Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oObLKOOUzriloDWwYhomnVfbahg.roa
File: oObLKOOUzriloDWwYhomnVfbahg.roa (raw, json)
Hash identifier: NxoGSIlF61w5N9NSLrlqb7DbCf9W4EAa3cpTdgIVQpk=
Subject key identifier: A0:E6:CB:28:E3:94:CE:B8:A5:A0:35:B0:62:1A:26:9D:57:DB:6A:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CFB3CFE45D004D7874B44EBA3ACA6830
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oObLKOOUzriloDWwYhomnVfbahg.roa
Signing time: Sat 11 Mar 2023 08:05:13 +0000
ROA not before: Sat 11 Mar 2023 08:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:cfb2:f40a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:b3:cf:e4:5d:00:4d:78:74:b4:4e:ba:3a:ca:68:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 08:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0e6cb28e394ceb8a5a035b0621a269d57db6a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:ab:04:12:23:b2:79:43:43:cd:a5:ef:1e:
9c:e0:73:35:65:1e:55:4d:da:2e:e2:c5:65:0b:d9:
85:01:36:ec:b7:a1:db:70:d2:bb:95:4f:22:f7:e9:
b7:e7:d2:fd:a9:b0:a5:11:6e:ef:c1:a2:e4:88:76:
af:23:67:2c:b7:ff:e5:e7:06:be:3b:0a:a9:10:05:
34:23:3b:71:27:a6:3a:d7:67:b9:45:e7:d4:5b:01:
08:0a:a8:91:93:da:e8:ea:2e:4d:e0:c5:a4:9a:ad:
7d:b8:7f:24:58:2d:7e:62:6f:33:65:1b:cd:57:3d:
31:6a:7a:c1:e3:ce:69:f7:01:55:40:65:10:51:48:
32:1e:19:03:28:39:20:04:3d:dd:98:15:a7:5a:dc:
c0:60:ae:87:60:06:ca:49:f6:1b:90:9e:72:ab:cb:
dd:c1:d7:36:e7:a5:36:34:09:d1:d6:04:37:6a:df:
e5:c3:b7:b8:23:f2:3d:00:42:a1:9d:bc:93:95:9e:
6c:b6:87:c2:62:12:b4:de:fc:37:69:3c:a0:06:5b:
f2:3c:4c:a8:d6:d2:e7:9b:df:5b:28:17:2f:df:87:
c6:2e:96:56:f4:3c:1e:d4:1d:86:20:9b:b8:40:16:
aa:05:ac:54:a4:a9:87:c1:be:c1:c0:94:98:a7:0d:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E6:CB:28:E3:94:CE:B8:A5:A0:35:B0:62:1A:26:9D:57:DB:6A:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oObLKOOUzriloDWwYhomnVfbahg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:2b:be:de:d0:1d:0c:1f:db:b0:f5:33:57:4e:50:3c:23:bc:
1b:39:d5:78:b1:66:7b:ee:16:3e:6b:fa:d4:41:9b:7c:46:f9:
14:f4:1a:3c:2b:b9:65:74:3f:bb:98:3d:a6:79:8d:ba:50:42:
62:1f:f0:1e:bf:c0:56:c7:8e:63:54:7f:18:9c:7a:9e:80:e8:
f7:fe:fe:fd:70:39:4d:b2:e1:d3:8a:9d:33:49:5d:11:ae:26:
41:66:5a:c4:c7:65:13:9f:12:f5:77:12:fa:6a:c9:1c:0f:84:
9a:47:8e:e6:8c:f9:be:cf:48:48:e5:cd:71:5f:92:40:c6:a8:
72:88:78:06:41:0a:8d:e8:db:1f:f9:93:f7:ba:cd:f9:ad:88:
15:ca:bd:d6:7c:aa:7d:70:e8:86:70:fa:08:73:a6:b0:1d:af:
12:fd:4d:87:9a:33:54:ac:b2:39:4b:5a:b3:0a:ab:ae:36:96:
cd:fd:48:22:9b:72:65:4e:ad:27:45:08:89:96:08:d9:c6:96:
91:b1:aa:2f:37:17:40:94:08:e6:e1:ef:56:c2:cd:fb:0f:14:
9b:9e:03:69:e6:a3:7c:2d:b5:d1:a8:2a:7d:f1:65:23:30:bd:
c2:18:db:ca:f1:db:29:22:7d:ee:a5:1a:81:e4:ec:3f:a3:4d:
34:d0:86:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:55 2025 by rpki-client