Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2lVV1zH3GPTPf1gpmveqV08mMM.roa
File: o2lVV1zH3GPTPf1gpmveqV08mMM.roa (raw, json)
Hash identifier: Jb88dqnCzIAU+/dRqLclYcPifjTNIxgwcCE7nLRCkbw=
Subject key identifier: A3:69:55:57:5C:C7:DC:63:D3:3D:FD:60:A6:6B:DE:A9:5D:3C:98:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D2BEF62613EFA51703DE3D3EF2FB1D5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2lVV1zH3GPTPf1gpmveqV08mMM.roa
Signing time: Fri 02 Dec 2022 12:10:40 +0000
ROA not before: Fri 02 Dec 2022 12:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:be:f6:26:13:ef:a5:17:03:de:3d:3e:f2:fb:1d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 12:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a36955575cc7dc63d33dfd60a66bdea95d3c98c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f3:74:a7:49:37:c8:97:08:03:ea:4d:2b:bd:
6b:23:c5:fd:61:6f:5b:af:0e:3a:3a:19:b5:a5:e9:
15:54:c1:49:87:72:ac:18:e7:9d:60:f7:1d:cc:e2:
fe:fa:f6:1c:fc:e5:e1:06:35:e1:f3:4c:e4:9e:a3:
3b:8a:fd:c7:34:3b:04:73:86:99:b9:88:5a:69:16:
e1:06:59:55:97:f1:60:70:a3:b9:3c:db:5e:a4:2b:
a1:da:4a:6c:96:33:b7:c9:d3:20:71:72:92:80:ac:
75:5b:70:8e:ab:4c:43:76:92:62:8d:83:d8:04:f8:
21:05:96:a7:06:f8:32:d1:8d:9f:f9:9d:ac:39:9a:
14:13:e2:2e:32:2c:e5:e8:c3:4c:f6:15:31:64:f1:
37:d3:7c:9e:01:7f:63:c5:01:76:78:fd:3f:b9:cc:
02:c1:a4:c6:ca:5e:86:08:ff:ae:61:86:6d:13:92:
a2:f9:f4:fa:60:f1:d3:c9:b9:2d:93:ab:2b:02:d1:
c8:13:ac:d9:4d:be:69:61:99:a1:17:a1:f7:a4:8f:
03:31:b1:de:10:a3:da:5b:e7:d2:ba:8d:25:76:1a:
6d:4f:cd:89:2f:b0:84:96:37:3b:6d:20:b7:93:80:
e4:1b:5e:1e:4f:f9:29:d2:9f:66:24:41:af:cc:4b:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:69:55:57:5C:C7:DC:63:D3:3D:FD:60:A6:6B:DE:A9:5D:3C:98:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o2lVV1zH3GPTPf1gpmveqV08mMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:79:3d:ca:ee:7f:da:5c:f5:aa:1e:ba:57:94:c3:7d:db:21:
17:6a:73:52:f5:61:28:54:f3:be:26:14:39:b4:cf:5c:e4:08:
2f:d5:db:4b:57:0a:74:61:95:be:d8:09:5b:72:a3:2e:a4:81:
11:41:a7:89:b3:e8:d7:20:c7:1c:fc:dd:6e:97:9b:b2:3c:b9:
8f:68:70:b3:67:73:0a:33:03:a8:6d:10:78:d2:60:0b:eb:42:
96:a0:ce:c4:ff:e7:ad:8e:6d:c4:10:55:34:71:7f:4d:e4:1a:
11:bd:7b:24:e8:47:a8:c0:97:04:92:7f:b1:d4:38:77:57:2b:
90:76:ea:77:05:37:09:e6:ba:a9:76:97:df:6a:ac:b5:2f:c5:
96:84:9e:5c:aa:52:d3:49:06:8e:26:df:75:bc:47:23:a6:0c:
12:c4:16:6f:ea:35:06:80:e2:cd:d6:e9:0d:1c:35:c4:39:32:
9a:6f:14:0e:5e:bf:1c:1b:99:09:a3:b2:d3:cf:0c:5d:95:f7:
8c:04:fe:55:1c:2e:c7:5d:58:78:06:d8:d3:65:1c:5f:e1:7a:
63:d1:02:18:c3:17:21:64:d0:9f:a3:26:77:21:db:7f:a6:82:
d9:d7:94:6e:ef:1b:82:63:8e:72:a9:f6:5e:18:35:48:ae:b3:
00:ea:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:18 2025 by rpki-client