Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLITUhPkCjQmOLWfAaGIUsHQXH0.roa
File: oLITUhPkCjQmOLWfAaGIUsHQXH0.roa (raw, json)
Hash identifier: DpCt6A5EhavWntowOhHC6dAL44ZeNEzJhFVHZDszwFo=
Subject key identifier: A0:B2:13:52:13:E4:0A:34:26:38:B5:9F:01:A1:88:52:C1:D0:5C:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018857843F915A877BC9117BD987D9A8DD67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLITUhPkCjQmOLWfAaGIUsHQXH0.roa
Signing time: Fri 26 May 2023 10:04:24 +0000
ROA not before: Fri 26 May 2023 10:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:5784:341b/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:84:3f:91:5a:87:7b:c9:11:7b:d9:87:d9:a8:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 10:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0b2135213e40a342638b59f01a18852c1d05c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:2f:34:9e:b7:f6:72:75:a0:4d:ce:a8:36:
8e:c5:27:67:5a:8a:7d:d0:58:3a:09:13:37:7e:fa:
99:7c:86:1d:0d:f8:07:f3:75:07:6a:9b:93:3f:60:
77:55:52:72:a9:be:db:bf:2f:3a:bd:6b:5e:a3:7d:
a2:a4:27:5e:af:ab:6f:aa:1d:76:40:ca:6a:d2:c4:
1b:71:cf:c7:c4:83:ba:c2:c8:56:5f:61:3f:de:92:
5c:0c:45:fb:2d:94:bd:39:63:ae:3e:0f:80:ec:65:
94:3f:88:24:af:51:5d:d1:79:14:70:7d:c6:0c:cc:
ba:02:f6:c2:71:57:92:06:06:ae:20:c8:fb:30:29:
45:f5:df:c0:eb:d4:4d:d3:0a:83:21:f4:4e:f7:c6:
0c:ae:e0:f6:3d:48:4d:44:6e:5f:b1:c2:83:dc:1a:
2d:bd:18:bc:39:02:34:60:94:a1:6f:32:01:c1:36:
66:ec:38:cf:75:c6:09:49:c4:37:fd:17:97:ba:e8:
bb:41:1d:8b:c8:62:e8:bf:ab:7b:e2:c6:c3:a3:b8:
0e:5e:f4:95:cf:30:64:0c:aa:6a:8e:15:3c:44:90:
dd:2f:ac:0d:31:77:4a:b7:f9:24:02:b9:3e:48:9f:
f2:01:f6:6d:a6:8c:65:6e:bb:77:fb:18:6d:d0:00:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:13:52:13:E4:0A:34:26:38:B5:9F:01:A1:88:52:C1:D0:5C:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLITUhPkCjQmOLWfAaGIUsHQXH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:5f:19:e2:8e:87:3f:c3:95:1b:01:02:e5:43:ed:32:30:5f:
06:39:22:b3:2e:23:07:40:7a:71:16:ca:4b:34:e4:a4:69:5f:
e7:0a:95:5d:f0:84:24:7e:3b:4f:15:48:83:f4:ba:8a:e0:83:
bc:66:a8:1f:46:46:cd:20:03:20:85:ca:22:c7:5b:f0:17:33:
54:2f:cc:2f:be:ea:a1:16:ff:68:17:1a:ba:fc:02:8d:d4:4b:
fb:51:63:9c:4e:26:69:52:98:df:61:78:2c:f4:c6:6a:42:3b:
a9:93:c8:84:d9:1e:6c:1a:05:ff:75:c0:95:76:fc:c8:fc:1a:
07:ae:3e:4f:3e:3f:8a:74:62:3c:85:ef:85:99:01:2b:42:08:
f8:b1:30:eb:58:a8:84:27:11:cf:32:a2:80:ec:6d:c2:37:77:
f9:36:fc:a7:3f:48:b9:5c:fa:e0:98:c2:3d:c2:41:18:5c:48:
fc:8f:69:50:d0:26:a6:96:54:1b:f8:ad:04:8b:fc:50:62:ba:
c4:2c:d6:d4:64:e1:66:ca:3b:b7:79:4f:c9:c6:9a:89:80:0a:
77:c4:7d:8a:e2:0c:72:03:12:eb:fa:fe:35:c0:0d:15:87:a3:
20:fd:70:2b:00:e7:34:c1:89:4d:08:52:6b:19:60:8c:59:71:
ca:fe:15:af
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhXhD+RWod7yRF72YfZqN1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI2MTAwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGIyMTM1MjEzZTQwYTM0MjYzOGI1OWYwMWExODg1MmMxZDA1YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOcvNJ639nJ1oE3OqDaOxSdnWop9
0Fg6CRM3fvqZfIYdDfgH83UHapuTP2B3VVJyqb7bvy86vWteo32ipCder6tvqh12
QMpq0sQbcc/HxIO6wshWX2E/3pJcDEX7LZS9OWOuPg+A7GWUP4gkr1Fd0XkUcH3G
DMy6AvbCcVeSBgauIMj7MClF9d/A69RN0wqDIfRO98YMruD2PUhNRG5fscKD3Bot
vRi8OQI0YJShbzIBwTZm7DjPdcYJScQ3/ReXuui7QR2LyGLov6t74sbDo7gOXvSV
zzBkDKpqjhU8RJDdL6wNMXdKt/kkArk+SJ/yAfZtpoxlbrt3+xht0ACBdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKCyE1IT5Ao0Jji1nwGhiFLB0Fx9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb0xJVFVoUGtDalFtT0xXZkFhR0lVc0hRWEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC5fGeKOhz/DlRsBAuVD
7TIwXwY5IrMuIwdAenEWyks05KRpX+cKlV3whCR+O08VSIP0uorgg7xmqB9GRs0g
AyCFyiLHW/AXM1QvzC++6qEW/2gXGrr8Ao3US/tRY5xOJmlSmN9heCz0xmpCO6mT
yITZHmwaBf91wJV2/Mj8GgeuPk8+P4p0YjyF74WZAStCCPixMOtYqIQnEc8yooDs
bcI3d/k2/Kc/SLlc+uCYwj3CQRhcSPyPaVDQJqaWVBv4rQSL/FBiusQs1tRk4WbK
O7d5T8nGmomACnfEfYriDHIDEuv6/jXADRWHoyD9cCsA5zTBiU0IUmsZYIxZccr+
Fa8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:10 2025 by rpki-client