Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8Z_44r3bM0GYf6OtbIqUA_03eo.roa
File: o8Z_44r3bM0GYf6OtbIqUA_03eo.roa (raw, json)
Hash identifier: GeINBwd3N/nBpWenqgS+AxHeYhpTS/6uIsa6YTjureQ=
Subject key identifier: A3:C6:7F:E3:8A:F7:6C:CD:06:61:FE:8E:B5:B2:2A:50:0F:F4:DD:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D3C5EEDA232136F261B36A1C0EA478FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8Z_44r3bM0GYf6OtbIqUA_03eo.roa
Signing time: Mon 19 Jun 2023 13:09:04 +0000
ROA not before: Mon 19 Jun 2023 13:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:c5:ee:da:23:21:36:f2:61:b3:6a:1c:0e:a4:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 13:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c67fe38af76ccd0661fe8eb5b22a500ff4ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:31:cd:4c:df:fa:0f:7e:7b:6c:50:4b:f9:
7d:49:d3:97:4f:81:7d:c4:fd:9d:b2:98:ed:ca:67:
d2:62:37:88:85:88:a7:6e:67:54:c7:66:e2:e2:fc:
be:c4:37:4e:1f:da:b6:e9:6f:3a:4c:93:6b:87:e7:
4f:7b:7a:6d:34:d0:c1:2d:ec:af:36:62:ca:86:65:
0d:eb:0d:ab:1c:f0:3d:61:85:34:da:5e:9e:58:d7:
7d:88:20:b5:b2:27:16:0d:70:df:07:08:e3:87:8e:
20:cc:b0:3e:64:b3:47:0e:ff:05:12:4d:b3:92:92:
1e:4c:ba:71:10:93:4d:e2:61:71:30:b5:b4:df:01:
34:92:c0:44:85:6a:27:f0:5d:31:8e:63:4b:56:c1:
53:1d:22:c0:bf:fd:35:6e:d6:e8:88:fe:68:d5:e8:
04:d0:28:53:64:91:70:8d:e1:4d:e5:8c:d1:44:c3:
e5:1f:22:49:23:3e:03:bc:76:8a:ad:52:c2:d4:be:
fd:5a:62:78:58:03:0f:a1:c8:09:ad:fd:bb:42:bc:
ae:d4:a5:6c:4d:2d:38:e4:6e:b3:b8:ba:de:c0:14:
14:ca:20:19:b4:69:e1:f9:b5:62:0d:94:18:cb:ed:
76:ad:4b:34:17:fb:dc:ef:1d:52:3c:9d:f2:18:51:
00:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:7F:E3:8A:F7:6C:CD:06:61:FE:8E:B5:B2:2A:50:0F:F4:DD:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o8Z_44r3bM0GYf6OtbIqUA_03eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c6:2c:2e:eb:0c:ad:f4:b8:8a:9f:fa:a3:22:2d:03:1f:f8:
b5:71:41:5f:d6:ab:ff:04:ba:0f:ca:a3:48:56:2b:83:25:c5:
7e:b7:ec:3f:50:65:d2:af:cb:13:4c:f1:bd:a3:d1:d5:5b:10:
1f:cd:a3:ac:ee:85:5a:0b:45:3c:36:80:a3:a8:97:0d:4c:9d:
05:dd:1b:42:25:11:1e:9a:c1:8e:2c:30:6e:87:22:19:94:ff:
84:1b:7e:3a:2c:4c:36:76:7b:88:d1:09:65:5d:07:de:ac:79:
18:a0:e3:d2:eb:f3:76:d3:2c:5d:05:fa:fb:2b:8a:1a:c4:17:
8e:bc:1d:78:03:74:03:50:5f:ac:b8:71:fb:a7:41:ae:9b:22:
a7:8a:dd:53:17:fc:0e:84:ca:67:6d:db:01:d0:c2:c5:b9:fe:
9a:5e:c1:be:a2:4b:4e:b1:a1:37:b7:aa:96:01:cb:d6:c9:45:
37:8a:59:97:b3:7a:5c:42:51:20:7f:12:db:2b:fc:66:28:8e:
75:3f:3e:ac:88:57:93:a0:0a:0c:cf:21:9b:88:6b:74:29:b3:
5c:66:e1:1d:13:80:12:55:f5:cb:c3:0e:a7:dd:cf:be:14:a4:
85:49:da:25:38:82:11:d9:c9:e3:d2:a7:29:3d:cd:7e:72:1c:
97:3b:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:57 2025 by rpki-client