Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLWAlpj1tyDSCh8NUEykrxmKPiI.roa
File: oLWAlpj1tyDSCh8NUEykrxmKPiI.roa (raw, json)
Hash identifier: 2NhgL2dql0UxB81/L7uoA0Hsgr57adxk4smvpNTHF70=
Subject key identifier: A0:B5:80:96:98:F5:B7:20:D2:0A:1F:0D:50:4C:A4:AF:19:8A:3E:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DDE1BA75C28991C726079EABBE1A8B6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLWAlpj1tyDSCh8NUEykrxmKPiI.roa
Signing time: Sun 04 Dec 2022 16:04:28 +0000
ROA not before: Sun 04 Dec 2022 16:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:dde1:6df9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:e1:ba:75:c2:89:91:c7:26:07:9e:ab:be:1a:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 16:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0b5809698f5b720d20a1f0d504ca4af198a3e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:a0:02:2f:62:69:ef:16:07:cb:ca:95:4c:
72:c3:89:37:7c:57:ba:33:3f:7d:88:57:b8:e8:56:
19:a6:36:52:79:a6:0f:59:06:c2:90:58:e6:49:62:
0b:7f:32:c7:c0:10:90:47:8e:49:63:1a:df:9d:85:
2b:1d:59:58:04:06:d4:54:dc:95:c0:3b:ab:18:30:
17:b2:4d:89:a8:e0:28:5e:f2:58:c0:0a:27:3b:91:
c2:ef:ee:d9:c3:64:ef:61:5f:8f:17:df:87:ff:71:
39:2f:3b:af:16:63:f4:76:fe:f7:7a:80:54:37:40:
80:b8:f4:30:30:d1:23:68:7c:e6:02:5a:31:3d:4d:
ce:92:d7:69:c8:b0:0e:ad:54:17:c6:3d:28:82:b0:
c5:ab:3c:0d:18:c7:77:3e:15:9e:b7:5e:95:f6:68:
2f:3b:c2:0b:c0:43:b5:9c:ef:66:04:d7:b9:a4:5f:
1a:ba:df:b2:78:3a:8b:97:a4:d9:c1:10:6d:40:7f:
8d:f2:00:4f:74:81:1f:e0:46:3d:2b:29:4b:80:ab:
09:e8:94:65:81:35:b4:09:18:34:48:fa:10:9d:4a:
bb:5b:88:b3:d3:9c:c6:02:cf:71:a2:d2:e6:27:57:
7d:3f:39:82:a2:e1:83:b4:78:4b:e1:17:31:11:af:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:80:96:98:F5:B7:20:D2:0A:1F:0D:50:4C:A4:AF:19:8A:3E:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oLWAlpj1tyDSCh8NUEykrxmKPiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:3d:4c:7f:5c:2b:fa:3d:94:86:05:f7:3f:9e:50:df:7b:46:
7c:94:a8:1a:b3:79:0b:ad:30:0f:d9:66:b2:9b:2e:42:de:19:
07:3c:bb:cc:48:1a:65:23:8b:92:a5:87:83:d3:0a:8c:f4:74:
0f:e0:68:a9:cd:fc:74:63:9c:22:5c:43:55:e2:dd:5f:00:12:
4d:72:f3:38:a4:48:d1:17:d4:43:0b:f1:9d:9d:71:5c:66:a0:
ce:bd:54:b6:2a:20:92:8f:e9:32:d8:df:94:5d:68:5f:1b:4d:
42:13:f7:30:38:cc:99:c5:65:20:b9:59:60:b2:bd:14:86:dd:
6c:3d:38:0f:a8:34:d1:8e:ea:40:98:cd:a9:52:72:7a:1d:81:
d5:e4:6c:47:83:d0:eb:e6:ed:44:bf:33:84:b0:e4:01:6f:1f:
d7:75:8c:61:33:a7:de:ec:49:89:c3:9e:7d:e9:8c:ce:7d:84:
17:27:fe:ef:bc:b2:3a:d0:11:17:33:95:87:23:f2:b9:aa:db:
8d:af:49:34:ba:df:9e:c8:d6:4a:ec:b3:b7:4d:f5:03:07:b8:
23:22:ce:81:c1:ae:3f:5d:b1:46:25:fe:70:53:e8:a8:dc:0c:
e8:e7:5d:3b:01:ce:5c:1c:10:a5:9e:70:22:5b:8f:e8:5f:09:
55:28:ad:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTd4bp1womRxyYHnqu+GotqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA0MTYwNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGI1ODA5Njk4ZjViNzIwZDIwYTFmMGQ1MDRjYTRhZjE5OGEzZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN2gAi9iae8WB8vKlUxyw4k3fFe6
Mz99iFe46FYZpjZSeaYPWQbCkFjmSWILfzLHwBCQR45JYxrfnYUrHVlYBAbUVNyV
wDurGDAXsk2JqOAoXvJYwAonO5HC7+7Zw2TvYV+PF9+H/3E5LzuvFmP0dv73eoBU
N0CAuPQwMNEjaHzmAloxPU3OktdpyLAOrVQXxj0ogrDFqzwNGMd3PhWet16V9mgv
O8ILwEO1nO9mBNe5pF8aut+yeDqLl6TZwRBtQH+N8gBPdIEf4EY9KylLgKsJ6JRl
gTW0CRg0SPoQnUq7W4iz05zGAs9xotLmJ1d9PzmCouGDtHhL4RcxEa+0XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKC1gJaY9bcg0gofDVBMpK8Zij4iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb0xXQWxwajF0eURTQ2g4TlVFeWtyeG1LUGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIY9TH9cK/o9lIYF9z+e
UN97RnyUqBqzeQutMA/ZZrKbLkLeGQc8u8xIGmUji5Klh4PTCoz0dA/gaKnN/HRj
nCJcQ1Xi3V8AEk1y8zikSNEX1EML8Z2dcVxmoM69VLYqIJKP6TLY35RdaF8bTUIT
9zA4zJnFZSC5WWCyvRSG3Ww9OA+oNNGO6kCYzalScnodgdXkbEeD0Ovm7US/M4Sw
5AFvH9d1jGEzp97sSYnDnn3pjM59hBcn/u+8sjrQERczlYcj8rmq242vSTS6357I
1krss7dN9QMHuCMizoHBrj9dsUYl/nBT6KjcDOjnXTsBzlwcEKWecCJbj+hfCVUo
rWw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:21 2025 by rpki-client