-amMY.roa
Signing time: Thu 19 Jan 2023 02:12:19 +0000
ROA not before: Thu 19 Jan 2023 02:12:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c7:cc:65:ec:d2:3d:15:26:83:07:ee:2b:58:f0:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 02:12:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3af4ff00412deb0baea2085f6f0ca9649f9a98c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:75:dc:90:06:ac:f0:42:6b:0e:4d:18:e7:
a0:0a:32:d9:51:3d:54:69:c7:56:a5:ad:4d:ac:ba:
d7:ab:8c:aa:5b:93:68:e6:a0:4a:9b:38:c0:a7:94:
79:02:d3:a6:46:8c:c1:2c:39:e9:c0:0e:8a:f5:53:
4d:f9:c9:33:2f:13:e5:bf:c0:f3:3a:47:98:30:e0:
61:bf:17:9a:59:27:3b:79:72:bc:87:89:64:e0:d9:
07:96:f3:2a:8f:ae:ba:a7:02:13:6a:59:86:f1:81:
e4:0f:46:b5:f0:e9:63:fb:c6:69:57:23:12:6d:b8:
f3:e9:45:89:65:50:0c:e8:03:38:1a:8f:e3:74:8a:
86:3b:4c:0a:ce:b0:f1:f9:93:52:95:2c:1c:35:0f:
9e:83:bb:c0:d7:67:f7:31:88:76:c0:58:5e:10:a9:
1b:18:ca:c2:a6:c0:65:10:ab:26:f3:26:f9:60:fb:
b0:3a:a0:bd:0c:4d:b4:91:1a:ba:6a:4a:80:0d:20:
42:6e:f1:c9:7b:94:52:89:d4:04:05:8c:96:8d:ea:
31:a3:57:54:b3:4b:37:c5:5a:27:c4:49:e8:97:f3:
a9:13:e8:c4:08:c8:30:6b:0d:c7:0c:37:03:54:ec:
80:a6:30:68:d0:c3:26:41:5d:f3:83:de:91:8d:58:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:FF:00:41:2D:EB:0B:AE:A2:08:5F:6F:0C:A9:64:9F:9A:98:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OvT_AEEt6wuuoghfbwypZJ-amMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:ac:d1:66:60:81:28:b1:12:db:da:c1:5d:83:c6:70:8a:9f:
32:6a:ca:39:b1:13:ae:e0:95:27:97:7c:76:70:2b:c6:92:55:
e6:cf:d3:da:7c:84:9a:9a:77:26:8f:2a:34:46:46:84:c1:e4:
14:47:4b:61:0b:64:36:8b:d8:64:68:c8:cb:1e:f6:a8:1e:e9:
a8:ed:30:28:e3:f5:44:31:df:b6:31:46:34:6b:8e:2c:56:f2:
18:e9:88:dd:89:95:80:96:c6:35:d4:f3:55:ea:34:0e:da:b6:
96:46:b7:48:30:12:6d:2d:36:9a:6b:f3:ba:8e:fe:68:18:6e:
8b:fb:97:6e:3c:8b:11:09:a4:51:5d:b7:49:d7:06:51:a5:4e:
5e:e7:94:f9:e2:08:b6:e2:bf:bb:32:4b:7b:6a:12:02:95:5f:
63:2f:82:46:91:b1:1d:d0:ef:d7:e2:b2:7d:43:f2:6b:cf:93:
1d:cd:1a:55:00:dc:90:1e:0b:69:20:95:28:f6:5b:61:fb:ee:
2e:34:a0:bd:a1:0e:c8:83:06:02:e8:6e:a6:a7:8a:07:ec:d7:
0a:22:07:95:f3:7e:9f:78:57:a7:54:0c:78:65:fa:cd:cc:ac:
b2:0d:f7:6e:37:98:94:39:cc:e2:ac:fb:1f:5e:c3:07:56:98:
ab:4e:f9:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXHzGXs0j0VJoMH7itY8MtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE5MDIxMjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWY0ZmYwMDQxMmRlYjBiYWVhMjA4NWY2ZjBjYTk2NDlmOWE5OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Z13JAGrPBCaw5NGOegCjLZUT1U
acdWpa1NrLrXq4yqW5No5qBKmzjAp5R5AtOmRozBLDnpwA6K9VNN+ckzLxPlv8Dz
OkeYMOBhvxeaWSc7eXK8h4lk4NkHlvMqj666pwITalmG8YHkD0a18Olj+8ZpVyMS
bbjz6UWJZVAM6AM4Go/jdIqGO0wKzrDx+ZNSlSwcNQ+eg7vA12f3MYh2wFheEKkb
GMrCpsBlEKsm8yb5YPuwOqC9DE20kRq6akqADSBCbvHJe5RSidQEBYyWjeoxo1dU
s0s3xVonxEnol/OpE+jECMgwaw3HDDcDVOyApjBo0MMmQV3zg96RjVik8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDr0/wBBLesLrqIIX28MqWSfmpjGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3ZUX0FFRXQ2d3V1b2doZmJ3eXBaSi1hbU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFCs0WZggSixEtvawV2D
xnCKnzJqyjmxE67glSeXfHZwK8aSVebP09p8hJqadyaPKjRGRoTB5BRHS2ELZDaL
2GRoyMse9qge6ajtMCjj9UQx37YxRjRrjixW8hjpiN2JlYCWxjXU81XqNA7atpZG
t0gwEm0tNppr87qO/mgYbov7l248ixEJpFFdt0nXBlGlTl7nlPniCLbiv7syS3tq
EgKVX2MvgkaRsR3Q79fisn1D8mvPkx3NGlUA3JAeC2kglSj2W2H77i40oL2hDsiD
BgLobqanigfs1woiB5Xzfp94V6dUDHhl+s3MrLIN9243mJQ5zOKs+x9ewwdWmKtO
+ck=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:43 2025 by rpki-client