Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAGEo4X4Ptf7J-mjcoP8k3rf3mI.roa
File: oAGEo4X4Ptf7J-mjcoP8k3rf3mI.roa (raw, json)
Hash identifier: DeEwu9kbCqbBlWMh1n295N1NA+o1xeBynflZCpWcG/E=
Subject key identifier: A0:01:84:A3:85:F8:3E:D7:FB:27:E9:A3:72:83:FC:93:7A:DF:DE:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882F36B42888313862DA49DB7E15708BB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAGEo4X4Ptf7J-mjcoP8k3rf3mI.roa
Signing time: Thu 18 May 2023 14:14:54 +0000
ROA not before: Thu 18 May 2023 14:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:36:b4:28:88:31:38:62:da:49:db:7e:15:70:8b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 14:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a00184a385f83ed7fb27e9a37283fc937adfde62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:61:2e:ae:f0:2f:70:0a:9a:f2:fd:4b:06:
f1:b6:a6:cd:69:f9:b3:cd:2e:ca:13:20:3b:dd:13:
0c:32:85:ed:dc:d7:36:cc:65:59:ad:4b:21:8f:af:
e8:e8:b3:2c:b1:8e:dc:eb:01:e4:af:16:28:70:ab:
c9:57:e6:af:14:18:49:84:fb:2d:16:dc:eb:35:a6:
08:ec:24:67:69:9b:39:ff:a3:e5:2e:bf:fa:38:ca:
5f:e4:59:ef:9b:7b:0d:82:e1:2a:23:63:a3:48:ca:
d3:43:2d:40:aa:03:92:a4:1c:6a:98:4d:d6:29:f4:
8e:5c:58:9a:c0:83:c7:33:38:12:76:bf:e2:1f:57:
b6:78:8a:c3:dc:ad:e9:a6:c7:0e:6b:f4:84:a9:ab:
e8:1f:b8:2c:84:47:3c:ec:63:1f:02:9c:95:59:c6:
da:f0:67:3e:01:69:19:cf:9a:22:75:fb:72:cc:0a:
46:1b:16:da:5b:26:54:18:ed:8f:90:9b:e6:c3:77:
58:db:d8:fa:5f:aa:3b:95:89:75:3d:c0:e9:59:5c:
45:48:70:a6:be:95:cf:55:62:d6:bc:a5:f8:b8:90:
7b:04:f6:21:98:01:b6:19:e6:ae:77:93:5b:b6:08:
12:f3:d5:91:9c:83:e9:75:d0:a6:3e:e6:65:45:16:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:84:A3:85:F8:3E:D7:FB:27:E9:A3:72:83:FC:93:7A:DF:DE:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAGEo4X4Ptf7J-mjcoP8k3rf3mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:bb:fd:dd:6a:5e:32:1b:99:37:2a:d9:16:28:d8:9b:af:5f:
a4:85:e6:9e:3f:f2:87:54:af:21:ff:0f:84:aa:55:e9:51:13:
6b:41:9e:e1:16:31:3b:38:f6:a9:7f:81:bb:00:ad:03:5b:24:
44:86:e6:0c:82:7b:45:34:36:96:0c:bd:67:61:e4:ad:31:e9:
62:6a:b9:16:91:cf:5b:ac:4e:0d:f6:03:30:00:4b:98:03:8d:
27:f7:25:07:b5:ed:a1:f0:98:08:d2:ba:28:8b:0a:7f:ad:f4:
f2:6a:6c:b7:45:75:a0:4c:ee:2e:9b:de:ee:f2:a6:7e:9f:f8:
d7:77:d1:e3:d2:d3:5f:27:76:89:eb:4d:78:bf:bb:33:79:e7:
07:b5:a4:fc:26:c2:44:67:27:86:96:03:d1:a0:b7:0c:cf:95:
d6:a7:e3:ce:24:5e:f5:5b:14:d3:e6:5c:b0:8d:9d:80:e9:b2:
c2:80:39:90:ae:d9:17:97:42:fd:de:36:88:17:fa:23:f3:a9:
bb:37:1c:dd:b6:4c:0c:ce:e7:bf:88:7a:ec:84:89:5c:06:86:
1a:45:30:7f:01:f3:b1:93:ba:79:f5:45:e9:6f:dc:04:58:6a:
67:08:69:c9:29:97:2b:17:8f:24:b1:ec:06:5c:5c:0b:e7:d1:
ad:ef:d4:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgvNrQoiDE4YtpJ234VcIu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE4MTQxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDAxODRhMzg1ZjgzZWQ3ZmIyN2U5YTM3MjgzZmM5MzdhZGZkZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBphLq7wL3AKmvL9SwbxtqbNafmz
zS7KEyA73RMMMoXt3Nc2zGVZrUshj6/o6LMssY7c6wHkrxYocKvJV+avFBhJhPst
FtzrNaYI7CRnaZs5/6PlLr/6OMpf5Fnvm3sNguEqI2OjSMrTQy1AqgOSpBxqmE3W
KfSOXFiawIPHMzgSdr/iH1e2eIrD3K3ppscOa/SEqavoH7gshEc87GMfApyVWcba
8Gc+AWkZz5oidftyzApGGxbaWyZUGO2PkJvmw3dY29j6X6o7lYl1PcDpWVxFSHCm
vpXPVWLWvKX4uJB7BPYhmAG2Geaud5NbtggS89WRnIPpddCmPuZlRRaGQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKABhKOF+D7X+yfpo3KD/JN6395iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb0FHRW80WDRQdGY3Si1tamNvUDhrM3JmM21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABS7/d1qXjIbmTcq2RYo
2JuvX6SF5p4/8odUryH/D4SqVelRE2tBnuEWMTs49ql/gbsArQNbJESG5gyCe0U0
NpYMvWdh5K0x6WJquRaRz1usTg32AzAAS5gDjSf3JQe17aHwmAjSuiiLCn+t9PJq
bLdFdaBM7i6b3u7ypn6f+Nd30ePS018ndonrTXi/uzN55we1pPwmwkRnJ4aWA9Gg
twzPldan484kXvVbFNPmXLCNnYDpssKAOZCu2ReXQv3eNogX+iPzqbs3HN22TAzO
57+IeuyEiVwGhhpFMH8B87GTunn1Relv3ARYamcIackplysXjySx7AZcXAvn0a3v
1Mw=
-----END CERTIFICATE-----
Generated at Thu May 1 01:25:57 2025 by rpki-client