Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oUbiIEg8YFV1iNZt42PcliH20Hg.roa
File: oUbiIEg8YFV1iNZt42PcliH20Hg.roa (raw, json)
Hash identifier: wdBxlZO1uEDIcepQmZeH9EHuGXeWZ72/GymMUnVYVtw=
Subject key identifier: A1:46:E2:20:48:3C:60:55:75:88:D6:6D:E3:63:DC:96:21:F6:D0:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CB3D4631BE59107B4149ACE3DC8DDB54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oUbiIEg8YFV1iNZt42PcliH20Hg.roa
Signing time: Thu 01 Dec 2022 01:11:41 +0000
ROA not before: Thu 01 Dec 2022 01:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cb:3d:46:31:be:59:10:7b:41:49:ac:e3:dc:8d:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 01:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a146e220483c60557588d66de363dc9621f6d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:2c:1f:22:83:2b:ca:5e:ae:5f:a8:fa:cd:
5f:c7:96:d7:25:7b:de:6d:69:7e:b1:b2:0e:42:d6:
1a:60:da:c8:86:c6:ab:a4:53:aa:38:a3:df:02:cc:
54:5f:3a:c8:0a:2a:56:99:f9:6c:0f:74:5f:0c:23:
69:09:8d:90:92:b4:8e:35:74:6e:9c:2c:99:ca:4e:
10:9c:68:a5:98:5a:ce:62:b4:84:dc:62:f7:e5:16:
3f:f2:9f:5e:57:9e:70:85:e9:e0:e9:91:b1:68:25:
d1:f5:cd:0c:c6:63:31:5c:2e:d9:82:56:b4:48:75:
82:fc:b6:8c:85:17:aa:32:79:b0:fe:1b:20:c5:39:
ca:39:76:1c:bb:c7:2e:5d:ae:dc:f7:4e:9c:b0:0f:
6a:f1:70:42:e5:df:2a:6c:1a:16:f4:08:7a:13:32:
c0:d1:a3:f2:36:e9:e0:b9:35:09:34:c7:72:22:5d:
8d:e2:de:af:fb:c2:b2:34:08:72:fe:15:a1:28:03:
51:5f:12:35:df:9b:72:24:1d:d2:90:ce:64:47:2b:
d6:90:87:42:17:df:05:84:01:5f:c2:13:c2:54:27:
b1:e7:6b:11:64:0f:dd:08:ee:53:3d:58:76:11:bf:
e4:0e:05:bc:52:41:89:0c:02:3d:ec:66:26:ac:b6:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:46:E2:20:48:3C:60:55:75:88:D6:6D:E3:63:DC:96:21:F6:D0:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oUbiIEg8YFV1iNZt42PcliH20Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:fd:2e:7f:f4:c4:31:1a:c3:d5:e8:80:f9:a7:df:c5:76:96:
b8:33:4c:8c:1f:19:b1:fb:86:36:5d:ec:5f:2b:32:71:e7:72:
62:57:a1:2f:20:f1:58:7d:e9:d9:d5:aa:6b:9a:61:1e:88:71:
60:7e:cd:0a:85:fb:b0:4d:36:ed:c0:ec:f4:63:27:4b:3b:b1:
a3:d8:30:b5:d7:65:a7:a0:9a:a7:95:e2:98:0c:3d:74:e4:65:
ce:ad:36:aa:a5:18:ac:d4:63:57:b6:10:3a:b4:9b:00:39:cf:
83:1c:e3:0c:59:bf:7c:c4:a4:b5:01:b8:23:4d:02:d1:e0:8c:
fb:b2:11:be:98:1c:44:c3:e8:02:16:c6:7d:c8:75:26:50:4b:
a6:b1:49:f7:b3:80:ef:10:a5:3e:26:b8:60:d5:b1:56:17:a9:
e2:b0:db:30:02:a4:70:e8:82:1c:c9:24:67:ae:23:34:ca:03:
5d:89:b5:98:59:3f:62:f3:8e:59:72:28:89:78:dc:cd:5c:56:
a6:df:66:49:d9:42:9f:f5:9f:a6:f0:a8:87:9b:62:33:cf:11:
a1:dc:be:dd:77:a7:3b:7e:15:35:03:5f:92:15:3b:31:9b:43:
61:bc:39:29:2e:63:53:42:7a:8d:27:91:20:08:8f:d1:72:45:
9c:79:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:47:05 2025 by rpki-client