Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTzmV4m48wRF54_nF-WtZ1XZf_Q.roa
File: oTzmV4m48wRF54_nF-WtZ1XZf_Q.roa (raw, json)
Hash identifier: +uwbCPJXHPXvjdkbwdOQm4b/FP1pUpWZMxF+Yt+yQAI=
Subject key identifier: A1:3C:E6:57:89:B8:F3:04:45:E7:8F:E7:17:E5:AD:67:55:D9:7F:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188465E4B73652CE6E25DC7C32351103E70
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTzmV4m48wRF54_nF-WtZ1XZf_Q.roa
Signing time: Tue 23 May 2023 02:09:24 +0000
ROA not before: Tue 23 May 2023 02:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:46:5e:4b:73:65:2c:e6:e2:5d:c7:c3:23:51:10:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 02:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a13ce65789b8f30445e78fe717e5ad6755d97ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:c8:60:d4:3a:42:3c:ff:88:40:18:66:2b:
7d:7c:9a:d2:32:c2:69:d4:51:b0:9c:99:77:a8:df:
af:52:51:19:e0:a2:30:7a:e8:a3:b9:ec:ac:22:58:
0f:b5:03:42:7c:9d:26:3e:5e:d5:ea:b5:33:18:9e:
3a:aa:4e:c0:57:64:aa:1c:c7:3c:56:11:9d:c3:68:
24:46:af:6d:df:a8:66:95:48:c4:27:eb:a7:bd:97:
d3:82:3e:17:16:1d:d8:95:8f:ca:9d:41:05:9a:52:
45:a5:86:96:13:a7:a9:67:82:a2:06:ac:4f:0b:3f:
ad:1e:af:e8:23:8f:37:6f:c0:94:35:94:4f:a8:ed:
fc:ca:59:3d:eb:b2:34:9a:5c:c2:44:bf:52:2c:0e:
6a:19:4b:e5:2d:d6:8a:26:1f:93:be:8d:24:29:a0:
8d:a3:5e:9a:d4:d9:ca:94:82:70:38:b8:15:03:cb:
ff:f8:79:f0:01:da:37:05:dc:89:c9:9d:d8:30:33:
7a:e1:ac:e4:a2:ad:fc:69:32:c3:55:d6:61:40:72:
16:88:23:d8:e4:c3:34:6c:97:8f:9b:5d:4b:6e:f6:
ed:0f:28:38:a4:24:79:d2:86:79:96:21:4f:53:f0:
38:58:20:19:9d:05:f7:c7:a9:d9:0f:bb:01:ea:b2:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:E6:57:89:B8:F3:04:45:E7:8F:E7:17:E5:AD:67:55:D9:7F:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTzmV4m48wRF54_nF-WtZ1XZf_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:9f:04:f4:cb:b1:6d:01:17:9d:4f:2d:20:29:bb:57:19:13:
4a:b6:47:d9:85:8c:9c:5b:17:c9:9f:0b:a4:fc:d2:d7:c8:5c:
bf:61:f8:55:91:42:63:09:4f:90:b8:1f:5a:9f:a5:e4:7c:3e:
d2:d4:e3:5f:4d:e7:a8:2a:3d:c4:c8:7e:5d:05:61:57:a9:1d:
ad:89:8e:8c:62:84:2a:a7:b7:40:ee:44:fe:35:5d:70:6d:98:
e5:81:95:fc:fd:7c:c8:35:e3:62:1a:6d:1e:c4:31:b8:2d:70:
20:73:df:60:0c:2a:55:8e:54:9d:83:e3:28:94:2e:28:6b:a4:
dd:4b:33:2c:6d:d5:67:1f:f9:8d:63:8f:99:cd:fd:f7:f3:90:
bc:a5:ae:fa:7e:ff:5f:22:d2:d8:72:55:81:2b:b8:ab:6d:95:
a9:b5:2a:5e:99:5a:c1:36:4f:98:9b:57:47:fe:a2:42:cc:8f:
ca:83:eb:26:92:cb:6c:e6:18:a4:26:10:a3:5b:3f:b4:66:03:
17:e3:03:67:9b:ff:d9:05:19:61:15:25:28:6c:0f:fb:55:98:
02:b0:c3:ad:3e:95:8c:24:2d:de:3a:c6:fb:b4:86:c3:68:7a:
89:1b:b1:00:ab:a5:11:d1:a2:64:81:15:fc:95:e0:da:6a:f1:
25:f1:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:31:14 2025 by rpki-client