Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oHrZLXInPptqdpl7QUE4cGxg3hw.roa
File: oHrZLXInPptqdpl7QUE4cGxg3hw.roa (raw, json)
Hash identifier: iUClnBy0TxFVPC4eKUbvzppiCk3F1UU6fjOPoWyKNoQ=
Subject key identifier: A0:7A:D9:2D:72:27:3E:9B:6A:76:99:7B:41:41:38:70:6C:60:DE:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183395846F3F3ACD06F8314A34F76C15100
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oHrZLXInPptqdpl7QUE4cGxg3hw.roa
Signing time: Wed 14 Sep 2022 00:13:50 +0000
ROA not before: Wed 14 Sep 2022 00:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:39:58:46:f3:f3:ac:d0:6f:83:14:a3:4f:76:c1:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 14 00:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a07ad92d72273e9b6a76997b414138706c60de1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:a0:5b:63:fb:d7:d7:eb:e4:c4:29:45:ca:
b4:b3:e3:39:5f:61:1a:80:9b:9f:a2:83:04:82:f9:
d3:e1:34:b5:c3:10:49:00:19:f4:53:c9:a5:a6:c4:
6e:18:88:a7:c2:85:10:bb:5f:16:c5:05:72:90:34:
72:03:60:f6:ff:1d:62:e7:7f:ab:03:1a:73:21:d4:
ba:26:31:aa:7b:9a:9b:64:9b:0c:61:28:59:09:b6:
79:96:6d:d1:2f:b7:46:fc:37:4b:63:5c:4c:82:62:
b5:fa:11:e0:fc:35:14:46:37:2b:55:a9:ec:d2:ae:
df:bf:68:0a:b3:17:34:09:12:b3:65:97:50:63:d5:
46:4a:ec:02:02:00:6b:4c:54:64:7c:93:36:c9:e2:
95:b0:43:e7:90:33:08:17:36:f3:8a:f3:c8:31:df:
0d:4a:df:bd:ec:d7:56:13:bd:e8:c3:7b:d3:cc:af:
49:d3:c7:5a:a3:e9:16:60:50:70:61:f9:36:70:27:
b4:58:c7:34:76:d3:f3:fd:26:52:00:f0:21:36:ca:
ae:1c:bc:9d:05:fe:ff:a1:d2:7b:a5:fd:6d:a7:da:
4e:02:f7:4b:b0:2a:8e:4c:15:ad:58:33:97:f4:ba:
cf:ac:90:23:80:3c:22:d3:12:89:f0:41:0a:31:55:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7A:D9:2D:72:27:3E:9B:6A:76:99:7B:41:41:38:70:6C:60:DE:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oHrZLXInPptqdpl7QUE4cGxg3hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1c:c1:fa:d7:13:89:b8:4e:14:9f:73:d3:29:f8:30:68:7d:
10:1e:63:a1:61:17:ff:3f:f8:d1:d4:26:e4:bf:5d:2b:af:f3:
05:99:0c:3f:7c:ee:95:67:9f:bd:74:3b:b9:8b:a8:bf:3b:65:
bb:94:77:70:c9:b5:2f:b9:c6:a3:4e:e2:ff:4c:ec:61:20:4d:
6f:82:f4:a8:7d:04:2d:ad:84:3d:7f:60:87:77:2d:e7:dc:44:
ec:05:0d:6e:cf:e7:b7:ae:89:c3:8c:1f:9c:9f:31:16:de:45:
23:90:4c:a7:37:7f:9d:9d:00:db:a5:d4:7d:e5:ca:ee:c2:e3:
e0:e1:70:49:86:87:cd:e8:17:7a:68:ac:65:ae:83:ce:03:df:
93:72:54:d5:33:8c:5e:d7:31:f1:0a:68:f7:99:79:25:58:77:
2c:48:21:ed:85:2a:b9:17:b9:8a:79:5f:b9:29:f6:53:ab:ab:
7f:2c:c6:9e:c9:bc:d6:b0:64:78:d9:d2:98:93:ed:db:b7:eb:
77:d7:61:54:49:b5:9c:40:6f:62:b4:b9:58:df:4c:a7:cf:9b:
65:cf:cd:6c:0e:b4:db:a1:24:de:a8:c2:3d:44:6d:1e:e4:e3:
1a:27:ec:fd:24:08:2f:1a:fc:a5:d3:c8:31:6e:45:4a:76:45:
19:dc:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:54 2025 by rpki-client