Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oVS4aFLcdLdiD_b70oGaSX7-T5o.roa
File: oVS4aFLcdLdiD_b70oGaSX7-T5o.roa (raw, json)
Hash identifier: bZJPglqbpJugbngbeOwv9eZdjR0KABZUAyH+pvOrxeo=
Subject key identifier: A1:54:B8:68:52:DC:74:B7:62:0F:F6:FB:D2:81:9A:49:7E:FE:4F:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862A48F5AE62108D7397FD9732D6485D53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oVS4aFLcdLdiD_b70oGaSX7-T5o.roa
Signing time: Tue 07 Feb 2023 05:11:09 +0000
ROA not before: Tue 07 Feb 2023 05:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:48:f5:ae:62:10:8d:73:97:fd:97:32:d6:48:5d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 05:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a154b86852dc74b7620ff6fbd2819a497efe4f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:bc:c1:ee:f5:77:37:89:8f:f2:a3:1c:0b:
df:b0:03:3c:75:ed:aa:6f:be:76:67:e6:e4:09:e6:
05:f4:34:44:c2:3e:f1:6c:9a:af:9c:6e:f0:b6:f4:
82:96:05:b1:8a:c1:01:e3:27:16:53:40:02:9b:85:
b9:0c:ce:39:1a:6b:65:20:61:1c:fd:63:d0:5f:b8:
be:c6:69:da:a4:a1:4a:e6:5c:0a:cf:1a:07:c2:77:
7f:9a:f6:a8:02:a6:17:d4:81:38:37:1b:25:ba:f1:
9c:e1:36:da:11:21:fd:63:29:6f:98:bd:e6:a7:e2:
08:52:70:3a:ec:55:d2:e1:74:77:ec:e0:c6:ef:0c:
94:1d:22:81:e1:e5:07:b9:7e:59:9f:86:fa:08:6b:
a0:2a:91:14:e1:72:2e:fe:58:a6:20:b6:20:27:1b:
90:db:a0:ef:e9:35:87:aa:4f:71:2a:84:91:ca:6c:
fe:9a:4d:19:a7:f3:c9:7a:70:e5:62:82:d1:e7:4f:
6e:df:ef:7a:60:59:48:11:31:26:b2:37:b6:90:73:
cc:3d:08:a7:12:71:12:93:62:b2:08:e1:3a:47:d5:
85:ec:9e:44:de:c6:e3:be:34:83:ec:19:1d:3f:7f:
7b:45:9f:25:bb:3e:02:8c:b2:50:a9:4c:2d:df:f0:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:B8:68:52:DC:74:B7:62:0F:F6:FB:D2:81:9A:49:7E:FE:4F:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oVS4aFLcdLdiD_b70oGaSX7-T5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:bf:a8:9f:36:8e:89:aa:5f:ed:81:e2:df:60:73:ce:f7:ce:
49:ed:bd:6c:17:fe:d5:ad:f6:7d:46:08:34:a3:f3:a1:11:1b:
8e:19:87:08:ca:27:ce:38:2a:a3:ac:b2:87:f7:2d:12:10:db:
a4:e5:85:f5:c6:19:9a:f1:75:c0:2e:84:14:bf:a9:16:ce:8b:
11:9d:87:9a:52:5d:b3:4d:6e:e6:48:ad:ee:e2:a2:7e:e5:62:
e9:2f:20:78:44:bb:69:ae:6e:0b:b0:fb:0a:4b:db:54:e8:5e:
c0:f3:f5:12:0b:0d:45:5f:f6:cc:aa:fb:7f:a2:56:a1:de:a4:
0a:c1:1f:cc:e0:77:20:a5:1a:8a:cf:7b:21:2a:1d:f3:2e:17:
83:e4:e5:ff:01:93:66:5d:d1:9d:4c:92:5c:e4:d5:40:c6:3f:
16:f1:e1:e3:3a:50:26:dc:9c:e4:32:0b:c9:c3:53:ba:27:e7:
0b:8f:46:ef:44:78:f3:ac:dc:d4:5f:a5:6a:c7:c2:81:7c:79:
92:62:19:85:c2:18:01:a2:c2:f7:f8:6c:2d:fb:b2:bb:ed:a6:
5f:8e:c7:83:71:3e:99:5b:0d:40:af:ba:dd:94:dc:0a:b9:4a:
70:6a:c6:31:ad:e2:ca:68:6e:f2:c6:b1:77:7f:05:9f:99:8b:
fc:9d:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:51 2025 by rpki-client