Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwseFamEVbQ-ZCgE4g-ZffhE81c.roa
File: OwseFamEVbQ-ZCgE4g-ZffhE81c.roa (raw, json)
Hash identifier: Vh7lR4dv7Y7JVRqQwaczSuhKhK0oUZ4ZkFQMZKCB1Vk=
Subject key identifier: 3B:0B:1E:15:A9:84:55:B4:3E:64:28:04:E2:0F:99:7D:F8:44:F3:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C5B1F2ABE824B45F562C984CADDFF9BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwseFamEVbQ-ZCgE4g-ZffhE81c.roa
Signing time: Tue 11 Oct 2022 06:18:36 +0000
ROA not before: Tue 11 Oct 2022 06:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:b1:f2:ab:e8:24:b4:5f:56:2c:98:4c:ad:df:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 06:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b0b1e15a98455b43e642804e20f997df844f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:48:15:b3:fa:43:c1:9c:8a:59:71:72:0c:
b1:d0:0b:fe:7a:66:a0:cf:1a:16:a2:6b:69:57:8d:
60:b0:36:d8:bb:fc:e3:8e:fb:f8:e0:0a:e4:dd:f2:
0d:a1:a2:3b:b6:1d:a3:59:c1:07:b1:ad:bd:6f:73:
eb:66:48:d6:7f:af:f5:ac:f2:f5:e9:58:83:3d:64:
74:da:8a:d6:79:44:7a:09:52:93:0e:87:bc:81:22:
4e:23:93:b3:df:e7:e9:a2:d8:3c:cd:e8:79:8a:d3:
49:e8:fb:ad:c4:43:62:d5:78:cd:40:e2:ae:44:05:
b9:79:e8:fd:27:ef:b1:5b:24:31:b2:85:28:ff:31:
9b:28:8a:31:a9:b1:e0:30:1a:cf:bd:2d:f6:cf:88:
a3:3e:ac:dd:a3:7c:50:30:a1:c7:70:2a:66:92:d6:
43:43:ae:0d:d0:e6:0b:e0:bf:21:7f:e1:a1:9f:0f:
91:24:11:f0:80:67:62:c2:28:1d:8a:7e:96:d8:4c:
0d:00:a1:d9:0e:dc:99:77:99:c4:09:2e:34:da:2c:
3a:62:84:57:12:e3:62:c5:a7:8d:c3:0a:13:45:c2:
0d:a0:9b:a3:73:ed:87:f9:23:63:ed:13:00:55:22:
17:64:d8:a0:63:d6:71:61:cb:b2:ae:73:0d:4b:4e:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:1E:15:A9:84:55:B4:3E:64:28:04:E2:0F:99:7D:F8:44:F3:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OwseFamEVbQ-ZCgE4g-ZffhE81c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:b0:ef:7d:1d:45:c1:4c:ee:cd:bd:bc:c1:d8:b0:65:ff:aa:
48:e1:a0:a6:2a:4e:eb:cf:2d:d7:20:4a:f9:8a:fa:74:03:08:
f6:f1:c1:6f:08:76:dc:63:1e:f4:a1:a4:25:76:43:7d:49:c2:
65:5c:8f:1b:de:15:d9:f8:3d:aa:39:75:21:ae:31:b9:a5:71:
41:71:e7:7a:77:0d:89:d8:0b:62:9a:23:5b:bf:33:a9:a6:5d:
80:cb:3b:6a:d8:2e:99:a7:d5:e9:d7:20:28:1c:d7:0b:e3:97:
02:fd:b8:c2:6c:e4:68:7f:89:f6:d9:a2:ce:db:3c:11:48:fa:
4c:77:b4:8a:e7:ed:1d:29:65:37:2e:50:75:41:cd:91:6c:9b:
e6:5f:cc:27:1a:b4:ad:ff:e0:f0:67:6b:12:51:03:c8:eb:77:
b5:dd:82:8c:9b:ed:22:78:d4:22:b2:8c:6b:8b:de:8b:09:3c:
69:fd:6e:39:d2:f9:5e:ff:e6:e4:47:ad:c1:6c:7b:81:ff:8a:
b1:a5:35:19:2a:90:66:19:81:15:1c:e3:2a:26:d8:1d:a8:75:
90:3e:ec:17:00:b0:67:ca:1e:20:f6:e3:d1:ab:e0:d2:b3:b0:
12:21:b4:29:a8:55:22:e8:09:8a:4a:bc:b3:8b:fb:20:78:10:
36:d4:55:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPFsfKr6CS0X1YsmEyt3/m/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDExMDYxODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjBiMWUxNWE5ODQ1NWI0M2U2NDI4MDRlMjBmOTk3ZGY4NDRmMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO9IFbP6Q8Gcillxcgyx0Av+emag
zxoWomtpV41gsDbYu/zjjvv44Ark3fINoaI7th2jWcEHsa29b3PrZkjWf6/1rPL1
6ViDPWR02orWeUR6CVKTDoe8gSJOI5Oz3+fpotg8zeh5itNJ6PutxENi1XjNQOKu
RAW5eej9J++xWyQxsoUo/zGbKIoxqbHgMBrPvS32z4ijPqzdo3xQMKHHcCpmktZD
Q64N0OYL4L8hf+Ghnw+RJBHwgGdiwigdin6W2EwNAKHZDtyZd5nECS402iw6YoRX
EuNixaeNwwoTRcINoJujc+2H+SNj7RMAVSIXZNigY9ZxYcuyrnMNS04xqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsLHhWphFW0PmQoBOIPmX34RPNXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3dzZUZhbUVWYlEtWkNnRTRnLVpmZmhFODFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEqw730dRcFM7s29vMHY
sGX/qkjhoKYqTuvPLdcgSvmK+nQDCPbxwW8IdtxjHvShpCV2Q31JwmVcjxveFdn4
Pao5dSGuMbmlcUFx53p3DYnYC2KaI1u/M6mmXYDLO2rYLpmn1enXICgc1wvjlwL9
uMJs5Gh/ifbZos7bPBFI+kx3tIrn7R0pZTcuUHVBzZFsm+ZfzCcatK3/4PBnaxJR
A8jrd7Xdgoyb7SJ41CKyjGuL3osJPGn9bjnS+V7/5uRHrcFse4H/irGlNRkqkGYZ
gRUc4yom2B2odZA+7BcAsGfKHiD249Gr4NKzsBIhtCmoVSLoCYpKvLOL+yB4EDbU
VXE=
-----END CERTIFICATE-----
Generated at Fri May 2 11:55:02 2025 by rpki-client