Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOuLGV7Li7xB6F4niU9Y5SFR3-4.roa
File: aOuLGV7Li7xB6F4niU9Y5SFR3-4.roa (raw, json)
Hash identifier: 08ytEQUVMA9w5fmfJRe8Qvxu8JIJJ2mImUHOGqPU2nw=
Subject key identifier: 68:EB:8B:19:5E:CB:8B:BC:41:E8:5E:27:89:4F:58:E5:21:51:DF:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DA6FAB3987AFB6DB66D87805CD237715
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOuLGV7Li7xB6F4niU9Y5SFR3-4.roa
Signing time: Wed 09 Aug 2023 13:14:58 +0000
ROA not before: Wed 09 Aug 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:6f:ab:39:87:af:b6:db:66:d8:78:05:cd:23:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68eb8b195ecb8bbc41e85e27894f58e52151dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:e4:ee:3f:15:97:4f:be:83:7c:6b:15:c3:
bc:e4:6d:f6:82:da:c2:1b:1b:77:3a:ff:24:d4:08:
85:57:58:42:8c:28:d3:0a:9d:1e:e1:b8:7b:bf:31:
ec:8e:44:01:c6:0e:cf:1a:78:f3:0f:f9:eb:37:f6:
1a:a7:c0:33:d7:e8:a3:f6:14:88:17:c8:8e:c1:4b:
32:c0:60:19:ef:bb:78:40:11:8e:6a:1a:11:84:bb:
e4:a1:ef:8d:43:67:96:c6:58:ad:1a:77:42:0b:bd:
4f:d7:b3:38:9d:02:b7:ff:13:2a:d4:fd:2a:96:b9:
2b:54:4f:dc:55:e4:b2:c9:8e:e1:b9:38:28:a8:f3:
30:c0:fc:7a:4c:12:3a:97:34:4e:f5:b5:04:e3:33:
7d:17:cd:79:cb:e8:7c:77:de:e9:30:e2:fa:26:0c:
64:fe:3a:cf:07:3b:93:7a:b4:94:22:51:14:de:74:
09:57:25:07:0e:51:2c:0d:e3:2f:c9:dc:d2:96:38:
8e:db:27:a7:c7:71:8b:61:e3:0f:50:c2:9f:87:99:
0f:5c:33:6a:07:35:3c:90:4e:de:91:b3:6c:a6:03:
73:5d:8a:22:c1:b1:15:f4:2b:c2:5f:56:9b:e4:d0:
0b:57:90:eb:db:50:6a:5b:90:16:0f:bd:95:a7:56:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:8B:19:5E:CB:8B:BC:41:E8:5E:27:89:4F:58:E5:21:51:DF:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aOuLGV7Li7xB6F4niU9Y5SFR3-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:db:18:df:95:0d:13:d2:3b:16:6e:8e:39:9d:49:0f:9a:c9:
77:4e:00:2f:73:77:88:3f:4a:41:4f:fb:db:9d:40:7e:d5:cd:
76:30:9d:38:0f:ee:21:a0:7c:f5:54:b9:ea:51:f0:7a:e5:1f:
8e:9a:83:72:ae:4a:b4:2f:54:d5:2c:3a:ef:f2:7e:dd:92:dc:
cb:ca:f4:9f:e4:a6:73:a4:55:69:a0:f3:44:ba:47:2c:87:38:
e2:04:b3:3d:e3:55:61:76:1b:21:94:24:b1:b7:70:5a:59:14:
34:0b:85:c1:6d:e7:37:e7:64:90:5a:95:52:8c:35:72:20:2b:
dd:58:44:da:4e:85:dd:20:43:c3:c2:03:04:89:d8:b0:21:01:
61:65:85:d3:fe:f0:ba:ef:2c:ad:b1:40:67:5a:45:87:78:e5:
00:5d:2e:c2:7a:de:22:ad:78:71:da:39:e8:f2:cf:9f:5b:49:
c3:83:2e:ce:05:76:69:40:8e:c4:5d:8f:09:45:4c:3d:ae:ad:
80:ae:f3:9b:8e:89:aa:0d:ff:72:fb:ec:24:ee:14:7c:98:c4:
1d:68:88:a7:6e:9a:3a:57:04:ce:09:f1:91:92:b9:b2:dc:ba:
d8:92:f4:b3:d7:46:68:6b:6d:a0:6e:19:52:50:e0:26:13:38:
52:be:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:39:17 2025 by rpki-client