Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_OQzxnTqNtMkL9NmopewAODuwC0.roa
File: _OQzxnTqNtMkL9NmopewAODuwC0.roa (raw, json)
Hash identifier: A3z62H03DNyn38Uy13DNui62ReXoTXs54VSiQjDqtoY=
Subject key identifier: FC:E4:33:C6:74:EA:36:D3:24:2F:D3:66:A2:97:B0:00:E0:EE:C0:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A4589683FA1AABC6374AFAE1619E4B0D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_OQzxnTqNtMkL9NmopewAODuwC0.roa
Signing time: Fri 21 Apr 2023 15:04:41 +0000
ROA not before: Fri 21 Apr 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:a458:25b1/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:58:96:83:fa:1a:ab:c6:37:4a:fa:e1:61:9e:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fce433c674ea36d3242fd366a297b000e0eec02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:c4:f9:9b:95:ed:4d:98:6c:5b:56:97:8c:
64:37:69:92:9f:b3:f7:9d:7b:5e:b4:e0:5a:57:6d:
53:72:e2:a0:dc:f0:11:77:80:c3:bb:82:d5:c1:a3:
a8:a5:9d:94:d5:ed:0c:00:34:30:cb:14:8f:18:39:
bb:21:04:8d:2c:97:3d:04:05:55:bd:a1:1c:76:2a:
8d:e8:30:a8:77:d6:62:2f:d7:bc:b5:46:51:fa:12:
52:23:53:d8:d0:66:b9:2b:b0:32:30:9d:43:c2:5f:
8a:a7:bf:67:8c:75:a5:ba:c4:98:2f:24:93:c7:65:
77:c7:1d:a3:be:ec:da:3b:9f:86:52:71:b8:fa:60:
37:64:63:08:df:67:8b:1a:ad:ab:a7:7d:81:ee:0c:
49:50:22:aa:e9:2f:3f:b8:09:69:22:71:03:fe:e4:
0a:fe:62:6f:cc:21:e2:e2:85:b4:b4:4b:91:b7:18:
91:b7:e3:fa:a0:33:37:fe:a1:b5:c4:0e:bb:72:44:
00:e1:a3:3f:26:9b:96:09:b1:3c:ab:f0:6b:90:fc:
ca:42:f5:73:c5:96:93:15:e7:5b:fe:a5:9d:87:08:
3f:64:b2:c1:47:a3:ed:37:5a:20:60:ad:ea:4d:20:
92:a6:5e:c4:c5:cd:1b:2c:8b:49:54:14:62:a9:27:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:33:C6:74:EA:36:D3:24:2F:D3:66:A2:97:B0:00:E0:EE:C0:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_OQzxnTqNtMkL9NmopewAODuwC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:48:55:1d:5c:0a:0e:d4:67:c4:13:bf:ba:b9:04:bb:1d:bd:
be:0a:51:04:f7:f8:53:d9:8c:6d:29:41:d8:64:1e:4f:d2:23:
28:90:39:82:0e:11:63:51:c9:e5:82:c3:38:6e:63:8f:21:08:
3c:80:f7:2e:bd:4a:dc:64:7d:f4:92:2e:09:9e:58:34:14:2c:
db:1d:7a:31:b6:0b:b2:8c:8e:48:9d:ec:3d:27:71:dc:cb:b4:
0b:9f:3b:41:d2:8b:56:2c:d4:29:5e:ce:51:12:fe:e7:86:1b:
d4:a0:22:34:79:31:5d:cb:29:31:5f:b3:58:10:d8:fa:69:e3:
8e:d9:4c:e1:33:72:10:bb:e0:50:70:3e:8d:83:51:6e:db:8b:
06:53:39:8b:0a:e5:42:c0:11:c5:2f:10:69:e6:a2:27:19:f5:
27:82:1b:64:b3:03:40:fa:bd:3a:c6:dc:20:6f:05:99:9a:c4:
6d:ad:ba:ca:3e:62:dc:7c:c8:65:6d:5c:c0:f8:ba:68:65:a2:
f1:8f:41:09:aa:36:15:85:ba:e5:1e:ca:47:9e:c8:a4:7e:99:
a7:81:6a:46:9b:e7:6f:9d:f9:fb:60:50:0f:c9:e8:f5:36:d3:
13:13:e7:50:89:6e:be:9a:fb:b8:16:dd:36:c7:da:52:f6:74:
d0:63:18:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYekWJaD+hqrxjdK+uFhnksNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIxMTUwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2U0MzNjNjc0ZWEzNmQzMjQyZmQzNjZhMjk3YjAwMGUwZWVjMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW/E+ZuV7U2YbFtWl4xkN2mSn7P3
nXtetOBaV21TcuKg3PARd4DDu4LVwaOopZ2U1e0MADQwyxSPGDm7IQSNLJc9BAVV
vaEcdiqN6DCod9ZiL9e8tUZR+hJSI1PY0Ga5K7AyMJ1Dwl+Kp79njHWlusSYLyST
x2V3xx2jvuzaO5+GUnG4+mA3ZGMI32eLGq2rp32B7gxJUCKq6S8/uAlpInED/uQK
/mJvzCHi4oW0tEuRtxiRt+P6oDM3/qG1xA67ckQA4aM/JpuWCbE8q/BrkPzKQvVz
xZaTFedb/qWdhwg/ZLLBR6PtN1ogYK3qTSCSpl7Exc0bLItJVBRiqScKBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPzkM8Z06jbTJC/TZqKXsADg7sAtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX09RenhuVHFOdE1rTDlObW9wZXdBT0R1d0MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA1IVR1cCg7UZ8QTv7q5
BLsdvb4KUQT3+FPZjG0pQdhkHk/SIyiQOYIOEWNRyeWCwzhuY48hCDyA9y69Stxk
ffSSLgmeWDQULNsdejG2C7KMjkid7D0ncdzLtAufO0HSi1Ys1ClezlES/ueGG9Sg
IjR5MV3LKTFfs1gQ2Ppp447ZTOEzchC74FBwPo2DUW7biwZTOYsK5ULAEcUvEGnm
oicZ9SeCG2SzA0D6vTrG3CBvBZmaxG2tuso+Ytx8yGVtXMD4umhlovGPQQmqNhWF
uuUeykeeyKR+maeBakab52+d+ftgUA/J6PU20xMT51CJbr6a+7gW3TbH2lL2dNBj
GB4=
-----END CERTIFICATE-----
Generated at Thu May 1 14:52:15 2025 by rpki-client