Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oaRhtn6S2Lui--b9FeMzDYrrF6g.roa
File: oaRhtn6S2Lui--b9FeMzDYrrF6g.roa (raw, json)
Hash identifier: jv28YPgcg2SuHZdniieaLMJsTJceD+K9t0nEnAj1o7I=
Subject key identifier: A1:A4:61:B6:7E:92:D8:BB:A2:FB:E6:FD:15:E3:33:0D:8A:EB:17:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870F07D9D4D1690FB96FEEA15791105D47
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oaRhtn6S2Lui--b9FeMzDYrrF6g.roa
Signing time: Thu 23 Mar 2023 15:13:05 +0000
ROA not before: Thu 23 Mar 2023 15:13:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:07:d9:d4:d1:69:0f:b9:6f:ee:a1:57:91:10:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 15:13:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a461b67e92d8bba2fbe6fd15e3330d8aeb17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:51:3e:cc:20:96:43:ab:d6:cf:4a:72:43:
e5:94:09:b2:c1:10:8b:71:e2:bb:f6:94:04:c0:06:
55:aa:a8:20:1d:02:54:8d:1e:ad:56:dd:fd:2b:4f:
44:94:96:bf:1f:01:e1:7d:b3:69:dc:f7:5e:43:3a:
db:f7:69:66:59:13:aa:e6:08:c7:9e:fa:33:5a:3d:
26:0c:13:cb:05:98:03:07:65:44:7e:64:34:df:3c:
c7:91:95:9a:ac:27:99:45:2c:4b:97:43:1e:0a:3d:
99:69:68:a4:ec:89:3c:4f:4e:eb:ed:c5:1f:77:99:
08:65:67:6e:c0:63:ec:4d:d0:95:cb:3b:c3:12:42:
27:f4:77:1a:8d:b3:0b:d7:68:f9:24:69:e7:b4:01:
de:fa:76:3f:05:7e:27:7d:90:ca:63:53:f5:ad:f9:
a3:f1:f3:76:b5:2b:16:72:b2:c7:e6:c3:78:e2:32:
ff:d6:b2:97:02:93:1a:2d:c1:60:bd:ed:fe:a3:70:
af:ac:28:83:4a:ca:60:e0:44:5f:f2:71:70:34:2b:
b5:43:d9:8f:0a:27:a3:e2:6c:e3:19:b8:d4:8a:d7:
94:3e:50:a6:60:7e:51:fd:18:0e:7e:25:41:f0:6c:
89:16:5d:de:a3:e4:59:91:6d:a6:27:b7:fd:98:b1:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:61:B6:7E:92:D8:BB:A2:FB:E6:FD:15:E3:33:0D:8A:EB:17:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oaRhtn6S2Lui--b9FeMzDYrrF6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:94:b7:e6:29:78:a1:d3:e1:29:0b:cc:e8:2b:d9:7b:41:a3:
d4:c4:5c:3e:a9:82:75:03:a9:a1:c5:52:6f:7b:3d:f9:b5:d8:
3a:79:a5:c9:eb:c5:0c:7e:d5:c0:7c:7a:3f:09:dd:9f:ad:cc:
7c:98:79:8f:33:03:88:8b:2f:1d:2f:95:b4:08:f0:65:d5:76:
3b:da:6a:55:60:45:55:e8:18:46:cc:5c:31:04:ee:95:a2:b3:
f4:38:fb:04:3f:36:4a:92:22:53:49:49:cd:e7:76:4b:c4:66:
e5:8a:da:df:da:22:22:fe:9f:28:74:67:67:b0:3c:e3:1c:f2:
64:bf:d0:56:0e:4b:2f:70:f4:a5:b9:1c:8d:77:32:7b:80:d3:
a3:97:46:42:dd:1b:59:c9:37:3a:ca:ba:49:0a:99:fd:90:0a:
9b:af:3f:9b:6c:e4:32:1d:0f:6f:fc:a8:a4:f4:05:6f:dc:11:
ff:92:5b:80:e0:46:56:16:b3:b3:57:ed:d5:90:a7:99:b3:47:
28:4c:92:8b:a9:ce:01:a9:64:21:bf:cf:66:b4:17:6c:cd:63:
3e:9c:b6:52:b9:e2:ec:ac:5c:e0:c7:ea:8c:79:d3:68:e6:98:
5b:fa:ec:b2:7a:18:37:79:3d:0b:01:3c:38:60:1d:3a:9a:9a:
52:31:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:19:35 2025 by rpki-client