Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o98sysgjjrCl17Y6nlgDnaRMhDY.roa
File: o98sysgjjrCl17Y6nlgDnaRMhDY.roa (raw, json)
Hash identifier: NyT9e+BSKFHhbriIYRZrLsrO9zZZDMnSPej8It00/mc=
Subject key identifier: A3:DF:2C:CA:C8:23:8E:B0:A5:D7:B6:3A:9E:58:03:9D:A4:4C:84:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A653A251401AD73DA00CB8C9A1678691
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o98sysgjjrCl17Y6nlgDnaRMhDY.roa
Signing time: Tue 16 Aug 2022 11:04:35 +0000
ROA not before: Tue 16 Aug 2022 11:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:a653:448b/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:53:a2:51:40:1a:d7:3d:a0:0c:b8:c9:a1:67:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 11:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3df2ccac8238eb0a5d7b63a9e58039da44c8436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:65:fd:12:14:9d:9f:c5:85:7e:eb:3d:bc:
7c:00:3a:43:3a:fa:ea:82:72:40:81:e6:72:3e:14:
15:20:60:17:92:05:3a:71:93:1b:f5:ce:45:58:5f:
40:42:1c:74:76:03:16:0f:94:a2:89:e0:59:cb:87:
1e:5d:31:b3:cc:26:1d:b4:20:3e:6f:3d:ab:19:12:
44:49:93:0f:0e:2c:f5:9d:b7:11:90:ea:2f:e9:96:
fe:b3:2c:a4:4a:43:bb:77:67:f7:08:15:99:79:03:
6d:36:52:41:db:49:55:fc:da:78:f2:a9:42:33:bf:
4a:70:ab:f4:60:f6:ed:a3:d9:65:11:38:f4:0b:d1:
39:86:fc:ba:f8:f8:42:e8:2c:03:a9:0d:d4:1e:c7:
ef:6d:47:cb:18:06:a3:a6:c6:70:f8:54:87:67:90:
09:16:28:ce:4b:59:5b:ee:5d:82:55:d2:14:e3:02:
73:ea:d0:77:b8:12:ae:4b:bb:b9:d2:79:0e:b6:20:
6d:be:68:00:ae:fd:65:f4:1a:3d:00:44:1a:6f:0a:
e3:95:7c:dd:33:b5:4c:1c:88:1f:c1:5c:79:e5:b0:
99:39:66:73:5a:86:29:81:fa:ae:07:da:5a:52:d7:
80:3f:1e:ef:4c:cc:2a:4b:dd:97:59:da:df:68:5b:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DF:2C:CA:C8:23:8E:B0:A5:D7:B6:3A:9E:58:03:9D:A4:4C:84:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o98sysgjjrCl17Y6nlgDnaRMhDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:40:4f:54:40:e0:25:54:91:32:92:1b:66:62:a9:8c:01:6a:
ef:6a:03:a2:08:39:e4:8a:82:f1:ac:64:9c:7f:1a:07:f9:a4:
61:9c:e1:cb:03:22:6b:f0:77:ac:89:31:7f:29:46:cb:e1:5d:
2d:b8:ec:ac:7f:d6:88:4a:5a:58:65:f9:1b:78:49:fc:90:7b:
01:49:5f:3b:ff:39:43:11:b2:d9:08:f2:ad:1f:26:b1:f6:9c:
2c:bd:10:bb:41:a8:50:88:ec:cb:16:61:89:ff:27:b0:7d:2a:
71:07:66:02:13:18:ad:a4:4c:f9:f8:7e:d3:48:2b:bd:9a:d8:
c5:58:23:39:d4:cc:cb:85:9b:cf:02:1f:11:cd:07:be:15:4b:
13:ea:8d:d9:85:5f:84:7b:26:1f:f8:c4:0b:01:18:4d:c3:f3:
bb:b5:cb:3a:80:4e:ae:c1:86:e3:f2:e3:c0:33:05:09:fe:26:
ef:39:d0:f9:3d:64:9c:3f:8f:e9:46:97:95:e7:2e:df:20:c4:
64:e8:90:f7:99:d0:b2:30:81:7e:ba:d9:d4:f2:f1:b9:18:ed:
b2:20:c7:58:c2:27:43:11:27:81:9c:65:31:40:2f:91:56:e7:
af:c1:a8:be:70:90:3b:a7:4d:6c:6d:58:48:f3:54:ad:b2:34:
25:22:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 22:53:08 2025 by rpki-client