Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oO1i5ugtMquUMWO3NxEpyCd7ktU.roa
File: oO1i5ugtMquUMWO3NxEpyCd7ktU.roa (raw, json)
Hash identifier: lRbHW5H2+mKEuvf1akzyoMk/sE4Wh/UKpx+p06Xvs5c=
Subject key identifier: A0:ED:62:E6:E8:2D:32:AB:94:31:63:B7:37:11:29:C8:27:7B:92:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018612F064743D844F1B62815DCF88F40CB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oO1i5ugtMquUMWO3NxEpyCd7ktU.roa
Signing time: Thu 02 Feb 2023 16:23:09 +0000
ROA not before: Thu 02 Feb 2023 16:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:f0:64:74:3d:84:4f:1b:62:81:5d:cf:88:f4:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 16:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ed62e6e82d32ab943163b7371129c8277b92d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:30:2f:4f:68:79:5a:9e:3f:ab:e9:c8:e2:
74:51:8e:6d:66:d5:25:9d:65:09:25:fa:ba:c7:0d:
f2:33:9f:7f:7e:4f:f1:de:1d:24:9b:64:cf:0c:55:
56:53:9b:39:bc:af:d4:71:61:37:82:6a:ad:b2:d8:
b0:f1:1b:0b:07:e3:53:5c:7e:54:4f:49:b1:65:c9:
87:6a:c6:d3:e7:33:74:a9:47:80:86:65:c6:98:10:
ec:6f:60:ba:0d:f0:e4:84:55:bf:bb:98:61:66:ec:
8d:73:60:78:d0:2e:44:70:c5:86:37:0e:5d:db:fe:
95:21:41:2b:32:49:4e:f6:68:07:91:33:5f:0d:75:
d3:2f:f0:54:44:a6:a5:45:65:3d:f5:3b:53:00:9e:
68:4c:48:42:5c:fc:3c:72:50:85:b6:5b:b0:7a:10:
dc:3e:b5:e0:2d:62:31:46:75:5a:60:07:bd:e1:58:
80:12:1f:fc:1a:97:16:1d:dc:ca:1c:6a:75:61:89:
96:91:c5:86:22:ec:ed:dc:cd:f8:71:cb:1a:56:7b:
26:e3:03:61:33:a7:cd:07:a8:a4:5a:c1:30:b2:43:
ec:8f:05:25:6e:c2:41:8a:43:54:53:28:58:ef:d6:
39:04:6d:e5:98:ad:6f:42:a8:85:b6:2b:84:a3:ef:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:ED:62:E6:E8:2D:32:AB:94:31:63:B7:37:11:29:C8:27:7B:92:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oO1i5ugtMquUMWO3NxEpyCd7ktU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:06:f8:66:8c:ba:29:a8:bb:16:ae:3f:7c:2e:4c:73:40:2f:
a8:5b:12:a1:4a:c2:6b:9c:31:8d:a0:0b:0b:f2:d5:1b:2e:ea:
bb:d7:41:72:1d:f4:98:62:1f:a0:1c:0d:fe:62:c3:da:84:cc:
a0:bf:8f:4f:0d:a1:b1:33:d3:1a:f1:ea:be:5a:0b:aa:a5:9b:
6c:cd:2f:d9:54:90:3a:20:86:35:b7:31:80:2c:24:3c:b2:c3:
a8:ba:d7:d0:36:d6:3a:37:55:a0:f2:a0:44:59:a6:a4:29:98:
c9:40:7e:07:6b:b4:53:c8:32:63:2a:bb:c4:90:7a:50:a6:79:
25:48:1b:5b:6e:61:3c:23:f7:87:28:cd:5f:79:29:ac:32:78:
bf:71:f9:cb:89:a2:bd:1c:00:ad:2e:82:4b:ae:bb:03:08:72:
92:d6:96:ec:f3:15:b5:b9:63:e0:52:1f:d5:38:db:20:e4:a3:
9c:7e:e4:b4:6a:46:62:fa:99:19:ae:84:14:90:b6:2e:97:b3:
4f:fc:fc:c8:9b:3c:2c:a2:fc:18:db:1c:a0:0f:74:f2:a9:f5:
49:29:c3:10:6a:7d:37:1e:21:7e:30:4a:de:6a:11:0b:05:8a:
0e:90:e1:55:14:b0:cb:ca:29:02:a4:06:61:a7:59:bd:7a:5e:
a4:ba:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:26:22 2025 by rpki-client