Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oiAp2lUcuJPIk0ucikMclre1vpk.roa
File: oiAp2lUcuJPIk0ucikMclre1vpk.roa (raw, json)
Hash identifier: Op2vYZKtQyjy4m9y35ZCLsCD4Y2HCrRFsyizzE0vIEk=
Subject key identifier: A2:20:29:DA:55:1C:B8:93:C8:93:4B:9C:8A:43:1C:96:B7:B5:BE:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 92681499
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oiAp2lUcuJPIk0ucikMclre1vpk.roa
Signing time: Mon 04 Jul 2022 21:09:25 +0000
ROA not before: Mon 04 Jul 2022 21:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456294553 (0x92681499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 21:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a22029da551cb893c8934b9c8a431c96b7b5be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:de:66:58:83:9b:05:42:9d:2e:14:62:1b:
86:97:70:6c:d8:ed:bb:d8:5c:af:84:fd:38:17:39:
1c:f1:8f:7b:79:e3:5e:e4:33:7f:e5:59:cc:ed:49:
1f:e3:ad:8f:64:ea:fc:a9:84:c4:b0:5b:55:d8:40:
5f:1a:95:6d:0c:54:9a:42:78:fb:15:80:77:ca:59:
80:48:6d:3a:cb:6a:df:fb:56:d3:38:69:92:5d:b4:
ee:e2:a8:bc:93:3f:7b:94:91:9e:1f:4f:f4:81:be:
a5:77:93:c4:79:fb:ed:84:91:b7:f5:f0:b9:0a:67:
a3:f6:37:67:37:50:70:70:78:5c:eb:69:67:4d:8f:
67:1e:26:96:ae:24:48:38:7c:80:15:e0:9f:22:07:
a5:20:93:2c:2b:d7:1d:7c:c4:bc:ab:16:50:f0:8e:
12:61:83:f6:33:b0:9b:d7:1d:03:16:72:9f:f1:62:
28:23:26:01:9d:95:93:0b:1c:ab:8d:0f:d1:8f:27:
05:62:04:a7:02:d8:d7:14:23:c0:fb:a0:c3:2b:ba:
1c:a9:35:0b:50:32:e8:fb:07:e4:85:e1:eb:53:20:
34:e6:23:98:7c:ab:d8:30:92:91:4d:b2:42:50:0b:
db:13:f5:a3:6d:6d:8e:47:1d:b0:70:f3:84:40:14:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:29:DA:55:1C:B8:93:C8:93:4B:9C:8A:43:1C:96:B7:B5:BE:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oiAp2lUcuJPIk0ucikMclre1vpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:2e:47:91:2f:8d:4c:9c:e9:84:98:24:6f:d0:22:10:de:eb:
dc:83:cb:8c:03:35:09:33:3d:96:52:96:28:a8:9c:1e:ca:dd:
fb:b1:8c:2b:d7:f1:92:64:ac:f1:2f:09:0d:17:11:50:c3:17:
28:97:f0:eb:53:8a:16:24:a6:1a:b8:89:a2:10:cc:b8:8a:4b:
6a:8f:d8:35:5e:51:18:c6:ce:0e:db:80:1d:4e:dd:65:00:2f:
d6:13:1a:c3:6c:75:d1:d0:54:53:84:68:56:b7:8c:b0:b2:dd:
c2:7a:0c:c9:3a:fa:66:68:c4:fa:00:10:1c:ed:06:64:20:cc:
f7:d2:d6:a9:f2:de:dd:96:29:90:df:0a:a8:0d:8f:1d:24:b2:
7b:cf:dd:28:a1:18:53:ce:96:74:4d:c5:d3:68:07:70:da:56:
84:c8:61:9c:1a:f4:e5:82:8e:8d:5e:ca:4b:c9:76:fd:09:48:
85:27:96:1c:a5:77:0f:a1:a4:06:be:64:eb:9d:50:e8:96:5e:
ae:96:eb:12:27:45:8f:cc:d7:88:ba:4c:48:6d:75:7a:8a:12:
50:6b:48:1a:53:fe:c4:a9:2c:1c:0d:6a:36:a4:2f:4c:31:f7:
75:07:ae:2a:55:dc:70:9b:44:e3:63:49:e0:92:a2:0e:31:2d:
8e:85:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:31 2025 by rpki-client