Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwQdkExiY4SrZ3P-y-aeAZKH5QA.roa
File: OwQdkExiY4SrZ3P-y-aeAZKH5QA.roa (raw, json)
Hash identifier: sIIDjtBlT4SmF+9haVW620uHcoqO/7IILzUJ9TfZFSo=
Subject key identifier: 3B:04:1D:90:4C:62:63:84:AB:67:73:FE:CB:E6:9E:01:92:87:E5:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018510F9F16DD4DB0CFC15F0B173BCB9ADE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwQdkExiY4SrZ3P-y-aeAZKH5QA.roa
Signing time: Wed 14 Dec 2022 14:11:33 +0000
ROA not before: Wed 14 Dec 2022 14:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:f9:f1:6d:d4:db:0c:fc:15:f0:b1:73:bc:b9:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 14:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b041d904c626384ab6773fecbe69e019287e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:8c:32:c7:9c:71:24:95:82:29:ba:49:19:
0b:90:82:43:5c:3d:49:a6:4d:88:65:58:5a:7d:51:
d2:31:b0:68:12:c4:71:e5:33:94:2c:75:93:90:c8:
80:39:58:6a:0c:16:9d:84:69:f3:03:b2:d7:32:dc:
05:f1:d4:74:b4:02:8a:3b:aa:7a:ba:04:42:66:ba:
1d:c4:37:50:ae:d9:d5:ef:5a:58:bc:c1:73:a9:16:
4c:95:2b:e8:10:91:81:70:a0:a4:60:c2:a3:3a:ba:
e5:e9:d9:22:2c:66:48:70:70:16:cc:74:18:90:4a:
24:0e:c9:2e:b0:52:a5:b8:07:98:88:49:45:45:27:
26:50:cd:df:8f:30:9d:88:37:36:71:36:59:3f:b1:
da:30:7e:15:90:9c:3b:ce:d1:03:6b:65:e7:c7:fa:
f6:17:d3:66:ae:78:d0:b4:c1:21:91:12:58:6e:66:
14:53:fe:32:af:49:0f:e2:5a:a0:77:f5:8f:e0:f1:
d8:4a:26:30:fb:59:f1:52:67:97:2a:77:1f:ae:74:
f0:8d:6a:e2:f8:a4:00:c5:32:a4:88:dc:0d:76:71:
98:37:7b:bf:78:2b:0d:74:24:71:a5:31:d9:74:db:
d3:1e:99:77:de:a5:76:3e:58:6f:56:8c:20:34:39:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:04:1D:90:4C:62:63:84:AB:67:73:FE:CB:E6:9E:01:92:87:E5:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwQdkExiY4SrZ3P-y-aeAZKH5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:59:cc:c0:32:f6:d4:e9:98:d2:f5:f8:64:a1:33:c5:8a:ed:
87:53:49:23:02:de:8b:86:45:15:89:43:cb:7c:b2:3e:73:2b:
18:47:2d:3e:db:b9:10:03:0d:1c:78:61:d3:39:57:10:ad:43:
8b:fe:6b:83:f3:7c:50:84:7d:ee:1b:61:bc:a0:cc:ef:df:e8:
90:1a:20:cf:a4:da:39:14:56:a5:e7:36:74:fe:4a:49:0d:f6:
17:f6:a6:d9:4e:f2:cf:85:39:03:e6:10:98:56:44:f3:86:a1:
a6:bb:b6:45:2d:3a:d2:62:6f:1b:5d:76:6c:0c:23:82:14:b3:
99:dc:9b:69:b9:d9:12:1e:e8:d8:b7:af:33:1c:f1:cf:56:47:
8a:34:34:09:0d:19:b8:56:38:ba:ca:66:69:21:8f:cf:fa:36:
c9:e6:6a:37:36:4e:66:ff:35:d0:87:ae:6a:2e:14:aa:b8:f0:
68:3b:10:64:9b:58:ea:84:b2:02:6f:b0:d5:06:83:fa:01:4e:
4a:13:80:85:f1:69:1f:ea:b3:3b:dc:86:bd:1e:63:5b:34:a7:
17:df:cc:a1:dd:ae:d6:ef:c9:75:27:c8:3d:f5:55:66:c1:12:
18:2f:18:7a:97:73:65:00:59:64:63:bc:c5:91:fd:7d:d5:04:
e8:55:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:45:00 2025 by rpki-client