Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ogqAyxB_-7VsufGykZl0bnq2bys.roa
File: ogqAyxB_-7VsufGykZl0bnq2bys.roa (raw, json)
Hash identifier: 0xOB+yZVpDzj4hEU1OSIxLO/aT4Lywbza0zMswrzaug=
Subject key identifier: A2:0A:80:CB:10:7F:FB:B5:6C:B9:F1:B2:91:99:74:6E:7A:B6:6F:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C5DE8D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ogqAyxB_-7VsufGykZl0bnq2bys.roa
Signing time: Mon 13 Jun 2022 12:14:46 +0000
ROA not before: Mon 13 Jun 2022 12:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354964694 (0x8c5de8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 12:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a20a80cb107ffbb56cb9f1b29199746e7ab66f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:51:a1:8a:17:97:af:78:3d:8a:58:0e:f0:
4e:83:ac:5b:90:e6:56:28:3c:e9:70:4e:1d:56:bd:
7b:fe:56:6e:20:e7:6d:90:0f:e6:d6:a5:74:e6:c8:
55:10:cb:66:0f:1e:c2:05:a5:96:f2:31:58:b1:07:
b6:98:8d:46:db:e8:34:e8:8b:eb:de:56:95:86:f8:
be:e6:c6:43:9a:19:2d:dd:8b:fc:1c:8f:63:06:18:
b2:1b:f8:07:16:a2:e3:cd:d6:64:f8:5b:a0:6b:d5:
dc:35:9c:64:f7:d6:7e:59:0a:69:18:67:d9:c3:d9:
43:d9:01:22:22:08:61:ba:86:d8:20:ed:d4:00:43:
c3:0b:bd:ff:26:c3:79:65:e8:3e:bf:bb:d5:39:3b:
8c:6e:29:c8:54:44:1e:27:1b:be:9c:9e:74:ff:a8:
8d:13:6c:07:c7:08:ce:93:e6:cb:88:40:26:10:e4:
a7:cd:fc:e1:0f:cd:1a:84:1f:95:6e:64:44:c7:2d:
fd:8e:38:b5:75:1e:93:ad:a1:71:52:1e:03:a0:6c:
16:58:ae:82:96:88:f7:94:d9:42:7e:4f:33:9d:91:
4f:93:19:33:da:75:1e:12:4d:17:a9:dc:0b:ae:01:
85:3d:48:78:38:eb:6e:7a:58:1d:44:c8:28:63:45:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:80:CB:10:7F:FB:B5:6C:B9:F1:B2:91:99:74:6E:7A:B6:6F:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ogqAyxB_-7VsufGykZl0bnq2bys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:88:e1:5a:91:83:3b:30:19:54:9c:84:04:df:65:a7:b8:01:
e2:8f:6d:ec:0c:ae:ba:65:9b:2a:ff:91:91:e1:df:93:60:76:
14:3b:22:e0:1c:5a:5c:62:03:55:bb:ed:e3:02:89:75:12:ec:
14:fe:db:04:8c:c6:ac:54:bc:71:b8:25:cc:1c:3b:92:1a:5b:
8e:e3:d6:30:16:0f:41:fe:ea:8e:43:94:f8:8c:de:82:bf:6a:
27:44:42:d1:7e:f5:f0:7b:5c:3a:af:ff:e4:b9:70:57:be:8f:
ce:a4:ec:69:c3:ee:b0:37:8e:c6:c4:17:45:58:a1:1c:01:84:
ff:8b:59:8b:4b:8c:71:91:ba:59:f7:2b:89:c9:85:6f:db:03:
2a:fa:4d:e9:89:7e:41:29:77:e4:0a:27:0f:73:47:75:8e:81:
dc:42:9d:ca:c2:92:8b:51:9e:7e:17:2b:29:84:bb:55:db:ea:
0d:14:b7:24:ad:b7:13:e4:26:ee:58:4e:2b:9d:95:80:a1:12:
02:5c:b7:76:47:e1:9e:33:46:9f:f3:7d:f7:83:cf:7a:34:a4:
0a:c9:8f:eb:cc:e8:aa:b7:7a:8a:0c:54:92:2b:dd:e2:f4:50:
34:1f:2c:b0:3d:2e:be:6b:da:8c:4a:44:68:e2:1b:2c:e2:19:
13:1e:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:16:59 2025 by rpki-client