Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRtJCMrH8neONmWpkWdeuFPbl5A.roa
File: oRtJCMrH8neONmWpkWdeuFPbl5A.roa (raw, json)
Hash identifier: xpqvxE6SuSsBIg7FAd2tpujPmeCnfsgDFhfVU2W8tSw=
Subject key identifier: A1:1B:49:08:CA:C7:F2:77:8E:36:65:A9:91:67:5E:B8:53:DB:97:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F6527D1C5F64E868EC7AC9EFE30DC421
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRtJCMrH8neONmWpkWdeuFPbl5A.roa
Signing time: Mon 14 Aug 2023 23:12:28 +0000
ROA not before: Mon 14 Aug 2023 23:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:52:7d:1c:5f:64:e8:68:ec:7a:c9:ef:e3:0d:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 23:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a11b4908cac7f2778e3665a991675eb853db9790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:a9:20:3d:8b:9a:fd:57:25:54:cd:85:3a:
8e:ee:50:6a:57:1a:ad:4f:67:94:58:1b:fd:08:1b:
fe:af:cc:f1:91:ab:f1:b0:07:10:9e:bd:30:09:10:
76:b7:75:14:df:b5:bc:5c:17:41:7a:cd:4b:58:6a:
a4:eb:e9:aa:f6:ae:e2:93:12:5a:02:23:63:52:ed:
77:a6:fb:9a:13:32:1c:a0:23:6c:27:cd:f5:7a:cd:
22:e8:93:69:97:02:b3:01:32:ff:f9:11:87:ee:f7:
52:4e:93:d4:da:d4:06:31:9b:4d:3a:f4:87:ae:e0:
32:35:fc:09:f1:23:fe:9f:82:f1:0d:aa:2a:43:06:
d7:c9:0e:3a:14:96:b0:4b:63:3e:66:db:10:54:36:
7a:cb:e2:69:97:66:15:55:d9:b0:57:ce:cf:18:59:
75:c1:90:c8:7e:b4:8e:33:6a:0b:cd:5d:8f:c1:38:
f3:c6:75:a3:36:87:01:35:b9:13:b4:4d:78:07:7c:
58:a2:1c:f5:eb:24:15:f1:f2:e5:ea:99:39:91:5c:
1c:41:3e:7a:71:2f:f3:85:1a:10:f2:68:60:b4:6c:
70:52:f6:eb:a3:cf:04:f9:f2:8b:18:86:b6:d8:3d:
50:55:2e:09:85:23:2f:30:49:4f:74:a0:f8:3a:82:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:49:08:CA:C7:F2:77:8E:36:65:A9:91:67:5E:B8:53:DB:97:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRtJCMrH8neONmWpkWdeuFPbl5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:fd:3f:ac:d9:82:2f:0e:8e:fe:f1:48:31:06:d2:62:e5:24:
63:f9:0f:c0:81:91:14:5f:6d:8f:27:6f:8d:36:a4:80:0e:4e:
1e:89:04:b1:ce:92:e1:0a:fc:84:f5:13:93:3e:b2:36:32:07:
de:4d:b2:52:24:7f:86:8d:9b:24:d2:27:3f:e2:bb:c2:69:e1:
81:f8:f8:f0:2a:17:81:c5:e0:5d:fe:a1:47:f9:d8:75:6c:71:
a5:7f:0e:f4:dc:71:dc:39:01:1d:e7:46:e1:73:31:69:53:ed:
e1:24:90:f8:13:78:63:6d:9a:a2:d3:d6:b4:1e:38:f0:81:be:
97:5d:58:93:20:55:6a:09:17:01:84:c4:6e:dd:19:2e:20:49:
12:86:76:9b:aa:66:c8:93:ff:8c:aa:a4:a5:db:a7:9a:a8:e5:
b3:53:b1:d7:53:cf:b9:b6:6e:99:f3:d2:4f:a4:93:37:06:56:
f9:46:7c:4c:84:ef:f9:f8:64:45:d1:70:31:69:8a:5f:cc:64:
e8:77:ef:c9:ac:07:a9:79:da:b4:9e:34:08:2c:39:d7:d2:9e:
86:9b:43:06:96:fb:8b:c5:4b:26:63:e6:5d:e4:73:35:39:02:
5e:30:c1:b0:0a:47:7a:b8:87:0e:96:bd:1a:ab:6a:de:45:4d:
4b:4e:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:08:58 2025 by rpki-client