Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzjzqHRGnDmdJGduHKOAG-LOr4o.roa
File: OzjzqHRGnDmdJGduHKOAG-LOr4o.roa (raw, json)
Hash identifier: PMu4l6tQdjbTNYstPsGrUQ0IJiWTxeidv+vt1VKGkV4=
Subject key identifier: 3B:38:F3:A8:74:46:9C:39:9D:24:67:6E:1C:A3:80:1B:E2:CE:AF:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886F5A3CBC777AFF4AEF64FE626EF6A11E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzjzqHRGnDmdJGduHKOAG-LOr4o.roa
Signing time: Wed 31 May 2023 01:09:24 +0000
ROA not before: Wed 31 May 2023 01:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6f:5a:3c:bc:77:7a:ff:4a:ef:64:fe:62:6e:f6:a1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 01:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b38f3a874469c399d24676e1ca3801be2ceaf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:82:47:09:6d:d7:0e:9c:c6:a3:00:63:72:a0:
5c:6a:44:3b:ac:f2:8a:1d:15:50:87:e7:e8:19:d8:
f6:16:66:5d:a7:ad:7c:5c:83:45:f7:d8:55:ba:01:
36:47:61:33:ec:d4:83:62:d1:29:3f:43:94:a0:79:
77:c4:1b:d2:28:2b:e3:87:e6:f6:07:6e:28:19:0c:
aa:11:82:07:15:7f:a3:08:75:af:64:ad:f7:d9:9a:
7d:4f:c2:5f:bb:25:4c:3e:f4:74:28:01:da:22:4d:
76:eb:40:6f:ce:68:e1:d6:76:0f:31:88:5c:cd:d1:
ec:59:58:47:6a:4f:d0:58:08:88:2f:7a:d3:71:9b:
02:9c:9a:19:a6:a2:bf:86:ad:91:1f:94:90:26:d9:
e0:7c:5c:08:ae:c9:67:0e:30:95:11:59:5e:8b:2f:
a2:30:41:59:54:22:6c:31:10:02:89:d3:e5:a3:d6:
9e:13:e5:45:55:3e:f7:0c:7c:6b:08:0b:4c:73:23:
f6:53:85:1c:34:21:1f:ac:93:3e:5b:d3:8b:46:c8:
34:bd:4c:6b:71:ab:74:ef:0b:ac:a8:79:f0:5d:5e:
d5:12:cd:1a:57:36:20:1f:d1:0f:c6:b2:f3:6d:1a:
59:e7:f3:41:38:12:29:af:50:63:72:ff:2f:09:a6:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:F3:A8:74:46:9C:39:9D:24:67:6E:1C:A3:80:1B:E2:CE:AF:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OzjzqHRGnDmdJGduHKOAG-LOr4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:9e:68:84:6e:2e:6e:f4:02:f3:56:f0:4b:df:a9:65:1b:c1:
30:85:4c:3d:f6:42:46:98:cf:d8:7b:d9:50:55:10:7f:99:f8:
01:2c:5c:69:0d:6f:0b:e1:ec:94:17:d4:45:1c:0e:67:38:48:
73:40:2e:ce:e2:48:91:e5:b6:5a:c3:0d:43:03:63:af:48:33:
dd:95:3d:6c:02:81:03:1e:42:61:c8:15:a2:b7:a4:f0:00:29:
1c:16:ab:53:fa:fc:b9:80:2a:08:0b:ce:ac:6a:01:1e:2b:5c:
c1:8e:b7:f3:91:a4:5f:54:92:c2:4a:f3:e3:38:05:74:44:eb:
14:80:52:b7:e1:af:23:20:90:db:d3:e3:98:77:ac:b4:17:0c:
17:fd:40:5e:c8:6a:55:94:fa:14:ed:c2:7b:19:02:aa:4b:7b:
92:af:8c:86:21:13:03:04:f3:7a:11:cb:81:14:a9:3d:e7:f3:
c4:eb:52:c6:10:e3:c2:ae:c5:d7:da:3d:fe:02:c6:09:c5:d8:
c5:57:7f:74:1d:b0:8e:e1:4d:67:5c:9c:93:55:22:a5:88:24:
00:0e:66:84:46:64:75:44:9e:27:2b:d0:1c:eb:17:c5:65:ce:
0c:56:71:2a:4a:89:4a:b5:0a:a2:fc:f0:71:6b:ee:61:a4:47:
78:70:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:15 2025 by rpki-client