Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFgi8jDFNkqKf6Hk806OQkFr6Nw.roa
File: oFgi8jDFNkqKf6Hk806OQkFr6Nw.roa (raw, json)
Hash identifier: U/JoCkytYka0IVuQIXI9gTVmzRUdmvs0dwvoPIekKLM=
Subject key identifier: A0:58:22:F2:30:C5:36:4A:8A:7F:A1:E4:F3:4E:8E:42:41:6B:E8:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B4D9249C8ED80B32CB598D10C26BD782
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFgi8jDFNkqKf6Hk806OQkFr6Nw.roa
Signing time: Wed 02 Aug 2023 06:04:36 +0000
ROA not before: Wed 02 Aug 2023 06:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:b4d8:effe/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:d9:24:9c:8e:d8:0b:32:cb:59:8d:10:c2:6b:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 06:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a05822f230c5364a8a7fa1e4f34e8e42416be8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:23:97:36:6c:76:27:c7:8e:4e:53:7c:7b:
a3:95:70:8a:27:c0:ab:53:fa:fc:c6:e5:5f:9f:24:
bc:14:f9:dc:11:db:3b:81:9a:8e:70:2d:14:46:5f:
7c:39:c5:72:88:f3:fa:61:25:e7:8f:84:0b:ae:e4:
1c:77:4c:62:28:81:c9:fd:f3:8b:fa:53:17:b5:e0:
1b:fb:6e:60:3b:de:11:27:6a:46:3c:c5:92:8a:31:
25:ac:e5:16:29:74:2e:ce:36:e5:ae:8c:4f:19:1b:
87:d2:b3:75:33:4f:a8:3c:bd:4f:ec:0b:8b:c8:e3:
b8:7f:1d:10:9f:4a:79:52:88:3d:26:44:32:20:0f:
38:9c:83:fa:7b:e0:8d:24:26:e0:8f:00:50:21:80:
3e:60:b4:27:06:30:66:68:a8:27:3e:9f:f4:17:23:
89:51:0e:cb:c3:0e:f2:93:29:a4:15:17:3f:7b:56:
37:5c:c5:ea:7e:30:19:ef:61:e4:bb:2b:6b:3c:07:
82:d9:1c:4a:cd:ed:d0:b7:fc:13:d7:d8:cd:3d:36:
3d:44:db:11:77:c3:39:02:5a:97:c2:77:55:9f:29:
84:8b:76:c3:14:5c:ea:62:e5:ab:a0:24:5e:36:24:
16:33:63:0d:1c:6a:08:da:71:e8:b5:16:cd:66:e0:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:22:F2:30:C5:36:4A:8A:7F:A1:E4:F3:4E:8E:42:41:6B:E8:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFgi8jDFNkqKf6Hk806OQkFr6Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:11:2d:96:bc:b9:b4:d0:4f:51:47:0e:3e:4e:db:95:ce:5b:
c9:ad:de:35:0f:30:16:87:aa:76:75:8d:b0:f0:19:3f:73:d9:
fe:c1:16:3e:a4:42:5e:e0:21:fd:5d:d1:e9:d1:e0:8a:29:1e:
53:87:73:1b:3c:67:b8:a9:0c:73:d1:77:ff:2e:86:0a:a0:f4:
88:73:be:97:02:13:b1:8e:2b:1f:fc:c2:d4:fd:b3:bc:00:09:
32:3a:49:6e:fc:e9:e9:c9:be:51:3a:1b:0b:99:99:f0:5b:42:
bd:da:a5:48:ce:b5:45:fc:ac:02:35:46:5c:17:67:4b:d4:26:
2c:a4:17:5a:f3:d1:df:1f:4b:b1:11:91:c7:ec:ac:c9:61:e8:
67:e8:75:e9:f2:a5:75:fa:77:9c:d5:75:fc:6d:c1:eb:18:d6:
c9:47:7a:43:83:7b:e0:b5:3d:c3:c9:0c:b2:57:da:d6:f5:4c:
a1:67:ce:93:b6:55:c9:36:e4:e3:26:6e:16:a5:1f:5f:b2:79:
35:e4:ce:c6:1b:0d:58:45:ad:28:6c:25:42:0d:a8:18:9f:16:
95:38:32:bd:e9:29:4e:4f:3b:1f:a3:61:c6:a2:6e:02:38:34:
a9:ef:41:80:fa:10:53:fd:0a:41:c7:5a:8b:83:26:6a:07:a5:
61:cf:64:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:00 2025 by rpki-client