Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k08Wo6-ObaUi01viq7q2kHOpaKY.roa
File: k08Wo6-ObaUi01viq7q2kHOpaKY.roa (raw, json)
Hash identifier: TXDOvQMAYKvyQPah09+1JD4NcrICgAeVSNFcD4rIj3A=
Subject key identifier: 93:4F:16:A3:AF:8E:6D:A5:22:D3:5B:E2:AB:BA:B6:90:73:A9:68:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018685AB82171CDEF004754C9B36A38F69B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k08Wo6-ObaUi01viq7q2kHOpaKY.roa
Signing time: Fri 24 Feb 2023 23:04:15 +0000
ROA not before: Fri 24 Feb 2023 23:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:85ab:6f1b/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:ab:82:17:1c:de:f0:04:75:4c:9b:36:a3:8f:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 23:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934f16a3af8e6da522d35be2abbab69073a968a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:5d:45:1e:97:a6:31:46:6e:58:c6:95:0a:
19:9f:14:87:24:ab:e7:14:67:92:69:48:5c:f4:87:
8f:f6:f5:5e:66:ad:2f:51:e9:d7:62:28:f2:27:c2:
77:64:ff:b2:37:f5:8b:ba:d4:99:a3:81:7d:3a:34:
b8:15:ee:47:ce:8d:d7:77:db:9f:4b:76:04:f8:3d:
91:d1:79:0d:a3:0e:a3:6e:b4:3e:1f:e5:1f:e1:e0:
8a:e7:12:5c:8e:b3:62:dd:99:bf:21:c2:90:f8:a3:
4e:72:fe:22:5b:61:27:0a:81:b8:2f:12:22:3c:04:
61:97:f2:88:de:44:23:ce:02:25:52:08:14:4b:db:
6e:5f:d5:0f:44:56:72:f6:c6:b9:9a:d2:9e:ca:fd:
93:0e:f2:cd:ff:e8:c3:91:18:59:98:0c:42:84:6e:
d6:bc:8c:f1:21:69:88:09:31:65:f9:74:c0:72:b9:
2a:58:d1:18:53:87:e5:ab:ae:c1:25:64:31:cd:82:
0c:b1:2e:0d:93:13:33:a2:d8:51:4a:eb:56:39:fb:
0f:30:81:d5:f8:4f:82:f5:79:4c:a2:af:94:df:c1:
d5:c2:79:ed:45:73:33:6f:1e:5d:bb:96:2d:bc:80:
8f:0c:d8:35:34:76:13:b9:87:f6:35:47:57:03:78:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:16:A3:AF:8E:6D:A5:22:D3:5B:E2:AB:BA:B6:90:73:A9:68:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k08Wo6-ObaUi01viq7q2kHOpaKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:b4:0d:64:7b:ba:c7:d4:2d:aa:47:34:a0:5a:a3:7b:e8:b8:
52:ab:f7:23:e4:9a:59:5b:53:0a:be:75:51:df:c9:ab:5b:33:
1b:be:90:d5:ed:da:40:71:cb:54:b8:ee:0b:ee:49:a9:da:c5:
d6:6a:43:a8:d9:79:21:cf:08:e8:95:0f:c8:7d:22:94:70:18:
da:5a:d8:f1:73:78:f6:dd:3a:88:c2:44:5f:04:3e:d0:45:e0:
f4:b2:94:da:f2:21:9b:21:df:46:6c:0c:cd:8d:0d:46:c3:f9:
7d:54:4e:43:32:f5:7a:d2:31:43:08:5a:ae:69:be:53:70:98:
2f:31:6f:59:af:f6:12:78:d6:fb:45:64:cc:0a:29:0b:27:a1:
20:a7:fd:ef:4e:02:92:9a:de:ca:80:52:a1:2f:57:d6:cc:e2:
28:a2:f6:72:79:8f:fa:ba:24:2e:d7:e5:60:54:09:af:1d:82:
cf:69:1b:d5:6b:e6:41:db:4d:52:77:73:b3:cc:ce:ec:a6:7f:
81:ea:6d:f8:1f:4b:20:02:d0:9f:4b:1a:cb:f8:d5:74:4e:c9:
6a:42:2b:45:17:17:cc:28:89:e5:f0:e9:6b:2e:54:43:2e:b1:
a9:2e:5f:04:a1:a9:54:67:71:8e:41:87:f7:fe:14:27:bc:c3:
c7:fa:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:44 2025 by rpki-client