Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/octQoBvlqc53F_-tUTDw2zWquqc.roa
File: octQoBvlqc53F_-tUTDw2zWquqc.roa (raw, json)
Hash identifier: xR/m+IYOxmGXnsLH+gjRhLZdEI445URTgUbR8wRcddU=
Subject key identifier: A1:CB:50:A0:1B:E5:A9:CE:77:17:FF:AD:51:30:F0:DB:35:AA:BA:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C4CD51A575B769CC56AA41CFE73611EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/octQoBvlqc53F_-tUTDw2zWquqc.roa
Signing time: Tue 29 Nov 2022 19:11:40 +0000
ROA not before: Tue 29 Nov 2022 19:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:cd:51:a5:75:b7:69:cc:56:aa:41:cf:e7:36:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 19:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1cb50a01be5a9ce7717ffad5130f0db35aabaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:a4:06:b0:d3:04:46:40:e0:be:6e:40:57:
29:4c:a8:95:16:e8:a8:9a:c8:ac:89:9f:eb:fa:1c:
23:b9:08:a8:e0:05:df:93:d0:9a:5b:09:88:db:ae:
5b:8e:ba:fa:df:67:19:7d:60:36:45:b6:7d:24:7f:
8e:60:ec:89:39:14:a4:ae:6f:04:1f:fa:68:5a:c3:
07:ac:37:67:05:4a:0c:3c:63:cc:3f:df:62:d4:4f:
72:cb:09:b9:9a:88:87:61:49:52:da:91:65:ed:32:
54:c2:06:cf:17:8d:89:d3:f3:42:29:6a:14:a0:c4:
af:1a:c7:36:49:ff:5d:aa:cd:1b:fc:75:e3:f9:01:
fe:4a:7d:9e:2f:ee:49:de:3d:59:15:1b:4a:ce:7a:
f4:0f:d4:e0:98:35:58:05:2f:dc:91:9c:09:08:df:
a2:b0:c5:d6:b9:0c:74:1b:db:7e:3e:a8:43:2c:c6:
f6:12:c8:77:50:c7:9a:b1:81:86:84:52:4e:6b:57:
e4:61:ef:1f:d3:70:e5:ee:00:cf:fb:42:11:5b:ce:
4a:1a:51:b0:68:de:68:f0:d2:cd:5e:44:8c:ae:2e:
8a:a3:b0:d7:e3:2d:36:13:f5:bb:0f:a5:d3:1e:13:
5c:3b:02:37:ba:50:c8:9a:4f:25:07:b7:9e:ce:9d:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:50:A0:1B:E5:A9:CE:77:17:FF:AD:51:30:F0:DB:35:AA:BA:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/octQoBvlqc53F_-tUTDw2zWquqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:47:15:f9:83:bf:10:04:71:0d:24:07:c2:f4:8f:7d:f9:cc:
e1:34:52:7c:7d:16:24:3c:30:d2:68:a9:85:a3:12:6b:34:36:
5e:53:67:78:3e:93:2d:5a:29:af:aa:a2:17:4a:fb:6c:0e:11:
b1:af:76:5b:20:ad:8f:57:08:e9:ba:0b:d4:e5:b6:eb:88:69:
84:85:75:c9:13:0c:92:ba:f0:23:a0:b5:5b:a8:66:c8:5b:f7:
be:66:f0:cc:25:e7:af:df:39:be:27:90:51:74:ad:46:16:f3:
87:99:bc:92:2f:1a:04:ad:53:be:be:29:10:bd:9c:30:09:2a:
f1:a3:16:b8:b3:78:a3:bd:73:49:0f:9d:8e:54:9a:90:56:4a:
a0:d9:ca:2e:bd:cb:14:e7:46:fb:1e:31:9b:40:c3:02:8e:5b:
c9:e4:18:c1:2b:1b:94:62:0c:0d:fe:8b:cb:70:19:33:db:95:
fc:bc:cf:75:e9:de:92:04:99:92:c0:7e:c2:66:a4:25:2b:fc:
be:32:a9:44:3f:54:ae:d2:ec:c4:29:6e:3d:49:5d:6c:67:e9:
84:3e:80:cc:95:b4:df:11:a9:e9:11:6e:ce:e1:ef:ab:88:80:
c1:ae:74:81:0e:f5:d4:7f:29:8c:13:d0:e1:8b:d3:ea:83:fc:
bb:f6:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:44 2025 by rpki-client