Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OyeUxWzpGAJu57DzfPdDtbviQiA.roa
File: OyeUxWzpGAJu57DzfPdDtbviQiA.roa (raw, json)
Hash identifier: TqIXTRc7lEc98Rm/wziekb5lqoTCu6t6xZ2KXnprIjY=
Subject key identifier: 3B:27:94:C5:6C:E9:18:02:6E:E7:B0:F3:7C:F7:43:B5:BB:E2:42:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C839726724EDDF9CD3EF9D35CFA0F6AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OyeUxWzpGAJu57DzfPdDtbviQiA.roa
Signing time: Thu 09 Mar 2023 21:14:13 +0000
ROA not before: Thu 09 Mar 2023 21:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:39:72:67:24:ed:df:9c:d3:ef:9d:35:cf:a0:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 21:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b2794c56ce918026ee7b0f37cf743b5bbe24220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:ae:65:c7:0d:0f:16:bf:c4:05:12:a5:57:
90:55:6e:8e:f0:18:59:e2:d9:eb:12:2b:e7:59:81:
71:cd:67:c8:c4:26:f6:c8:26:18:f7:aa:3b:a3:ab:
c6:3e:20:7d:6c:f1:34:da:b9:08:52:3c:34:a5:71:
fe:33:5f:85:a8:82:5e:6e:f7:1a:5c:35:84:b1:1d:
36:4f:2f:9e:bb:d7:69:14:de:d6:54:b7:a4:17:8f:
71:07:61:f6:2e:7d:13:fa:c7:89:62:a5:e8:d4:83:
ea:a2:bd:5d:2d:88:e8:57:25:ef:0a:19:61:e0:86:
44:ab:cc:a0:18:71:bf:e5:d0:3a:41:80:93:c3:9f:
52:8e:f6:a4:e4:fa:f1:ea:00:85:72:fa:ff:9b:bc:
59:ac:03:74:db:ba:63:48:05:76:56:d3:06:84:f4:
c9:8d:dd:c0:cc:44:bc:e5:52:d9:15:b1:2b:5b:3e:
df:93:19:93:35:61:12:61:c1:f5:b3:7d:64:65:73:
df:8c:1f:7d:f4:6f:47:21:f4:db:fd:62:69:b6:da:
b9:6c:02:af:30:72:2c:a5:78:c9:8c:75:92:1e:66:
e7:34:ce:10:e4:d5:95:86:6b:a1:c2:b4:cf:46:b0:
1a:2e:12:dd:92:53:a2:41:99:18:52:76:d5:6d:7c:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:94:C5:6C:E9:18:02:6E:E7:B0:F3:7C:F7:43:B5:BB:E2:42:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OyeUxWzpGAJu57DzfPdDtbviQiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:96:9d:c3:3f:f1:41:71:51:4a:03:ff:15:34:15:b0:d2:b7:
74:77:c0:49:eb:f0:71:ee:a2:ce:49:f5:9f:29:56:da:7e:8b:
91:ca:94:32:51:f5:80:e4:70:4b:81:fe:93:2d:f0:a6:d6:e4:
fb:30:c6:46:2b:33:43:e6:2c:6f:16:5c:02:ea:e2:01:0a:e2:
a4:dc:7d:b9:2c:db:cd:6d:4e:b2:d2:eb:5e:1e:4b:73:77:a9:
5a:29:fd:0e:8d:04:e5:09:04:63:33:b2:36:cd:bc:88:f0:5f:
81:1b:34:6e:1e:fc:29:49:c5:61:d1:81:ba:41:1c:14:af:45:
bc:f3:a2:21:5e:2b:bc:f2:e5:83:cf:7c:63:ac:d5:88:3d:d4:
30:6b:92:10:29:30:59:b6:db:ff:63:21:23:80:b4:9d:80:a3:
ac:88:09:65:b0:d3:30:44:81:c0:be:cf:3f:6e:77:e3:fc:ef:
09:e2:ff:1d:bb:b2:23:a5:a7:ff:9b:78:c3:8d:97:67:a7:b5:
68:c4:de:8c:d6:3d:92:63:09:73:6d:60:d8:b0:c4:c6:08:03:
6d:f7:02:da:af:01:b8:1c:69:e7:0e:a8:57:2e:66:bb:a6:58:
b1:20:78:11:f1:37:27:49:40:c1:2d:d7:d1:1a:cf:00:84:55:
8b:4a:ec:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbIOXJnJO3fnNPvnTXPoPaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA5MjExNDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjI3OTRjNTZjZTkxODAyNmVlN2IwZjM3Y2Y3NDNiNWJiZTI0MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2uZccNDxa/xAUSpVeQVW6O8BhZ
4tnrEivnWYFxzWfIxCb2yCYY96o7o6vGPiB9bPE02rkIUjw0pXH+M1+FqIJebvca
XDWEsR02Ty+eu9dpFN7WVLekF49xB2H2Ln0T+seJYqXo1IPqor1dLYjoVyXvChlh
4IZEq8ygGHG/5dA6QYCTw59Sjvak5Prx6gCFcvr/m7xZrAN027pjSAV2VtMGhPTJ
jd3AzES85VLZFbErWz7fkxmTNWESYcH1s31kZXPfjB999G9HIfTb/WJpttq5bAKv
MHIspXjJjHWSHmbnNM4Q5NWVhmuhwrTPRrAaLhLdklOiQZkYUnbVbXyPWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDsnlMVs6RgCbuew83z3Q7W74kIgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT3llVXhXenBHQUp1NTdEemZQZER0YnZpUWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFeWncM/8UFxUUoD/xU0
FbDSt3R3wEnr8HHuos5J9Z8pVtp+i5HKlDJR9YDkcEuB/pMt8KbW5PswxkYrM0Pm
LG8WXALq4gEK4qTcfbks281tTrLS614eS3N3qVop/Q6NBOUJBGMzsjbNvIjwX4Eb
NG4e/ClJxWHRgbpBHBSvRbzzoiFeK7zy5YPPfGOs1Yg91DBrkhApMFm22/9jISOA
tJ2Ao6yICWWw0zBEgcC+zz9ud+P87wni/x27siOlp/+beMONl2entWjE3ozWPZJj
CXNtYNiwxMYIA233AtqvAbgcaecOqFcuZrumWLEgeBHxNydJQMEt19EazwCEVYtK
7NA=
-----END CERTIFICATE-----
Generated at Fri May 2 14:21:58 2025 by rpki-client