Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_oHSNAx8jlg5yDJYV2hulFQoLtw.roa
File: _oHSNAx8jlg5yDJYV2hulFQoLtw.roa (raw, json)
Hash identifier: Lp4PWlqwy0osKSZdovvB8tsNMs6luxoKUfR42Oh2Lk8=
Subject key identifier: FE:81:D2:34:0C:7C:8E:58:39:C8:32:58:57:68:6E:94:54:28:2E:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D853E4146B9BFF60EC5475658B63301D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_oHSNAx8jlg5yDJYV2hulFQoLtw.roa
Signing time: Fri 14 Oct 2022 21:08:39 +0000
ROA not before: Fri 14 Oct 2022 21:08:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:d850:331a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d8:53:e4:14:6b:9b:ff:60:ec:54:75:65:8b:63:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 14 21:08:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe81d2340c7c8e5839c8325857686e9454282edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:ad:68:18:0f:a9:69:23:f3:c1:1c:d0:77:
49:35:f9:1f:41:dd:87:05:a9:83:40:bf:87:d1:3d:
cb:0d:d5:55:de:65:11:d1:bb:c2:27:d0:da:ff:34:
e3:d5:cc:4d:8c:1a:b3:81:b4:77:58:a6:8c:90:4f:
5d:a0:10:ec:60:dc:37:57:36:53:dd:bd:f2:4b:86:
f9:fd:f2:42:0b:fc:a5:44:a0:e2:ae:48:7c:7b:0d:
d7:ac:26:a4:14:c4:6c:e3:4f:e3:00:be:e4:b8:6c:
c5:d6:60:ec:05:d4:89:58:42:31:cc:29:dc:c8:ab:
47:0e:35:df:83:32:f2:a1:30:34:c2:74:90:e2:02:
0b:bb:2e:a8:6f:40:35:b3:d8:53:f8:a6:d6:00:11:
ac:1c:06:90:48:43:12:4c:29:fe:7b:67:1e:2c:20:
8f:84:7c:ee:39:19:63:d0:ee:6f:ec:cf:b5:dd:75:
0c:ac:02:52:46:53:76:fd:e5:e6:dd:f5:df:ed:9e:
7f:26:38:c7:85:47:cf:f0:f6:0f:51:b4:bb:5d:57:
ae:02:0c:16:ea:c7:91:cb:6a:f0:8c:50:0a:8c:98:
f3:52:a8:1c:a1:85:68:de:1d:0a:e4:6f:08:eb:50:
91:4e:68:99:fc:ae:97:c3:e3:52:d5:f9:23:dd:b4:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:D2:34:0C:7C:8E:58:39:C8:32:58:57:68:6E:94:54:28:2E:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_oHSNAx8jlg5yDJYV2hulFQoLtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:e0:b8:c5:6c:9d:ef:5b:62:bd:18:45:aa:fb:38:cd:f1:1e:
1c:63:91:05:d1:c0:6f:ab:53:66:08:b2:2c:af:9b:33:57:6c:
7e:f8:eb:b7:57:ca:60:86:5f:ae:f4:4a:60:1c:34:3b:8c:df:
b1:0c:cd:5d:9d:70:33:03:e7:da:b0:14:35:93:09:e6:08:3f:
32:a9:fe:85:34:73:db:65:71:89:4e:7e:f9:31:84:ac:7f:0c:
cf:34:15:f4:15:7c:15:99:77:23:f6:11:a6:f6:c3:f0:3e:96:
81:57:dc:98:d7:3c:2c:bf:03:65:04:45:0c:82:f4:5e:db:ad:
34:3e:07:9f:7d:1b:cc:ac:5c:35:23:22:a3:c9:ea:95:0c:a8:
6c:37:bb:4a:cf:94:49:a5:40:b5:3d:92:21:d3:c8:29:17:75:
86:54:dc:08:51:be:fa:c0:5a:3b:3a:51:7c:68:52:e4:a9:04:
b0:d4:b1:25:b7:7f:a9:5d:bc:28:19:0d:20:12:83:38:66:48:
db:a8:66:2b:4e:c4:5a:e5:2e:46:72:3a:88:81:4d:01:46:41:
c9:46:32:86:05:53:fa:21:d4:ea:61:18:9a:f3:2a:83:e2:5b:
93:e1:b2:58:ed:92:d1:aa:4f:99:91:ab:16:28:05:fa:e0:40:
63:d9:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:13:52 2025 by rpki-client