Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/of0bzwmYVVF-PNigD7IVmBJoD38.roa
File: of0bzwmYVVF-PNigD7IVmBJoD38.roa (raw, json)
Hash identifier: +RDbeQHN2h3A1m88WYVU4mTHr6ij449+rtXKjsPLJRI=
Subject key identifier: A1:FD:1B:CF:09:98:55:51:7E:3C:D8:A0:0F:B2:15:98:12:68:0F:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D212118C2387244F76DADF55B7D4DA20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/of0bzwmYVVF-PNigD7IVmBJoD38.roa
Signing time: Sat 21 Jan 2023 02:04:37 +0000
ROA not before: Sat 21 Jan 2023 02:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:d211:bea4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d2:12:11:8c:23:87:24:4f:76:da:df:55:b7:d4:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 02:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1fd1bcf099855517e3cd8a00fb2159812680f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:68:01:2d:35:ae:0f:0f:db:ae:5c:e8:f3:
8d:f7:d0:41:aa:ec:93:2e:7d:51:d8:8c:67:98:5d:
06:92:5b:6b:57:1e:62:b3:94:d3:60:6f:76:b8:3c:
4f:5f:74:88:04:1b:05:77:2a:9e:51:ae:ef:ed:50:
ad:c0:85:17:1f:ab:f8:df:a2:6a:4b:d8:6e:80:d4:
f1:6e:33:00:6d:0f:58:78:31:a9:d4:e7:ce:b0:4b:
d6:b7:5c:c2:c1:fb:ae:81:27:1b:18:83:86:f8:e1:
5c:17:27:b9:44:55:ab:45:06:bf:9d:37:95:b6:7b:
46:1e:cf:f1:52:1e:c4:18:5f:e2:88:a9:19:e8:a0:
6a:c1:70:8b:ec:46:a5:36:e1:3a:f6:6c:68:a9:13:
04:0d:05:23:eb:2a:d0:a3:9a:11:66:56:7e:46:0b:
30:fe:b6:65:a5:b9:48:d0:0c:a5:ff:b5:75:32:1d:
f0:0c:be:29:d1:04:52:49:57:1b:8d:dd:81:96:90:
18:16:2f:e4:32:95:8d:bb:04:77:ca:0a:47:32:ea:
22:eb:ca:f2:fb:75:9d:a8:bd:a7:8c:ed:7f:db:56:
b7:c4:25:e4:9a:36:ee:45:e9:30:85:ff:a8:77:88:
52:48:8e:9a:c5:97:0b:34:84:8a:5c:37:f7:cd:9e:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FD:1B:CF:09:98:55:51:7E:3C:D8:A0:0F:B2:15:98:12:68:0F:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/of0bzwmYVVF-PNigD7IVmBJoD38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:65:a1:15:c4:e0:01:c2:e7:46:9f:34:c5:86:6a:9c:15:ea:
f4:8b:f1:b2:1c:d0:90:d6:5a:30:a0:d5:cf:94:a1:0d:49:d4:
50:d8:40:f8:95:85:32:a7:e6:e9:da:01:14:f4:12:e3:7b:11:
13:01:fd:97:b3:54:47:9a:60:be:f0:69:98:90:fe:49:21:b3:
27:47:81:21:77:f1:00:bb:fb:a3:cd:35:be:4f:71:c5:7c:83:
46:62:c5:18:bc:3d:86:d6:1f:54:33:23:75:39:73:58:50:a3:
a4:c0:ed:e6:6e:db:e7:57:99:83:08:f8:fb:9b:b5:b3:bf:07:
ab:b6:0b:a6:2b:28:18:ca:1a:da:8c:4a:e6:ee:39:3a:e4:51:
3c:87:5d:e7:46:56:fd:c3:b1:11:e4:bd:7a:fc:99:a6:18:8a:
a5:dd:61:ea:43:ee:17:f8:f3:ce:cf:97:b4:db:cd:f6:38:25:
a5:e6:a7:17:1c:8c:c3:1b:81:9f:28:4f:3a:1a:9b:f1:6e:f0:
bf:53:d7:1e:7b:63:e6:03:83:98:1e:4f:33:7d:e4:dd:fa:2b:
d8:aa:e3:e2:f8:58:d9:21:44:76:69:a1:15:9b:a6:5c:0c:3e:
8c:8b:13:9e:71:73:52:2a:9a:2a:11:c5:6e:c4:12:6c:9c:40:
ea:89:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:01:19 2025 by rpki-client