Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFiSYplV1kkxjN_ALy9VQIkknvg.roa
File: oFiSYplV1kkxjN_ALy9VQIkknvg.roa (raw, json)
Hash identifier: YWySix7HdtiyUvJz3FjoyXV4Vn7T19LafS/MNnW7BJI=
Subject key identifier: A0:58:92:62:99:55:D6:49:31:8C:DF:C0:2F:2F:55:40:89:24:9E:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893D5AD4983D5F77AD2C16EEA7BB6EAFFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFiSYplV1kkxjN_ALy9VQIkknvg.roa
Signing time: Mon 10 Jul 2023 01:11:50 +0000
ROA not before: Mon 10 Jul 2023 01:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3d:5a:d4:98:3d:5f:77:ad:2c:16:ee:a7:bb:6e:af:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 01:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a05892629955d649318cdfc02f2f554089249ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:bc:46:ec:09:47:4c:44:fc:f4:2f:13:fc:
61:2f:9e:16:c9:f6:5f:c2:3e:c1:bf:30:f3:ea:bf:
c7:23:87:31:fc:0b:c3:e5:73:df:bb:b8:b0:99:ac:
28:f9:31:c4:12:87:37:65:2a:7b:db:5b:16:d1:92:
44:f9:25:00:ad:d2:25:1a:bc:34:be:11:4e:20:50:
1f:97:db:85:c2:db:6d:72:31:0c:ad:1c:65:17:a3:
e4:e7:d2:f6:81:37:8e:55:f6:d8:d4:41:89:e4:85:
98:7c:4f:0b:39:b0:4c:ad:b6:e6:32:32:5f:db:b3:
4f:9a:ea:a6:ed:6a:c4:5b:9a:2d:86:ad:16:dd:ab:
7c:a4:54:cb:14:7f:b7:d7:55:ba:29:c8:70:7b:c0:
66:12:f3:54:e6:fc:b4:49:4c:b3:5a:6a:83:44:2f:
6f:31:31:d8:49:93:28:0d:a1:90:8d:5e:43:f6:a0:
3d:d1:ca:0e:ba:29:b6:c6:f0:40:0a:b2:c2:0e:12:
e7:56:6b:ee:ff:7e:93:9e:55:e2:ca:d7:da:cc:90:
4d:d0:a6:af:68:b5:0e:8f:49:42:41:7b:22:35:38:
1a:2f:1d:30:de:2f:fd:e1:ab:2c:a5:ad:25:c8:22:
bf:b1:ac:18:15:07:51:ea:94:eb:50:ce:f1:0a:77:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:58:92:62:99:55:D6:49:31:8C:DF:C0:2F:2F:55:40:89:24:9E:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFiSYplV1kkxjN_ALy9VQIkknvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:17:ad:b7:92:ba:ad:a4:4c:59:23:dd:d6:14:44:55:53:ee:
32:bd:55:39:a3:e5:92:f7:f4:57:1c:58:fc:4a:eb:3d:be:57:
b1:10:4d:7b:1b:25:04:7d:dd:33:83:a0:60:68:e6:74:65:c7:
5f:e5:79:8c:69:3e:29:b1:21:62:47:07:d3:e8:b5:80:1f:34:
0f:e9:49:bd:da:81:54:c1:d7:cd:53:2c:6b:86:f2:b8:2f:d1:
f0:61:3c:ad:7b:34:ae:5f:a3:cc:93:9c:42:5a:90:d7:9b:3b:
77:cb:b8:8e:01:75:88:68:5f:97:95:bc:eb:15:42:e0:ee:a2:
1e:6e:c8:f3:e2:50:ba:a6:b0:4b:64:05:74:68:41:2a:1f:67:
50:8e:49:04:eb:b3:1c:f6:31:ea:f9:49:33:40:ba:11:44:bd:
8d:bb:da:dd:09:2b:f6:d0:d3:14:7f:1a:be:59:23:26:83:ce:
ee:47:09:fb:d8:f7:85:69:0d:5b:b8:fc:b5:d6:2e:b2:68:bd:
0b:8d:f2:95:0c:74:38:1b:c3:ea:a5:b7:ff:19:82:8e:63:42:
d9:15:20:67:3f:38:93:e9:50:53:4d:d9:59:84:18:ea:c3:30:
26:aa:47:27:71:bb:d2:7f:96:24:08:7f:fb:be:5e:d5:5e:eb:
bb:69:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:13:48 2025 by rpki-client