Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oWvD297_uOaR0gE7WqwRqZ6xRbg.roa
File: oWvD297_uOaR0gE7WqwRqZ6xRbg.roa (raw, json)
Hash identifier: LYvPoFQe3u8m9RnPkVAE0+KLb9knRUlhm6v8itIIp+U=
Subject key identifier: A1:6B:C3:DB:DE:FF:B8:E6:91:D2:01:3B:5A:AC:11:A9:9E:B1:45:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D2EADFF03A5FAD0E57D7F59E64881627
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oWvD297_uOaR0gE7WqwRqZ6xRbg.roa
Signing time: Sat 11 Mar 2023 23:04:13 +0000
ROA not before: Sat 11 Mar 2023 23:04:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:d2ea:d720/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:ea:df:f0:3a:5f:ad:0e:57:d7:f5:9e:64:88:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 23:04:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a16bc3dbdeffb8e691d2013b5aac11a99eb145b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:92:01:83:b1:5e:8f:45:ca:76:56:02:9d:
d0:10:29:40:eb:1b:84:b1:38:25:d0:70:90:9a:09:
5a:ea:0f:88:7f:aa:75:e0:15:a0:f0:9d:b7:57:c8:
33:93:23:55:db:1f:9d:ca:f5:2b:c4:59:23:6e:df:
2b:2b:d6:08:6e:1d:f5:39:88:f8:a2:9c:88:63:30:
11:26:5f:b9:2d:72:fc:c1:f7:f3:52:22:c1:5e:2f:
6b:e4:e9:0e:7f:88:b3:40:7e:a6:b7:48:89:7d:4a:
af:87:ac:c7:ff:70:a4:01:b4:fb:f7:9c:21:3c:a2:
41:bb:70:ce:70:b2:cd:c1:3b:d5:90:1f:2b:78:7a:
8d:85:52:24:12:41:0c:e1:82:e7:e2:83:70:e8:49:
a3:b7:ef:3e:1b:ae:fb:1f:96:a7:cd:20:c0:9f:1c:
f0:b6:fe:e0:8c:7b:0e:81:4d:9a:fe:f3:58:e3:f3:
0e:77:3f:0d:96:fe:44:b6:62:37:05:4f:ac:d5:2d:
12:de:95:b2:07:4d:ad:00:79:43:35:ea:fb:7b:60:
7d:26:d2:6f:71:78:12:c2:75:1d:95:e2:4b:1f:48:
70:c6:5d:d0:77:08:b6:22:ab:9d:2b:44:70:44:82:
27:cf:f8:17:6f:ce:33:28:ba:92:52:f9:85:67:03:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:C3:DB:DE:FF:B8:E6:91:D2:01:3B:5A:AC:11:A9:9E:B1:45:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oWvD297_uOaR0gE7WqwRqZ6xRbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:78:aa:ab:78:63:ae:aa:bf:c9:e3:10:8b:59:0d:53:76:9d:
bf:f9:de:62:ba:a4:f6:7a:4f:39:00:42:75:ab:c5:7f:a1:ce:
25:80:b1:b7:b7:04:9e:27:f7:cd:b6:67:c0:7a:a7:66:a5:8a:
00:ce:4a:a7:6f:ab:02:aa:58:98:c6:c7:83:20:1b:7c:71:fb:
0e:e9:8c:19:d9:90:39:ab:bf:d8:ed:51:ea:4d:e8:b8:ae:6c:
d6:60:39:e1:6a:d5:a3:39:d7:af:67:4e:e5:77:69:8a:37:23:
f7:39:32:e4:90:59:e2:9a:c3:85:1d:42:b3:f3:33:bf:2d:67:
fe:b8:c6:45:49:64:0d:24:af:9e:4a:a5:42:db:18:b7:8c:46:
72:5a:38:25:b2:ce:e2:74:c2:58:e8:33:8a:6f:0c:2a:55:29:
80:0f:3a:af:e6:3c:3c:eb:17:b2:37:91:bf:f5:ef:6d:2a:54:
b8:f5:74:de:8a:b6:ee:d1:7c:d0:2b:ac:a3:76:35:29:da:bb:
ce:a2:d4:ab:ea:cb:a9:49:34:8a:53:7c:92:79:e0:b4:dc:c2:
d3:ac:bc:a8:8f:b7:c1:ef:30:21:89:6b:f3:6b:83:73:86:22:
88:9c:b9:cd:be:ed:7c:b3:fa:57:8c:d7:6e:fb:54:26:dd:17:
70:e8:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:07:42 2025 by rpki-client