Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OxO4tBFt5N7aszz3eMhwiXb-rXk.roa
File: OxO4tBFt5N7aszz3eMhwiXb-rXk.roa (raw, json)
Hash identifier: +4LkHnsgchoPyVfCe3nbBTjjr+1ZRZhpjRvdVHZNmYs=
Subject key identifier: 3B:13:B8:B4:11:6D:E4:DE:DA:B3:3C:F7:78:C8:70:89:76:FE:AD:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EABE7B37F7A1E45B7A28A2D429C17F29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OxO4tBFt5N7aszz3eMhwiXb-rXk.roa
Signing time: Sat 12 Aug 2023 17:14:59 +0000
ROA not before: Sat 12 Aug 2023 17:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:be:7b:37:f7:a1:e4:5b:7a:28:a2:d4:29:c1:7f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 17:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b13b8b4116de4dedab33cf778c8708976fead79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:41:94:18:fa:8b:b3:a3:2f:a7:38:5b:25:
e3:ed:7d:7b:bc:bf:d7:83:17:32:65:54:80:45:ec:
b0:8d:87:f6:b1:9d:35:48:b0:e4:ef:c5:f1:96:52:
d5:3d:f2:78:a6:1a:2c:5b:1e:2c:0e:e0:3f:6d:e7:
f2:81:46:db:58:4d:c5:1f:61:0a:17:8c:70:43:e4:
b8:fd:9c:8e:91:01:a8:33:1c:3f:52:73:d0:a9:ab:
54:42:59:83:cf:b5:60:5f:e5:b9:95:86:2f:43:0f:
f7:ba:0e:1d:99:62:c4:19:b5:9b:26:17:36:6f:54:
e2:23:6e:d3:07:f0:28:88:5c:dc:d0:07:27:e0:94:
8d:1f:9c:b6:7d:19:29:16:78:44:4c:a7:24:27:b6:
f7:09:0e:9c:51:b1:cc:a1:d0:be:c1:49:79:3b:95:
51:7f:fa:2a:95:ea:bc:2e:db:92:a9:7c:32:93:2e:
97:32:5d:82:d6:56:e6:65:d8:03:47:cf:31:9f:8f:
31:9b:36:12:af:4b:8d:5a:9b:43:df:52:ac:44:c5:
27:c5:ea:a1:a3:6a:e6:2c:4a:61:9c:48:4d:c3:c0:
f9:ae:e6:2a:98:c8:6d:7a:f9:26:e4:4d:aa:b4:12:
21:5c:44:af:20:eb:65:42:1d:93:94:91:6e:b0:34:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:B8:B4:11:6D:E4:DE:DA:B3:3C:F7:78:C8:70:89:76:FE:AD:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OxO4tBFt5N7aszz3eMhwiXb-rXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:87:40:3a:15:f1:66:f2:c9:05:e0:71:36:29:41:de:2f:3e:
2d:6e:a4:76:15:5e:22:43:09:4b:a7:a7:d2:0e:9b:08:e0:c0:
31:09:c9:31:50:ab:41:c0:e9:70:ec:6c:66:93:f5:6b:53:59:
5e:ca:a8:0e:3d:ba:6d:76:36:8e:53:4f:26:59:14:5a:f7:05:
e4:df:86:4c:b0:2c:b4:43:04:14:5d:46:df:86:29:8c:61:fd:
1b:e0:46:11:bc:cb:ca:5e:1a:e7:9f:bd:ce:a5:b0:2e:8b:a2:
6e:ea:f5:ae:d6:11:02:39:c5:1d:03:64:d8:71:7a:6f:ff:16:
2e:2e:25:40:37:07:21:9f:2a:6f:ec:a4:10:d4:90:9a:89:8c:
cd:4c:13:a0:7d:93:46:89:33:a4:07:db:4a:5a:e1:93:21:d7:
4c:34:53:ac:bf:28:8e:5b:ea:5e:50:29:77:95:07:61:a4:f4:
26:33:c4:e1:2e:4a:21:00:cc:0f:3c:75:f3:6b:e0:77:93:a7:
ce:5f:47:84:41:f3:29:ff:32:16:3e:1c:f9:70:95:45:f0:f8:
25:30:11:68:be:07:70:92:bc:4b:28:79:f1:ca:7b:4d:2a:19:
0b:54:02:02:55:6d:c0:a9:8e:7e:36:ff:81:e5:d1:b1:f1:07:
68:2b:82:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnqvns396HkW3oootQpwX8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEyMTcxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjEzYjhiNDExNmRlNGRlZGFiMzNjZjc3OGM4NzA4OTc2ZmVhZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmNBlBj6i7OjL6c4WyXj7X17vL/X
gxcyZVSAReywjYf2sZ01SLDk78XxllLVPfJ4phosWx4sDuA/befygUbbWE3FH2EK
F4xwQ+S4/ZyOkQGoMxw/UnPQqatUQlmDz7VgX+W5lYYvQw/3ug4dmWLEGbWbJhc2
b1TiI27TB/AoiFzc0Acn4JSNH5y2fRkpFnhETKckJ7b3CQ6cUbHModC+wUl5O5VR
f/oqleq8LtuSqXwyky6XMl2C1lbmZdgDR88xn48xmzYSr0uNWptD31KsRMUnxeqh
o2rmLEphnEhNw8D5ruYqmMhtevkm5E2qtBIhXESvIOtlQh2TlJFusDTb8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsTuLQRbeTe2rM893jIcIl2/q15MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3hPNHRCRnQ1Tjdhc3p6M2VNaHdpWGItclhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFOHQDoV8WbyyQXgcTYp
Qd4vPi1upHYVXiJDCUunp9IOmwjgwDEJyTFQq0HA6XDsbGaT9WtTWV7KqA49um12
No5TTyZZFFr3BeTfhkywLLRDBBRdRt+GKYxh/RvgRhG8y8peGuefvc6lsC6Lom7q
9a7WEQI5xR0DZNhxem//Fi4uJUA3ByGfKm/spBDUkJqJjM1ME6B9k0aJM6QH20pa
4ZMh10w0U6y/KI5b6l5QKXeVB2Gk9CYzxOEuSiEAzA88dfNr4HeTp85fR4RB8yn/
MhY+HPlwlUXw+CUwEWi+B3CSvEsoefHKe00qGQtUAgJVbcCpjn42/4Hl0bHxB2gr
go8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:10 2025 by rpki-client