Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFomLDI_mMoXZ5_javdv9lgFaWM.roa
File: oFomLDI_mMoXZ5_javdv9lgFaWM.roa (raw, json)
Hash identifier: qUMqEcixIVi4O4x89l4iC93vjHR7FqMzg0g/4Oe7CZM=
Subject key identifier: A0:5A:26:2C:32:3F:98:CA:17:67:9F:E3:6A:F7:6F:F6:58:05:69:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018529A0B0D218B3C16E5172BBB9557A2FE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFomLDI_mMoXZ5_javdv9lgFaWM.roa
Signing time: Mon 19 Dec 2022 09:04:34 +0000
ROA not before: Mon 19 Dec 2022 09:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:29a0:6029/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:a0:b0:d2:18:b3:c1:6e:51:72:bb:b9:55:7a:2f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 09:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05a262c323f98ca17679fe36af76ff658056963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9d:06:e6:95:63:6f:f1:d9:4e:1f:90:09:63:
54:b3:17:56:fa:a3:28:47:29:65:55:16:26:34:cb:
5b:09:3f:1d:45:b6:4c:6f:86:dd:94:b9:60:f8:24:
8a:5b:73:7c:4a:1d:60:15:9c:42:cc:1d:63:18:ba:
cc:96:2f:8b:54:f1:73:8a:76:0f:7d:18:26:c8:63:
2b:e1:b6:34:4b:40:99:71:4e:ac:c0:19:95:f0:0e:
44:d6:dd:7b:bf:f4:77:07:b2:17:2d:25:2e:3d:d3:
70:fa:92:55:bf:9f:26:83:82:7f:a2:58:33:45:02:
4b:a6:fa:6c:35:f6:e3:12:1b:c7:75:ba:d0:9d:76:
44:74:31:f8:29:15:7a:51:bf:b5:62:1a:f3:41:be:
ee:b4:25:a7:77:56:3c:ff:5c:d7:f9:b5:20:b5:19:
d8:d7:20:ce:05:50:6a:3f:df:1f:80:0b:e1:73:90:
eb:45:52:39:8e:ef:86:5f:29:cc:d0:ef:6c:b8:5d:
fb:34:f4:83:70:18:24:ea:bc:bd:24:b8:66:31:32:
39:0c:0c:2d:b2:8d:68:c2:ac:f2:26:e0:62:12:27:
a5:9b:46:e9:bd:33:36:40:e3:c0:97:c2:13:e0:94:
ca:56:2f:79:33:15:2b:83:2e:5a:1d:15:33:ec:e1:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:26:2C:32:3F:98:CA:17:67:9F:E3:6A:F7:6F:F6:58:05:69:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oFomLDI_mMoXZ5_javdv9lgFaWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:f3:f0:44:ca:b8:cf:5d:02:e8:6d:e8:b9:67:6a:d6:f0:f5:
59:5f:81:8b:f0:88:d8:68:ec:9a:43:1e:86:6a:4d:c7:5f:90:
ec:2a:a0:a9:e8:dd:c0:f4:bd:18:0e:31:bb:3f:80:1c:b4:f6:
35:29:2c:6b:fe:c7:4c:97:4f:0f:92:ac:89:81:2a:f1:d9:c1:
20:0c:54:2e:66:b8:83:4f:43:f7:99:ff:97:c5:c5:11:5b:19:
d3:7c:d4:b4:7a:97:84:1a:3b:02:e8:97:34:20:2b:01:fb:c6:
59:96:e4:9a:79:2f:0f:50:1f:38:14:ab:76:28:03:a4:ea:f3:
ad:40:80:35:3e:e9:21:e5:15:00:d0:06:03:92:64:c4:c7:ea:
7d:ca:26:e5:28:8f:e6:87:aa:22:e9:e2:05:a2:a2:23:74:f1:
30:d8:7d:0f:2e:eb:0c:09:36:b2:04:86:d6:b3:77:8c:c1:db:
d2:34:56:e7:cd:51:87:39:c6:96:4a:d5:a2:39:f0:cc:ef:d4:
08:78:0b:02:a6:71:a7:93:1f:c6:3f:25:bd:fc:9c:a0:35:46:
bb:1e:82:1e:aa:58:6c:3d:c6:dc:21:9f:6b:d4:53:1d:76:89:
a8:b0:91:89:aa:2e:cb:5d:4e:64:46:bf:eb:55:59:a7:4e:52:
d5:ae:ad:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:26 2025 by rpki-client