Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ow4SOkmSJxhKEmgKHVantFn-gIw.roa
File: Ow4SOkmSJxhKEmgKHVantFn-gIw.roa (raw, json)
Hash identifier: EdRNuSoWEYg8Lz/3kOieWst5ZnddakTJKX+3lXmbXiI=
Subject key identifier: 3B:0E:12:3A:49:92:27:18:4A:12:68:0A:1D:56:A7:B4:59:FE:80:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897C045AD31C93056F60A11BCD3785FCD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ow4SOkmSJxhKEmgKHVantFn-gIw.roa
Signing time: Sat 22 Jul 2023 05:13:27 +0000
ROA not before: Sat 22 Jul 2023 05:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:04:5a:d3:1c:93:05:6f:60:a1:1b:cd:37:85:fc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 05:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0e123a499227184a12680a1d56a7b459fe808c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:17:17:e5:39:0f:00:0f:d0:ea:af:70:46:
be:f9:ba:6f:78:21:57:22:0c:da:d6:05:9d:4a:b9:
32:f3:88:bc:45:3a:19:b9:08:91:0e:ca:40:2c:f4:
6c:1c:ce:d0:06:7c:02:2f:a7:8e:2f:61:08:4b:3a:
ff:68:44:75:2d:0d:5a:2b:fd:d8:3c:b0:ec:f3:b5:
a2:c8:09:34:0f:72:89:09:e4:6e:9f:34:54:f8:7a:
aa:28:e7:11:21:85:6b:41:53:c8:78:5a:f5:d1:a0:
75:ca:33:c6:37:fc:75:cb:80:f1:0e:18:17:eb:51:
62:f6:e2:2c:8e:a6:0e:ad:2f:6e:00:c8:ef:04:a3:
16:27:3e:1b:8f:33:93:f3:bf:80:54:b3:93:db:8e:
e2:62:0d:4e:0f:82:d1:2a:34:b2:b3:10:08:c7:f8:
d3:4b:02:0a:99:91:57:a5:aa:22:e2:e4:f4:06:3e:
4e:72:c8:f3:9f:ca:ce:78:51:44:54:ea:2a:b9:46:
bd:d5:20:92:ae:4b:70:61:59:a3:6a:ee:ef:b1:ef:
e1:ba:b7:99:4f:83:d9:be:1e:c8:a6:60:d1:df:f0:
f8:8b:6b:ab:35:41:e9:77:5e:60:a1:fa:c5:0a:ed:
13:49:3c:fa:68:d1:c0:b4:c0:a1:c5:96:37:45:b8:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:12:3A:49:92:27:18:4A:12:68:0A:1D:56:A7:B4:59:FE:80:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ow4SOkmSJxhKEmgKHVantFn-gIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e3:42:1c:87:69:ce:79:69:24:ac:3a:f9:3a:e4:0b:20:7b:
88:ff:85:e3:dd:a8:ee:85:0d:17:9f:04:d1:bc:33:35:44:c4:
1d:5e:4e:fe:10:c0:5e:d4:4a:c1:c6:b8:e5:d2:18:68:15:2e:
60:1e:58:e3:92:6f:06:11:9b:b2:3d:b7:18:98:45:9a:57:ca:
50:3a:3d:b8:d3:56:3d:c2:d7:44:50:61:fa:c0:9f:ca:ae:95:
a4:76:1f:f5:b1:be:8c:5d:ac:94:7b:01:a0:02:de:e6:92:f8:
b5:1c:08:d3:f9:f9:16:2f:7d:18:12:be:61:de:da:5b:1d:37:
3d:77:ea:33:bf:78:a0:2a:53:fa:50:b8:d8:26:3c:a1:38:e0:
64:91:dc:d7:aa:86:ba:4b:0b:9d:89:fe:de:cc:ae:ec:55:43:
d2:a5:99:a1:f8:98:62:34:03:9c:f5:63:15:09:07:b4:49:63:
46:a4:6f:c3:0b:10:65:c2:74:73:72:29:35:a3:d4:1b:e8:1a:
60:b5:fd:fe:52:f7:8c:60:92:e7:48:9d:7e:8b:f1:d8:d2:38:
ad:bc:7b:c3:9e:76:10:d3:bc:5e:4e:03:6e:cf:35:b3:a3:91:
d8:16:f8:e2:32:42:a5:b6:7d:47:79:cd:d5:79:fc:5c:13:7b:
a2:5f:52:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl8BFrTHJMFb2ChG803hfzZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIyMDUxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjBlMTIzYTQ5OTIyNzE4NGExMjY4MGExZDU2YTdiNDU5ZmU4MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXkXF+U5DwAP0OqvcEa++bpveCFX
Igza1gWdSrky84i8RToZuQiRDspALPRsHM7QBnwCL6eOL2EISzr/aER1LQ1aK/3Y
PLDs87WiyAk0D3KJCeRunzRU+HqqKOcRIYVrQVPIeFr10aB1yjPGN/x1y4DxDhgX
61Fi9uIsjqYOrS9uAMjvBKMWJz4bjzOT87+AVLOT247iYg1OD4LRKjSysxAIx/jT
SwIKmZFXpaoi4uT0Bj5Ocsjzn8rOeFFEVOoquUa91SCSrktwYVmjau7vse/hureZ
T4PZvh7IpmDR3/D4i2urNUHpd15gofrFCu0TSTz6aNHAtMChxZY3RbgfgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsOEjpJkicYShJoCh1Wp7RZ/oCMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3c0U09rbVNKeGhLRW1nS0hWYW50Rm4tZ0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIzjQhyHac55aSSsOvk6
5Asge4j/hePdqO6FDRefBNG8MzVExB1eTv4QwF7USsHGuOXSGGgVLmAeWOOSbwYR
m7I9txiYRZpXylA6PbjTVj3C10RQYfrAn8qulaR2H/WxvoxdrJR7AaAC3uaS+LUc
CNP5+RYvfRgSvmHe2lsdNz136jO/eKAqU/pQuNgmPKE44GSR3NeqhrpLC52J/t7M
ruxVQ9KlmaH4mGI0A5z1YxUJB7RJY0akb8MLEGXCdHNyKTWj1BvoGmC1/f5S94xg
kudInX6L8djSOK28e8OedhDTvF5OA27PNbOjkdgW+OIyQqW2fUd5zdV5/FwTe6Jf
UgI=
-----END CERTIFICATE-----
Generated at Fri May 2 02:03:49 2025 by rpki-client