Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7O0HJNizaGHOnreEex77SHrjRc.roa
File: o7O0HJNizaGHOnreEex77SHrjRc.roa (raw, json)
Hash identifier: ZEx86lr+NVOZjUtRSaTVvTBxuGaiMuhz1gXxIhPLcdQ=
Subject key identifier: A3:B3:B4:1C:93:62:CD:A1:87:3A:7A:DE:11:EC:7B:ED:21:EB:8D:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B0279A58482F212D6C7F5FE84FA76CFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7O0HJNizaGHOnreEex77SHrjRc.roa
Signing time: Mon 12 Jun 2023 15:09:25 +0000
ROA not before: Mon 12 Jun 2023 15:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:27:9a:58:48:2f:21:2d:6c:7f:5f:e8:4f:a7:6c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 15:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b3b41c9362cda1873a7ade11ec7bed21eb8d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:cb:00:98:d0:6e:fa:50:24:80:18:a2:48:
31:83:43:de:41:28:7f:24:52:92:77:6c:7b:12:20:
d5:b9:59:f0:71:a6:e8:b9:99:2e:14:ec:c8:bd:a8:
9b:66:59:6d:6e:d8:8b:44:37:8a:c2:67:a6:61:f7:
1f:ba:00:42:9d:37:79:b7:30:cb:57:14:ba:c1:29:
ca:13:7a:e1:dd:45:77:35:ff:8a:7c:5d:2b:bf:1a:
91:17:14:68:58:4e:e4:76:d6:f0:d8:25:46:e3:36:
5b:b4:81:ab:c0:8a:35:30:ba:83:09:0f:c8:df:61:
85:63:59:ca:d9:d6:8f:4c:0c:4a:d7:46:cf:1e:3f:
eb:6e:58:39:d5:e0:f5:0b:f1:3f:d7:8a:18:cd:f9:
50:5f:60:b4:63:5c:88:2d:62:b4:4b:0a:e7:69:bf:
61:13:c4:17:a0:2d:22:dd:5d:b5:f1:c2:ec:9f:31:
30:d4:d6:bc:68:6d:fe:8e:5e:e2:ba:1f:1b:aa:72:
79:48:29:d1:a7:d5:13:d2:48:59:92:20:80:3e:2e:
00:57:8f:6a:d1:e2:5c:c1:89:68:ab:11:72:e5:8e:
dc:32:dd:e9:85:10:11:ed:d7:cd:51:2c:96:8e:2f:
50:06:84:11:7a:a7:6f:92:db:fe:74:2b:cf:b4:72:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B3:B4:1C:93:62:CD:A1:87:3A:7A:DE:11:EC:7B:ED:21:EB:8D:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7O0HJNizaGHOnreEex77SHrjRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:29:5f:1a:ce:11:63:02:33:c4:5d:a7:99:af:97:2d:4b:b2:
e8:4d:60:de:14:7e:76:73:7b:14:7f:ce:6f:fc:78:a6:71:1f:
4f:a0:52:88:47:84:5f:f8:32:d0:e7:8b:c2:bf:0f:d5:3b:0e:
6a:5f:22:9b:b6:7e:c7:e1:c4:1d:e1:4f:3e:25:3f:80:02:1b:
76:2e:7a:e9:61:34:ee:fe:4e:aa:f6:0c:80:8b:dc:01:2f:94:
40:73:7a:d1:d9:52:54:75:95:f6:b8:56:36:b1:9a:f5:ca:b2:
35:8d:be:35:58:bb:95:a9:5e:3c:c3:8c:31:29:28:61:3c:37:
d9:a9:72:a7:7b:22:25:a7:7f:60:c2:f4:af:57:d9:87:c4:e8:
b8:34:73:ba:5f:dd:44:a5:af:63:de:7f:ce:45:44:89:a5:a3:
26:3b:09:06:47:4b:f4:e9:45:e1:66:26:65:b5:4b:1a:7b:b4:
a2:6b:26:48:ca:ac:7b:c8:5c:a6:fa:fd:a2:3e:ad:8a:e1:1f:
0b:78:29:3d:34:47:9f:27:0d:ae:f7:d8:37:76:e5:6a:49:3b:
8a:c1:a9:5a:df:08:d1:45:c6:15:fe:e5:2b:f6:fe:a5:e0:a7:
b1:d3:62:b2:82:2b:7f:9a:1c:c6:2a:73:6e:81:32:47:2b:8b:
eb:5d:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:11 2025 by rpki-client