Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oF-0OrIvDl0ZSPq9s3k3MZlQMkQ.roa
File: oF-0OrIvDl0ZSPq9s3k3MZlQMkQ.roa (raw, json)
Hash identifier: 9x8YUZSkPKwCVcGawO+SqsHitGJ+yENxoTj/wEkborI=
Subject key identifier: A0:5F:B4:3A:B2:2F:0E:5D:19:48:FA:BD:B3:79:37:31:99:50:32:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F1A25A123218E2F2F8A77EB9D5FF644E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oF-0OrIvDl0ZSPq9s3k3MZlQMkQ.roa
Signing time: Wed 19 Oct 2022 19:04:52 +0000
ROA not before: Wed 19 Oct 2022 19:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:f1a2:487d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f1:a2:5a:12:32:18:e2:f2:f8:a7:7e:b9:d5:ff:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 19 19:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05fb43ab22f0e5d1948fabdb379373199503244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:44:5b:24:84:1e:d1:05:c7:e1:59:b6:29:
e4:d1:ae:b7:d7:0c:52:f0:72:f6:a9:8e:51:f1:95:
c8:06:50:a3:9b:78:dd:3c:39:9e:a8:a0:a3:8e:40:
11:75:6e:ca:ce:fa:70:76:f9:6a:04:51:dd:7e:65:
6e:11:e0:a3:c9:41:55:8e:35:e6:65:c8:85:74:f4:
94:93:a5:b8:f2:e7:58:31:5d:70:48:ea:41:f8:e6:
94:7a:91:2c:d2:e7:58:81:18:8e:52:4e:42:77:86:
5a:93:1f:15:5e:85:8c:28:23:e2:32:54:e3:99:84:
b3:c9:e3:81:b3:0a:14:ee:09:b9:fd:0a:54:5d:32:
f7:b9:01:33:ef:25:3b:cc:c6:f5:0f:0f:b1:fb:a5:
a5:dd:8c:0c:fc:62:b5:59:8a:95:99:96:c3:f0:3e:
57:72:0c:4b:7d:9f:72:40:8f:8d:ea:65:88:58:3a:
8c:2a:02:33:80:a3:44:9e:80:5b:ed:8e:e4:be:2d:
98:ec:c0:61:c9:07:55:a1:5e:35:07:86:fd:bb:69:
7d:46:39:e8:ad:1f:d2:e0:82:18:75:94:c6:f3:f4:
60:8e:b7:11:3e:a5:f4:5f:13:a7:55:ba:04:4b:ce:
71:03:d9:b1:71:9a:0d:d4:66:15:97:3f:79:38:55:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:B4:3A:B2:2F:0E:5D:19:48:FA:BD:B3:79:37:31:99:50:32:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oF-0OrIvDl0ZSPq9s3k3MZlQMkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7d:04:9d:3e:30:3a:7c:75:3d:e8:20:f5:15:f8:25:21:9f:
55:10:f3:58:e6:43:45:a6:fa:01:dd:5e:50:7a:9f:81:11:d5:
a9:d6:3b:0a:f7:a7:bd:b0:1f:92:53:e6:dc:1e:66:24:b1:f3:
68:23:47:61:cd:6e:fe:7f:85:26:bb:5f:40:a0:fc:72:0d:8a:
6e:88:0a:17:d5:21:8d:8b:ef:15:bd:28:67:ac:55:61:c1:e2:
8f:5f:48:1f:ed:c8:d9:83:5e:4f:74:35:02:72:6e:65:30:79:
3a:73:b8:ac:6d:4f:a3:af:05:02:b8:71:a6:4b:a1:0d:87:aa:
ad:99:a4:db:6f:74:48:42:f9:40:b3:30:29:f2:02:5b:e5:5c:
29:b0:c6:7e:e2:77:cc:64:78:8b:d8:ba:e9:a6:d5:37:37:f2:
33:2a:98:da:9a:28:7b:fe:64:a7:84:b4:4c:3c:53:b1:f5:10:
36:1a:f2:c0:8f:24:00:97:b3:37:0a:6f:3c:7c:77:9b:da:2c:
dd:38:87:c5:5a:8e:86:7b:0b:32:22:92:96:c1:b8:cc:7c:3b:
5c:f1:31:a7:02:4b:5e:83:7b:87:43:2c:58:37:12:46:dd:a2:
ab:34:fd:52:d3:f5:0a:7e:8c:b9:4b:17:55:b5:19:86:86:dd:
b1:73:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:14 2025 by rpki-client