Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ofCwMEaDMCkp6tqUSh9GchXb0co.roa
File: ofCwMEaDMCkp6tqUSh9GchXb0co.roa (raw, json)
Hash identifier: /AkGWyAOPXireC6T7OjNxSIK5AD87uNLdlAYyqxr2eE=
Subject key identifier: A1:F0:B0:30:46:83:30:29:29:EA:DA:94:4A:1F:46:72:15:DB:D1:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B585798216364598778942181B09B047
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ofCwMEaDMCkp6tqUSh9GchXb0co.roa
Signing time: Tue 13 Jun 2023 16:10:03 +0000
ROA not before: Tue 13 Jun 2023 16:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:85:79:82:16:36:45:98:77:89:42:18:1b:09:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 16:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f0b0304683302929eada944a1f467215dbd1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:c7:38:9b:e9:9d:20:d7:0a:05:d8:c4:8e:
0a:c2:de:57:47:59:88:7c:45:40:aa:02:c2:ef:ce:
59:56:aa:ed:03:9e:a4:99:73:e8:09:44:49:b5:03:
74:c4:21:dd:26:8d:8f:97:4a:98:b2:ea:22:54:b0:
8b:7f:35:ec:71:df:8d:58:90:a5:06:a1:9f:22:7d:
c9:22:59:ff:c3:15:b9:47:d9:72:7e:84:0b:3f:c2:
fb:32:1d:de:0f:ed:dc:54:63:1a:08:1a:8a:65:57:
f6:60:fa:32:07:65:bd:f1:85:ca:3e:5f:fa:52:4f:
c8:26:27:9e:32:66:c9:9d:86:3a:03:76:cd:f0:7e:
37:59:c8:00:1e:60:af:e6:a2:ce:49:a4:6b:09:04:
ef:c8:4f:fc:7c:f0:fd:d7:34:96:99:bb:64:96:b5:
f6:a3:71:a4:6f:0d:25:13:bc:5a:d2:03:1b:4d:6f:
72:2e:79:07:fc:90:76:2d:a3:29:80:2d:8f:7a:29:
cd:10:ae:56:56:b1:b1:3d:7c:45:05:69:77:54:b2:
e6:23:87:bb:7e:4a:b7:89:4f:2c:b1:10:de:4c:94:
82:87:8c:d1:b9:9a:a5:e6:2c:52:5c:f5:47:58:b7:
14:a3:a0:ec:31:b4:ef:bb:d6:c9:e0:19:3e:26:0d:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:B0:30:46:83:30:29:29:EA:DA:94:4A:1F:46:72:15:DB:D1:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ofCwMEaDMCkp6tqUSh9GchXb0co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:32:23:54:ba:15:aa:9e:e9:4d:bb:82:08:64:21:b4:95:52:
0e:9b:70:d4:c1:f7:52:01:e5:06:3f:9b:ad:0c:77:5c:95:78:
f2:29:a4:9c:31:6f:f7:7d:81:29:28:3b:5a:05:ab:11:55:94:
56:8f:9d:dc:ab:61:29:00:ea:d8:db:e1:1e:c2:44:f5:ba:15:
e9:cd:29:f9:f9:d2:2b:e5:0a:7b:86:71:cb:fc:54:ee:4d:52:
ac:0c:b6:5e:bb:08:57:00:59:2b:b3:1e:2f:a1:e8:46:9e:37:
e3:3d:2f:b6:06:a3:53:37:3a:43:e5:2c:9f:77:11:88:75:a3:
75:be:2e:ed:95:e3:5d:c0:ca:7f:02:9a:8c:a1:b3:19:97:05:
3e:b2:41:bc:b7:2c:24:46:61:91:59:42:ac:0e:d8:db:5e:40:
a6:ee:3a:f7:0e:4a:18:d7:42:86:2b:27:a7:ab:ce:2e:1d:67:
eb:16:7a:74:a5:84:77:16:1d:f7:30:f2:bb:95:35:05:71:bd:
cc:fe:7f:39:22:fe:19:d1:0d:6d:f9:af:cc:17:80:f2:5e:4c:
61:49:b3:76:34:a0:77:48:31:3d:1a:7e:bd:83:97:3e:0b:fe:
ef:6a:24:3b:9f:62:7a:d6:35:e5:28:67:e6:5e:b4:dd:d2:91:
f3:62:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:40:10 2025 by rpki-client