Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oZuMS5V9_XLKmYefw8X67-vqHgg.roa
File: oZuMS5V9_XLKmYefw8X67-vqHgg.roa (raw, json)
Hash identifier: alhEtd4HHOw10mud+lTFRw9mE6Kw+wXq1E5JmhBZCzM=
Subject key identifier: A1:9B:8C:4B:95:7D:FD:72:CA:99:87:9F:C3:C5:FA:EF:EB:EA:1E:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895ABA1660C0927167CD6AA5B7C22BCF78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oZuMS5V9_XLKmYefw8X67-vqHgg.roa
Signing time: Sat 15 Jul 2023 18:04:52 +0000
ROA not before: Sat 15 Jul 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:5ab9:7e69/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:ba:16:60:c0:92:71:67:cd:6a:a5:b7:c2:2b:cf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19b8c4b957dfd72ca99879fc3c5faefebea1e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:da:79:49:3a:36:bb:63:c0:df:37:db:7a:
9f:ae:9b:f4:d8:93:ef:32:fe:a9:db:55:83:08:0a:
70:bc:f9:59:29:5e:8d:96:b4:76:fb:6d:33:5c:f2:
0b:c9:b9:8c:80:22:ed:48:7e:b0:dd:0e:cb:94:4e:
d4:c9:62:9f:a2:6c:4a:a0:ae:ec:58:05:2a:4b:c9:
67:28:be:3c:94:dc:c5:1a:f9:9c:aa:0c:9d:55:d4:
16:34:52:64:2b:7c:7e:c0:83:2b:00:df:ab:6e:0c:
f4:dd:1b:3b:8e:b5:38:15:74:f8:e2:f3:54:3d:54:
ac:ee:b2:51:4c:50:4e:a7:00:06:89:95:b0:e1:ce:
f0:e3:2a:d3:33:e3:77:84:8d:7d:cc:85:a9:a5:b6:
8b:60:4f:6c:88:00:aa:28:58:da:c3:5c:30:2c:6f:
04:37:68:8f:53:62:83:1c:7b:0d:4e:c0:f3:2c:07:
de:d0:95:3e:ab:fd:ba:d6:b3:e8:f8:24:b5:93:24:
e5:3f:ac:97:51:1c:eb:ec:89:c5:0d:02:6e:cb:56:
5c:6d:18:c8:2a:e2:9d:bb:48:09:1d:1f:82:97:14:
cc:4b:50:79:78:56:33:50:1f:28:4d:46:2b:1d:34:
e6:5a:83:6e:63:88:e3:eb:a8:6c:c0:18:86:5d:8f:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:8C:4B:95:7D:FD:72:CA:99:87:9F:C3:C5:FA:EF:EB:EA:1E:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oZuMS5V9_XLKmYefw8X67-vqHgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e9:29:1a:b1:0f:0b:81:76:e2:18:56:16:09:54:86:ee:f8:
ef:96:09:81:00:a7:17:ed:17:2e:d8:3d:53:e3:84:9a:8f:21:
4f:0e:a6:b4:a4:7f:3b:e1:b2:b3:2a:a8:6e:8c:f1:f1:6d:ca:
1e:0a:8b:ee:54:8a:9e:9f:13:4e:58:ff:a4:9a:55:8c:67:6b:
c5:6b:0e:26:57:6a:60:b9:57:bd:6a:2c:1a:22:35:a9:94:85:
fe:ac:d5:4b:1d:26:52:75:4f:f1:9f:c4:d3:81:de:7e:55:c8:
44:1b:cb:32:01:5b:9e:cd:33:4c:9e:13:03:9c:c6:4a:37:24:
3d:18:24:c1:27:5d:c0:75:7e:9d:d9:35:87:e2:c6:a3:67:00:
4a:09:bf:10:34:c0:05:16:93:1e:e4:67:77:f0:86:7d:0b:ca:
c8:46:17:55:8c:0d:ff:6d:64:f9:fc:ab:31:a8:6d:3e:45:9b:
a6:a8:b2:7f:8a:86:63:1b:23:5d:b4:95:36:48:fa:08:5d:fc:
34:80:8e:e8:f1:99:a2:9d:21:a5:ae:29:a1:1a:7d:eb:b5:73:
33:bb:39:22:6d:64:db:0a:fc:87:e1:92:d0:9e:77:f7:88:5c:
83:0a:9f:46:61:19:b6:a4:d0:aa:61:84:0e:69:b5:37:b6:bc:
b7:52:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:30 2025 by rpki-client