Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/og-kSvGMmDKw0QHzD1cUzAbctus.roa
File: og-kSvGMmDKw0QHzD1cUzAbctus.roa (raw, json)
Hash identifier: GDsokwoeEib/ShN779VTSgakGJ6ilJIz3fgZ41u6pU8=
Subject key identifier: A2:0F:A4:4A:F1:8C:98:32:B0:D1:01:F3:0F:57:14:CC:06:DC:B6:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CBA944B0AAEDBFA1D63A7D54B38A8139
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/og-kSvGMmDKw0QHzD1cUzAbctus.roa
Signing time: Fri 10 Mar 2023 13:15:13 +0000
ROA not before: Fri 10 Mar 2023 13:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:a9:44:b0:aa:ed:bf:a1:d6:3a:7d:54:b3:8a:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 13:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a20fa44af18c9832b0d101f30f5714cc06dcb6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:fe:44:30:4c:3d:53:44:0a:8c:c8:7c:b4:
e5:94:c3:7b:bb:1a:b2:1d:a3:06:e4:7b:e0:87:ce:
6b:91:40:bb:4f:d9:93:51:57:d6:97:a7:ea:82:dd:
3a:e7:ce:52:03:54:5f:48:32:89:79:55:a5:2d:ab:
8f:cb:53:a6:7c:ac:39:ab:7c:23:ab:c1:c1:ef:53:
a3:7f:af:84:bd:ac:54:29:cf:0f:ef:f3:8d:20:32:
8b:26:02:a6:03:9f:44:39:f3:7f:3f:95:9a:63:02:
14:ee:ad:51:d8:32:3d:a7:46:08:1a:8d:a0:7b:a1:
ee:ee:89:c8:c6:ff:1a:51:9f:3d:4e:3d:47:94:8e:
93:56:58:58:82:96:6d:4f:c4:fc:b7:a1:0d:31:5c:
8d:00:56:c6:4f:b9:01:37:f9:5f:05:13:ee:04:1c:
91:8f:75:06:9e:75:9e:6e:18:d9:4a:0c:4c:38:3b:
4e:1c:2b:5f:0e:f5:51:fc:68:7d:2a:b5:7c:cd:f5:
65:4c:f3:d9:8d:d3:8b:7c:03:ae:17:a9:15:f3:7b:
e4:63:75:39:94:f9:ad:47:f0:58:e9:69:42:05:86:
02:86:e5:7d:87:41:da:9a:37:e6:43:7b:80:33:44:
e8:99:68:99:10:c8:57:c5:37:0c:31:c8:ae:0f:30:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:A4:4A:F1:8C:98:32:B0:D1:01:F3:0F:57:14:CC:06:DC:B6:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/og-kSvGMmDKw0QHzD1cUzAbctus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:03:87:10:fe:6f:bc:8a:64:f7:3c:a2:22:db:df:0e:87:c6:
f3:5a:27:ac:70:32:4c:f4:af:84:70:f7:c5:aa:05:a7:48:c5:
5d:e8:d4:2d:58:4b:fb:c9:ec:45:e6:c4:78:a4:bb:c0:60:81:
a6:9e:d7:68:5e:c8:8f:76:bc:67:6a:86:6d:b6:14:c6:08:a4:
4f:a2:84:49:fb:57:ad:b2:a6:1d:8c:22:89:77:9e:1a:78:b2:
80:dc:af:c1:77:f9:a4:fd:8b:c6:b4:16:77:64:5e:8a:72:4a:
bb:3c:e6:1e:50:60:2f:48:fe:47:81:6a:55:e8:fd:18:26:4f:
9b:ca:97:7f:9f:37:71:93:ba:a7:b6:02:2c:8e:c5:d0:ba:bc:
e5:69:94:d9:5e:31:c0:cd:95:44:3d:7d:be:ef:d6:99:bd:02:
80:f4:de:a6:54:2a:45:2d:73:6d:f0:41:db:11:25:a6:71:01:
a6:df:ba:f5:2e:71:6f:16:7b:71:00:d6:db:83:d2:98:71:4c:
a4:30:cb:35:47:2f:ac:40:ab:d7:3b:c9:a3:2f:e1:dd:c0:e8:
32:0d:d9:01:f1:a0:17:e8:e6:5b:18:64:da:93:7d:11:03:25:
a0:2d:23:4d:dc:b9:10:ec:18:cd:12:4d:e1:1e:24:e1:06:d3:
db:ce:de:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:16:41 2025 by rpki-client