Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ocgZl4U_0pzCEiVbttdtRQA_pM8.roa
File: ocgZl4U_0pzCEiVbttdtRQA_pM8.roa (raw, json)
Hash identifier: YuCZXkUJhPRsN3Op3z2NWiwlIYDuf60xWy4Bq3VbA/Q=
Subject key identifier: A1:C8:19:97:85:3F:D2:9C:C2:12:25:5B:B6:D7:6D:45:00:3F:A4:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887FA91626793CB4F4C7AF90F3BC381DFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ocgZl4U_0pzCEiVbttdtRQA_pM8.roa
Signing time: Sat 03 Jun 2023 05:09:27 +0000
ROA not before: Sat 03 Jun 2023 05:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7f:a9:16:26:79:3c:b4:f4:c7:af:90:f3:bc:38:1d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 05:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1c81997853fd29cc212255bb6d76d45003fa4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:ae:2f:5f:21:c7:3a:13:f2:d3:1f:96:3d:
63:4e:26:66:aa:53:7f:f0:d2:bf:43:c7:e1:79:b8:
ff:8c:67:26:23:f7:48:68:10:d8:1c:d2:ab:2c:7b:
ca:a8:07:63:4a:5c:91:ed:d9:f5:48:c4:19:66:6d:
c0:8c:98:d3:7b:23:4e:f4:ed:b0:d5:ac:e4:5e:37:
92:dd:2d:99:44:72:24:90:c3:fd:c6:7b:a3:14:13:
13:6b:15:e4:a0:a2:93:f1:46:2f:20:57:f9:e3:ee:
51:25:50:c7:0f:2b:fc:11:de:42:6c:39:e8:aa:65:
21:f7:b6:a4:7d:33:c5:87:3c:70:2c:99:89:98:52:
6c:07:41:66:e6:4c:33:75:2a:63:d0:02:ac:94:44:
cc:d5:27:e5:85:23:d2:94:68:45:21:e0:fc:39:f2:
f4:83:08:12:59:70:76:87:a9:c2:ce:4e:2e:eb:ac:
6b:ae:9a:4b:46:25:b7:10:67:4e:6f:d0:f1:96:59:
95:4c:91:0c:f2:75:82:b0:3d:12:da:33:64:be:da:
a4:dc:18:b3:2d:f2:57:b8:ef:c9:6b:f1:1f:a8:a5:
20:92:69:a7:9e:37:0d:a6:f9:43:74:93:b5:2c:ad:
9b:36:b2:6b:26:c1:8f:5d:f4:3a:24:2f:e4:be:64:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C8:19:97:85:3F:D2:9C:C2:12:25:5B:B6:D7:6D:45:00:3F:A4:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ocgZl4U_0pzCEiVbttdtRQA_pM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:47:7c:da:ed:77:fc:4a:1b:e9:2c:00:b4:50:ce:ba:ca:e9:
4b:8d:37:0e:05:79:65:97:f5:c1:a2:7e:fd:bf:93:f9:ed:52:
57:f4:63:e9:f9:09:d2:e2:94:ab:e4:f4:17:68:63:7a:c1:cc:
07:97:a8:42:b0:57:5b:80:bf:73:8b:dd:6a:49:07:f1:db:67:
92:09:ec:71:7e:b5:14:5d:b0:3c:58:2e:7e:36:4a:74:40:31:
a3:ed:cf:a2:1a:8d:d4:f2:5e:3a:68:54:f8:d0:be:3a:df:c1:
3f:8f:94:8a:a8:20:82:db:d1:4e:1d:74:ca:cb:cf:3b:2b:09:
50:f1:d6:61:10:29:ae:cf:6e:6c:c9:78:aa:d5:98:58:fc:ab:
d6:ba:08:77:7f:9d:39:3a:53:7c:ae:60:a9:e1:11:bf:cf:4c:
c2:82:78:d4:bc:e2:11:8c:a8:5c:a3:0d:12:64:17:85:f7:23:
4c:c7:0d:cd:c7:32:88:42:1a:dc:81:7f:a2:39:83:01:ca:af:
8c:85:4a:f0:51:88:26:ba:ae:07:16:8e:2c:79:4d:59:e8:4b:
fd:de:74:e1:ed:ad:8f:41:40:f7:2a:f2:ee:1a:b8:25:fb:ee:
79:e6:d6:df:59:02:8a:d8:d0:55:ff:db:42:6f:bb:6b:1c:61:
6b:69:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:21:48 2025 by rpki-client