Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzF3eflrGOXzOwQA3aoMyMAUynw.roa
File: OzF3eflrGOXzOwQA3aoMyMAUynw.roa (raw, json)
Hash identifier: 1PUzrzSdkFP4t7Vn/yWpDtVN94zwtOySVgQdvKx23xM=
Subject key identifier: 3B:31:77:79:F9:6B:18:E5:F3:3B:04:00:DD:AA:0C:C8:C0:14:CA:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018562BA1C310FC6BADC5580E68CCC90635D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzF3eflrGOXzOwQA3aoMyMAUynw.roa
Signing time: Fri 30 Dec 2022 11:10:42 +0000
ROA not before: Fri 30 Dec 2022 11:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:ba:1c:31:0f:c6:ba:dc:55:80:e6:8c:cc:90:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 11:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b317779f96b18e5f33b0400ddaa0cc8c014ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:0e:6c:2c:bb:2b:e5:72:8a:5e:dc:c1:d2:
1f:89:89:5b:fc:35:e0:ad:7a:35:81:16:29:fd:33:
02:d8:d1:9d:9b:c0:ca:07:04:1f:9c:23:37:80:b6:
30:79:d8:db:72:38:78:b5:34:cf:b5:92:95:9d:31:
57:b8:cb:5e:42:35:f7:7c:57:d0:d8:24:0a:dc:68:
bb:cb:7f:94:7b:e1:1d:6e:53:67:df:36:5a:c3:f6:
e2:41:b3:5f:04:be:82:14:e7:a0:5f:bd:8d:a3:89:
ea:be:2d:36:1c:f4:53:d9:df:54:74:ea:eb:18:4d:
85:37:6d:2e:7b:21:0d:3d:6b:36:1c:2f:7e:71:de:
8a:25:f3:fa:b7:fd:d4:cb:b7:c5:01:b4:a1:4c:6f:
40:a7:cc:08:fd:92:c4:10:9b:12:49:97:fb:d6:23:
3e:07:69:a5:17:d0:ab:46:02:c9:0f:49:36:28:d8:
c4:1f:6f:14:56:0d:4f:2e:9b:cc:05:60:6b:55:44:
88:5a:e4:c2:4d:8e:94:64:7e:05:81:66:39:15:c1:
13:aa:b9:f9:8a:db:3e:78:4a:61:87:38:af:c3:99:
21:b3:6f:f0:3f:25:86:9d:c0:b8:94:7c:c6:08:b5:
8a:37:f3:3c:3e:75:c9:c3:37:5f:a8:d2:dc:a0:48:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:77:79:F9:6B:18:E5:F3:3B:04:00:DD:AA:0C:C8:C0:14:CA:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzF3eflrGOXzOwQA3aoMyMAUynw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d5:12:d1:01:b8:7c:4b:05:27:a4:58:4a:ca:a1:8f:78:21:
9d:44:10:05:3c:49:c7:d8:93:21:65:44:dc:85:da:d8:bc:fb:
c1:62:06:18:ab:7d:1d:77:49:b9:1c:9b:ad:fb:24:ec:33:fa:
b1:9d:e8:76:38:cd:e8:b1:7f:58:b9:93:53:1c:a2:bf:f7:90:
0a:37:25:74:98:4a:1e:25:e4:7c:57:c4:60:d8:50:66:ee:16:
2d:f8:e1:53:e4:a8:c5:76:25:f4:43:f4:ce:e8:ef:56:96:bd:
e9:d8:ad:5e:7a:b9:fa:e6:5d:d1:64:c6:ac:e0:e6:94:2f:36:
1e:39:22:2e:78:7f:6c:d3:a2:32:65:18:d6:48:2f:a4:0e:2a:
71:81:81:7a:5c:c5:79:0c:9c:30:c5:df:f8:fa:b5:41:84:71:
10:5f:d2:03:93:16:fd:a6:10:36:6c:34:de:67:be:3b:7a:52:
f5:79:16:ce:a2:0c:6f:40:cc:0a:16:6d:e2:ce:ec:3c:83:63:
75:92:40:bc:32:ed:85:ea:3f:bd:0f:de:ee:cc:6d:26:88:15:
ce:75:d0:3e:c5:62:c2:17:d0:7d:10:9a:2d:9c:e0:48:67:4f:
b8:d2:39:5d:71:e4:e3:74:fa:81:17:1f:d8:c1:8b:c4:f2:2d:
e2:e5:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:31:03 2025 by rpki-client