Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwKkLlh094HTF-aitGQ-hOxLRUQ.roa
File: OwKkLlh094HTF-aitGQ-hOxLRUQ.roa (raw, json)
Hash identifier: 0MtXtHwPmrWZ0aw1FYYBCZcIkQS6anH0qKCtxYNZWjQ=
Subject key identifier: 3B:02:A4:2E:58:74:F7:81:D3:17:E6:A2:B4:64:3E:84:EC:4B:45:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BB19B2CF0499968F4962EEB3143A764F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwKkLlh094HTF-aitGQ-hOxLRUQ.roa
Signing time: Wed 14 Jun 2023 18:10:03 +0000
ROA not before: Wed 14 Jun 2023 18:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:19:b2:cf:04:99:96:8f:49:62:ee:b3:14:3a:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 18:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b02a42e5874f781d317e6a2b4643e84ec4b4544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:37:e3:5a:c7:a7:fe:18:3d:c4:00:7b:6e:
ef:ee:c9:a6:ca:df:25:77:74:c9:5c:a5:af:54:da:
d4:ff:dc:80:9d:50:b3:6d:2e:47:ee:f1:51:1b:28:
6a:88:f9:ff:2d:ea:ac:51:d9:43:bf:7d:57:a6:1f:
0b:e6:4e:ac:63:bc:6b:78:d8:dd:df:f3:95:29:bf:
9f:93:f7:1b:d4:c1:29:54:4b:b2:fc:32:6a:5a:9d:
d5:c7:ed:34:07:46:a4:d4:90:4e:de:b1:e0:19:76:
29:97:f6:45:bb:7d:0f:63:f8:7c:28:b7:4c:a0:2e:
8b:79:09:75:06:21:68:32:96:b6:92:3a:a5:a4:51:
53:55:05:ed:d2:ba:70:56:b1:d3:51:2d:0e:60:c8:
91:30:01:f3:c5:84:75:c5:fc:7f:ff:50:5b:e3:5e:
a3:7c:a6:6b:45:f4:5f:c7:a6:fc:e5:28:95:6f:bf:
8d:fa:95:13:09:32:ad:6a:05:20:ea:6c:44:39:46:
11:cb:57:72:4f:43:6c:07:e1:38:1b:dc:06:81:7e:
5a:9d:25:dc:7e:c6:a4:92:31:7a:7a:fb:00:d7:eb:
24:79:04:2a:a0:68:fa:80:2a:92:e1:1b:9a:41:c5:
7a:b3:c3:34:6d:0a:58:26:b9:07:ce:32:eb:1d:3c:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:A4:2E:58:74:F7:81:D3:17:E6:A2:B4:64:3E:84:EC:4B:45:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwKkLlh094HTF-aitGQ-hOxLRUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:58:bd:1b:68:f9:dc:31:6c:41:6b:7e:92:01:7d:4d:03:00:
25:cd:6a:b4:07:5a:ec:fd:c9:94:f1:5f:67:0f:fc:9f:87:6d:
a3:bc:15:66:b5:00:35:56:39:93:88:8d:39:43:99:22:64:c0:
af:ea:7a:21:61:0a:0e:57:39:2a:d9:79:82:00:ab:13:8d:fb:
20:72:73:18:93:bb:8c:d4:04:25:f9:04:a3:c9:ce:96:f4:c0:
45:99:65:0e:dd:7b:cd:16:7c:27:d7:8b:3d:fe:ca:ed:85:22:
22:26:b0:be:85:93:ba:c2:0b:49:60:b2:49:a5:bf:1e:36:08:
ab:66:76:5b:cc:8c:f5:ed:66:5f:d9:34:b0:28:0e:3f:d2:44:
48:4c:35:92:ed:52:08:22:cb:8e:46:0b:51:dc:ae:01:3d:9b:
33:d6:92:e6:33:16:0f:2e:40:82:51:8d:56:d5:06:00:56:78:
c7:d5:03:83:09:5e:0f:f8:07:18:be:2d:4b:d6:87:a6:cf:2a:
9e:45:f7:df:17:9f:5b:b8:27:98:bb:28:b4:2b:42:ac:44:eb:
29:8b:d0:d6:65:a8:30:1c:46:79:ca:97:1c:81:a8:5c:76:3f:
a7:c3:4a:cf:41:83:4a:8a:f2:f6:e4:17:1c:fb:c4:a1:91:bc:
f3:e6:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:24 2025 by rpki-client