Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oK5IL6pxkn2NTM3IqHRu2UtybWY.roa
File: oK5IL6pxkn2NTM3IqHRu2UtybWY.roa (raw, json)
Hash identifier: IoEBQGsnj2GEdjsxj3SEsfsG7LzYBB8KBY4SY/bt/Kw=
Subject key identifier: A0:AE:48:2F:AA:71:92:7D:8D:4C:CD:C8:A8:74:6E:D9:4B:72:6D:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185123D201882B296BA49F99297ABD2ADFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oK5IL6pxkn2NTM3IqHRu2UtybWY.roa
Signing time: Wed 14 Dec 2022 20:04:33 +0000
ROA not before: Wed 14 Dec 2022 20:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:123c:b7ab/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:3d:20:18:82:b2:96:ba:49:f9:92:97:ab:d2:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 20:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0ae482faa71927d8d4ccdc8a8746ed94b726d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:f5:7c:a7:bb:c8:ed:3e:dd:5b:8e:07:7c:
5a:4e:3d:1c:4d:b9:5c:ac:dd:3e:94:91:96:54:d1:
0a:06:55:8b:a5:17:cf:98:fa:61:58:1d:2f:46:c3:
2d:d3:85:eb:3e:63:ac:79:3a:0f:f1:8d:e7:6c:4e:
2b:56:26:76:7c:b8:2e:65:b7:85:d7:0e:d3:3f:7d:
37:2a:bd:0b:d3:f5:75:20:fd:5b:26:73:81:8e:54:
99:21:20:43:d5:f0:35:9e:4d:7e:a4:43:5e:5c:a8:
d8:88:9c:eb:10:02:e9:0f:8b:60:b2:69:1f:15:e5:
b6:fd:d1:f8:9e:07:53:c8:ef:c6:27:0b:e8:d3:f8:
62:0a:d9:bf:b6:ef:79:99:48:fb:36:08:ae:83:80:
af:a0:b7:46:f3:08:5a:0d:19:c9:12:24:bb:eb:82:
63:01:10:de:c9:40:46:6d:43:a2:ef:b1:53:af:d6:
e1:3c:51:d7:86:5c:e2:ff:6c:71:bf:d3:3a:25:56:
b7:25:97:83:ce:49:20:69:2a:5a:7a:e2:0c:e3:df:
aa:14:a5:ac:03:f6:d7:0a:fe:21:85:c4:c8:e9:14:
96:a4:51:e4:16:a1:d6:d4:29:43:6d:29:08:fb:01:
cf:95:4c:9a:1f:03:3b:f4:73:1a:fd:0f:fc:ff:de:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:48:2F:AA:71:92:7D:8D:4C:CD:C8:A8:74:6E:D9:4B:72:6D:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oK5IL6pxkn2NTM3IqHRu2UtybWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:be:3c:c1:b2:5b:27:7d:53:fb:b2:ab:25:ea:23:a0:c3:be:
ba:2d:14:72:58:8a:ce:be:c4:47:85:dd:e0:94:b1:ec:17:c5:
8d:8d:42:8e:1b:4f:75:35:2a:2c:32:a7:cd:b9:eb:1c:ba:68:
49:43:2e:40:b7:91:c6:bb:41:2a:4b:be:2c:f9:0b:be:19:49:
28:f3:81:76:ed:27:33:e4:8a:7b:a7:fd:b1:fa:40:18:86:7d:
1b:aa:03:45:23:aa:94:07:17:4e:fc:9d:8c:31:84:6b:ee:9e:
c7:45:92:19:fd:dd:95:97:83:97:14:b2:1d:72:9a:d7:3d:4c:
b1:ed:28:cb:79:1f:05:32:20:c9:82:ae:c8:4d:1e:8b:80:a5:
36:ae:c4:ed:fb:bb:84:e5:15:32:e1:d2:8f:c8:44:28:46:c0:
a9:50:9e:2d:53:f8:42:2a:a7:fd:0a:80:f1:3d:c5:d7:2b:49:
9e:ae:60:e7:78:bc:5c:d0:ac:8f:d7:6f:e0:da:17:8b:dd:43:
0d:61:f4:36:3d:d2:50:35:95:fc:7c:cb:56:26:be:97:40:e3:
57:a7:ac:f1:04:4c:88:c8:0b:77:bf:a9:08:fa:eb:1c:de:b0:
d1:5e:1a:18:05:df:7f:67:7a:67:9a:a9:7f:14:d0:a8:2f:ab:
8b:51:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:42:55 2025 by rpki-client