Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAcR45aDzO290vgfGZN66WrjTXc.roa
File: oAcR45aDzO290vgfGZN66WrjTXc.roa (raw, json)
Hash identifier: uyGmc6PVpQynVI0jhDLiC39gUC8QhhkCtjJW4VDPiGg=
Subject key identifier: A0:07:11:E3:96:83:CC:ED:BD:D2:F8:1F:19:93:7A:E9:6A:E3:4D:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018452AB90AF34F0F386B7EB503BD07F64C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAcR45aDzO290vgfGZN66WrjTXc.roa
Signing time: Mon 07 Nov 2022 15:18:06 +0000
ROA not before: Mon 07 Nov 2022 15:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:ab:90:af:34:f0:f3:86:b7:eb:50:3b:d0:7f:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 15:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a00711e39683ccedbdd2f81f19937ae96ae34d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:31:7d:cc:7f:a4:69:a2:5c:c9:48:74:de:
32:08:55:fb:9f:8f:e3:07:33:9b:1c:d2:80:55:7a:
ea:c6:dc:66:32:7b:f1:ef:7c:a8:02:9c:9b:eb:af:
ac:4d:6a:7b:99:94:a6:2a:f8:8c:d3:a4:10:e2:c5:
7b:32:98:02:bb:e8:e2:03:fc:82:77:7f:ce:89:1a:
a5:f8:2c:d9:b2:89:44:43:eb:17:a3:b4:8f:a7:ef:
b1:02:fc:42:d8:d9:78:d1:8c:bf:fd:be:38:6c:80:
33:f0:63:b4:9a:14:75:7f:d4:d5:10:4f:2d:12:a0:
99:35:88:71:d5:51:1a:b3:cd:78:6f:ae:c6:e4:79:
e2:af:6d:51:86:84:bd:ad:2b:a7:24:0b:da:0d:07:
79:4d:80:d6:ed:ed:77:c4:d5:70:6c:12:ec:7c:42:
9f:65:78:56:47:cd:38:49:d4:a0:6b:a1:e3:76:b1:
f4:07:9d:6b:d5:61:c6:f5:67:4e:31:c6:81:32:ae:
aa:d6:c5:b1:54:2d:2e:4f:50:44:c2:27:40:1a:98:
da:cc:18:d1:8f:eb:1f:dc:8e:05:06:9c:f0:12:94:
08:88:9d:f2:6c:d6:0f:92:c8:01:42:c3:ba:da:2a:
6c:bc:80:e0:63:12:07:12:0e:dd:4c:99:20:e8:0a:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:11:E3:96:83:CC:ED:BD:D2:F8:1F:19:93:7A:E9:6A:E3:4D:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oAcR45aDzO290vgfGZN66WrjTXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:bd:af:42:eb:d7:81:60:8e:25:cc:64:3e:ee:36:a2:f5:38:
b6:ad:f0:2d:4d:97:18:77:70:98:2e:9b:71:21:e0:80:eb:30:
d4:7a:f9:22:d3:42:c8:d9:c9:ce:02:61:db:17:74:c7:5e:e1:
35:bd:e0:a6:88:6d:52:43:d5:af:6d:e8:9b:ce:29:fa:88:51:
35:43:4a:e1:f2:d6:af:70:0d:94:56:ca:22:3d:1e:84:84:18:
a4:1e:46:4e:a7:8c:4e:83:dc:8d:b0:b2:3a:7a:26:21:3d:17:
ca:3c:c5:29:08:02:0e:51:70:40:34:fa:3f:14:5b:99:e4:b2:
05:71:83:96:78:9d:27:35:c9:e3:5d:01:c6:d4:07:e3:c4:06:
88:b4:24:26:2c:11:3e:d9:c7:a6:2c:84:28:a7:88:8a:a5:03:
d6:f2:e2:33:0f:70:e0:50:c2:35:66:ed:7b:7a:ab:8f:89:96:
ab:cc:e5:d5:0c:10:a3:29:13:09:07:29:b1:2b:7d:b2:3d:6f:
bb:66:09:4f:04:22:5b:14:1c:e2:d1:30:6e:a7:20:9b:8c:2b:
23:97:3c:f4:8d:60:f9:3c:c3:63:3b:f3:7f:a3:88:4e:9e:d9:
f0:82:5c:44:1d:cc:74:75:9a:71:ac:ea:6c:4d:cd:78:f1:f3:
95:84:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:35 2025 by rpki-client